Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa
File:                     EEF3557C75A211EBBCD0587BC4F9AE02.roa (raw, json)
Hash identifier:          FYue8PoamMqo7F//3yfaJFMx07sCioBTeOAwzl4Q7z0=
Subject key identifier:   72:A9:39:14:58:18:68:95:05:CB:33:CE:EE:8D:CD:2B:73:7B:0E:12
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       066A
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa
Signing time:             Sat 16 Mar 2024 23:32:12 +0000
ROA not before:           Sat 16 Mar 2024 23:32:12 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139811
IP address blocks:        103.145.144.0/23 maxlen: 23
                          103.145.144.0/24 maxlen: 24
                          103.145.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: Mar 16 23:32:12 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65f62bfc-1eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:bb:4a:a4:1b:15:ef:57:30:22:41:6b:fc:
                    43:40:91:d0:0d:83:84:c8:6d:84:92:24:6c:c6:66:
                    b8:ac:61:6a:d3:4b:ec:8d:2b:b7:33:7b:72:a2:a3:
                    e0:31:69:50:3c:ff:73:9b:94:0e:d2:7e:0a:73:16:
                    14:0e:d2:d9:c9:32:ff:6d:6b:41:01:c6:34:05:c6:
                    8d:58:6a:0a:2d:a7:d6:08:f8:df:67:aa:df:58:48:
                    b0:39:90:5e:9b:47:d2:8f:36:0f:fa:19:21:95:07:
                    c4:be:5c:a7:25:8f:80:b2:d9:b1:11:71:b7:49:5d:
                    93:93:18:3f:b6:3c:15:b0:29:90:32:47:5c:20:71:
                    17:0e:c4:b9:f6:e5:7c:01:17:1b:fa:67:65:72:6e:
                    92:bc:9f:28:bc:96:5c:e6:53:bb:70:94:21:38:d3:
                    fe:c5:28:b7:c9:a9:fa:96:cf:eb:1a:ba:42:48:49:
                    27:7d:94:92:b4:35:e5:3d:65:81:a9:53:a1:18:4d:
                    ed:98:7b:eb:dc:b6:26:26:67:49:2b:2f:cf:7d:06:
                    04:78:28:e0:fd:9d:a0:f7:16:2c:8b:e0:e1:85:52:
                    8d:f8:60:ed:ba:cb:16:31:00:05:5e:91:6e:d5:f4:
                    ef:68:e2:80:25:ca:97:e6:90:b0:e6:02:66:95:4b:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:39:14:58:18:68:95:05:CB:33:CE:EE:8D:CD:2B:73:7B:0E:12
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/EEF3557C75A211EBBCD0587BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:a2:1e:e7:38:60:29:96:95:b9:1f:82:c6:f9:af:63:13:
         36:66:c8:eb:fc:79:44:39:b2:e5:de:05:79:94:19:78:1f:fc:
         c4:17:6a:14:0d:52:dc:5a:c5:fe:57:5d:76:46:f9:34:2e:fd:
         14:1d:8b:76:5e:6e:4b:bf:72:f1:58:02:81:08:47:6a:6e:bc:
         fd:c9:37:72:94:3e:40:7d:95:7c:7b:8d:05:65:21:b3:57:a6:
         6c:f9:56:64:eb:42:23:43:e7:6f:b0:5e:ed:2b:1a:d5:32:9f:
         ac:a2:32:a8:6e:13:86:56:fa:d5:92:fb:a7:ff:5a:10:4c:d3:
         4c:3d:c3:00:88:24:7e:64:34:f1:c1:9e:c8:4d:7e:c1:48:4d:
         ce:2d:67:a3:8f:37:f1:e4:3d:17:4b:ac:6c:88:d1:07:8b:63:
         29:0e:0a:6e:07:19:40:ef:7f:92:03:8d:da:59:66:21:ca:ed:
         ab:35:93:ad:f1:fd:10:7a:56:90:e7:e7:5e:da:e5:4c:b8:4e:
         70:fe:a1:ee:36:80:a9:a1:bc:75:93:99:06:27:95:d8:84:b1:
         42:ee:0f:1a:d5:09:b1:32:96:68:b2:d6:48:30:5d:ec:1c:f6:
         89:7f:82:ae:b6:cd:2d:38:fb:e6:15:43:80:fe:78:6a:3c:22:
         2c:f9:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:43 2024 by rpki-client on console-fra.rpki-client.org