Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/53C13F547EBA11EF807BF64EC4F9AE02.roa
File:                     53C13F547EBA11EF807BF64EC4F9AE02.roa (raw, json)
Hash identifier:          Zeaxtp0UoFvgyI0HxM/gXSLX2Stj9ybtay4DLBey98g=
Subject key identifier:   05:81:E9:55:DE:42:D5:20:2A:15:8D:9C:3D:B9:A6:D9:56:38:96:FF
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0653
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/53C13F547EBA11EF807BF64EC4F9AE02.roa
Signing time:             Sun 29 Sep 2024 23:27:00 +0000
ROA not before:           Sun 29 Sep 2024 23:27:00 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     150716
IP address blocks:        103.240.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1619 (0x653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep 29 23:27:00 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f9e244-831c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:27:a3:0b:b1:a6:e9:fc:6a:0c:4c:60:8d:
                    65:98:4f:ed:80:4e:0b:26:c6:f9:64:75:db:50:78:
                    48:98:1f:fb:a2:bc:c9:2f:a4:34:30:07:05:2a:fa:
                    c5:f6:af:d4:a3:5a:e3:0e:3b:38:2c:ed:3f:83:0a:
                    74:75:40:5b:6d:fe:a5:cf:43:06:4e:b7:6a:b8:e5:
                    a0:f5:5a:c2:4d:8f:4a:6e:9c:e2:1f:92:69:24:5c:
                    ae:e2:9e:03:69:e5:31:cf:51:96:4c:d7:d0:12:e8:
                    e6:8c:e8:d9:58:99:da:b6:84:b9:29:0c:f3:d7:ec:
                    61:12:f6:c5:86:cf:9b:9e:5a:25:6f:f0:bf:bf:a8:
                    93:80:a1:ac:5e:34:9d:aa:12:5a:ca:22:84:ad:83:
                    8e:87:07:11:b7:e7:df:e8:2b:1b:31:a3:12:8b:d7:
                    55:46:cc:3b:4e:f3:b9:51:f4:05:28:56:be:78:23:
                    fd:bd:d4:71:82:a2:47:6b:4c:6f:97:b5:66:f1:ae:
                    98:fe:e2:58:d8:24:dd:ba:91:b9:e9:83:15:d1:dc:
                    39:fb:e6:01:36:71:a4:05:24:12:43:1a:7f:0b:b2:
                    81:cb:9e:29:98:c6:5d:b2:ca:11:e0:cc:03:2f:44:
                    96:72:21:ef:16:31:ab:83:dd:f4:93:ae:42:71:da:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:E9:55:DE:42:D5:20:2A:15:8D:9C:3D:B9:A6:D9:56:38:96:FF
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/53C13F547EBA11EF807BF64EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b6:93:9b:50:88:9b:fa:77:1b:ba:93:17:31:e4:8d:91:3e:
         6a:c0:a8:e2:f6:15:7e:34:85:23:91:0f:bd:78:f7:d4:29:31:
         9a:8c:7d:bf:e5:db:cb:86:a6:d7:ef:93:0c:84:0d:87:d2:4c:
         cb:ac:37:d7:fb:a2:70:88:b2:3a:c0:7a:61:5f:de:13:a4:52:
         46:40:d6:27:42:ed:af:e5:21:30:46:8c:46:49:82:aa:2b:2b:
         5c:32:f2:dc:85:21:3c:1a:6c:36:3b:41:6d:9f:f6:b2:56:a6:
         05:26:af:6c:2e:7f:8e:ca:11:76:37:5d:34:e4:96:7f:05:37:
         ff:25:66:57:0c:29:d3:c6:7b:7c:ad:bf:ef:b6:5a:da:0f:74:
         82:36:4a:1e:80:d7:80:03:60:50:5e:43:59:32:42:62:c8:90:
         43:bf:3b:8b:85:5f:0f:32:a9:27:6e:7c:2c:aa:b3:f8:05:5c:
         d4:5a:b7:36:cb:c2:16:e1:ec:81:fe:31:99:35:2c:d4:e7:34:
         c5:ce:5e:f1:56:86:4a:fd:5f:1c:2d:10:e5:f1:92:58:9a:e5:
         58:15:85:6c:30:e4:7a:72:de:cb:88:4e:e1:32:d4:43:fe:57:
         25:2f:cf:9b:42:bd:18:bc:6c:b1:dc:48:52:aa:1c:23:4c:c1:
         e0:64:00:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:26 2024 by rpki-client on console-ams.rpki-client.org