Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BEC0C08037011ED9F92B281C4F9AE02.roa
File:                     0BEC0C08037011ED9F92B281C4F9AE02.roa (raw, json)
Hash identifier:          Lu1eg9TgLS2QNu1DEUS3LLCyrSRlF2S6OvanM1Dpmmg=
Subject key identifier:   A2:46:72:CB:DC:68:37:E1:DC:8F:84:41:B4:12:49:96:6F:20:22:F7
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       1737
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BEC0C08037011ED9F92B281C4F9AE02.roa
Signing time:             Wed 28 Feb 2024 17:24:51 +0000
ROA not before:           Wed 28 Feb 2024 17:24:51 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     59254
IP address blocks:        103.224.12.0/24 maxlen: 24
                          103.224.13.0/24 maxlen: 24
                          103.224.14.0/24 maxlen: 24
                          103.224.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 17:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5943 (0x1737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Feb 28 17:24:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65df6c63-e4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:20:8b:45:66:48:1a:da:c3:89:7d:49:b0:
                    10:1b:cd:4d:e7:6c:83:eb:48:19:1b:73:dc:64:53:
                    5f:e1:97:f6:c1:bb:f8:73:c3:ca:27:48:07:0c:12:
                    ac:9c:88:a5:2a:3b:39:f8:90:94:06:2b:d5:c7:96:
                    95:f0:24:80:b8:c9:c8:f1:22:bf:43:ed:8d:b2:42:
                    32:04:66:a7:b0:a6:be:cb:46:60:63:33:20:e5:d2:
                    6f:d0:a2:c6:b8:27:ee:36:06:c7:67:d8:80:d4:aa:
                    41:dc:a6:64:9e:e9:f1:da:50:3b:de:48:96:48:5f:
                    6f:2c:5b:09:67:ca:8f:73:78:55:b6:e1:54:00:53:
                    54:37:22:84:82:69:70:1f:cc:96:34:92:05:9a:03:
                    a9:75:68:37:37:79:57:23:f4:56:aa:07:c1:c5:81:
                    7c:d8:be:4c:93:04:b7:5e:1e:dd:da:c0:cf:88:8c:
                    ee:22:e6:61:28:ae:60:e8:01:df:a4:68:a0:89:5e:
                    f0:7e:f3:ce:ec:f0:10:88:db:d5:f6:26:54:31:3e:
                    71:a3:db:da:6f:b6:e1:a6:e1:e4:c2:1f:41:59:d6:
                    07:61:50:01:8c:7c:b0:9c:16:4b:6e:16:72:8a:36:
                    90:1c:34:80:08:a9:82:21:ab:2e:f5:7a:8a:50:4e:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:46:72:CB:DC:68:37:E1:DC:8F:84:41:B4:12:49:96:6F:20:22:F7
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BEC0C08037011ED9F92B281C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:9d:63:10:c8:52:34:16:53:7f:4e:86:b5:dc:22:aa:22:
         3a:22:1f:4d:91:96:5c:0b:ca:35:34:38:06:03:0b:92:e6:d0:
         8f:b9:8d:df:7a:44:f9:17:08:f6:80:05:f8:cc:9d:86:a4:32:
         b8:40:48:62:8c:7f:48:ac:8c:55:ea:76:aa:6a:6c:a3:f5:f3:
         94:0f:95:35:f6:e1:57:e5:25:ca:c3:1a:99:68:cc:99:31:95:
         1e:08:38:eb:5d:95:02:c4:34:a6:dc:95:fc:4f:39:92:bc:01:
         5e:f8:50:09:ba:a9:ea:04:c3:8b:2f:36:40:0c:53:b5:2b:ac:
         85:42:ae:9a:f4:d0:d6:ad:b3:6b:67:2b:91:da:cf:f8:33:2e:
         78:44:30:b4:ed:b5:9e:a1:f0:4d:95:6a:3c:d5:39:3f:13:c0:
         91:6d:1d:a3:1e:d3:4f:74:fe:ed:b0:09:83:14:3a:21:ac:00:
         32:08:3b:8e:61:6b:21:7a:ab:03:38:26:70:d2:0a:5d:fb:d8:
         12:47:37:3d:27:8a:d2:f4:c6:3b:71:d4:ed:99:0b:03:ec:4c:
         b8:76:b5:2d:87:f6:52:ea:8c:49:a7:bb:5f:01:7a:f4:ea:f6:
         47:ea:75:cd:de:c4:53:43:9c:07:33:cb:16:d4:0b:fa:82:25:
         e0:a4:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:07:55 2024 by rpki-client on console-ams.rpki-client.org