Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
File:                     C5859C724D7611EFBA188667C4F9AE02.roa (raw, json)
Hash identifier:          CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=
Subject key identifier:   E8:08:05:A4:D8:89:54:DB:3A:73:02:91:B5:DF:9E:CF:AB:BC:66:51
Certificate issuer:       /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial:       3452
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
Signing time:             Mon 29 Jul 2024 06:49:59 +0000
ROA not before:           Mon 29 Jul 2024 06:49:59 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     137854
IP address blocks:        103.115.167.0/24 maxlen: 24
                          103.125.25.0/24 maxlen: 24
                          103.125.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
                          rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13394 (0x3452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
        Validity
            Not Before: Jul 29 06:49:59 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66a73b97-fcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:c3:7f:3c:ba:41:b5:1a:86:75:c2:fd:cb:
                    7e:19:13:1d:c1:c9:46:c9:43:f6:49:3b:2f:a1:ad:
                    f0:88:bc:c9:7b:00:19:1d:1b:c9:0a:4f:9b:b1:8b:
                    83:29:e4:e8:a5:c0:92:c1:24:16:33:0d:ef:3a:54:
                    66:68:a9:43:44:d7:eb:ac:74:ce:45:95:98:cc:3f:
                    2b:6a:bb:7f:54:85:90:c7:82:f0:f1:b4:0b:60:49:
                    65:a7:db:ae:40:58:38:76:5c:5d:4f:eb:bb:c6:e1:
                    30:2b:53:ff:82:8c:51:95:a1:44:3e:91:66:d1:83:
                    c6:9a:02:19:9e:f7:8c:77:25:c0:2b:0a:d8:f9:02:
                    93:fc:bb:3d:c0:e2:f6:8d:54:b3:67:bb:08:dc:56:
                    dd:2f:4e:74:9c:c2:7e:6f:79:3f:e3:12:b3:8a:5f:
                    7a:84:47:40:3b:da:35:2e:ef:da:31:16:2b:9f:72:
                    7c:fb:39:8a:5b:b0:2a:31:cc:a2:59:90:a4:eb:b1:
                    f3:b1:20:26:e0:6c:32:3b:2a:af:cb:5f:67:30:c0:
                    2f:7c:fd:15:92:ef:5f:41:7c:ec:06:bd:67:61:a9:
                    c4:02:de:c9:91:6e:2b:73:57:ba:0c:25:61:57:e8:
                    2a:0c:f6:0c:fe:63:05:31:ed:0d:5b:c1:0d:68:a2:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:05:A4:D8:89:54:DB:3A:73:02:91:B5:DF:9E:CF:AB:BC:66:51
            X509v3 Authority Key Identifier:
                keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.167.0/24
                  103.125.25.0-103.125.27.255

    Signature Algorithm: sha256WithRSAEncryption
         ea:bb:6f:3a:e7:39:8c:5c:ae:1e:01:c2:87:39:d7:77:8d:92:
         ec:af:64:b6:9f:57:5f:92:5b:10:bc:f4:25:23:85:8f:a5:e0:
         99:25:5e:9f:a5:a7:2d:3e:db:fe:78:57:88:78:19:5e:1f:5b:
         e0:30:4f:32:22:b6:bc:4b:72:c4:58:5a:73:d5:55:1d:13:6e:
         91:b8:89:07:39:82:cf:89:e4:05:81:0a:ee:0b:63:8f:33:e5:
         91:9c:9c:f7:47:98:9e:b5:73:b7:eb:f2:e1:9f:f6:3f:09:61:
         fa:16:fc:3d:46:12:a2:6b:28:f1:62:4b:22:57:a5:b5:cb:c4:
         6f:95:fc:bb:40:e8:43:9f:17:ff:1b:4f:a1:11:6e:85:49:08:
         bf:ee:7d:f4:bb:5e:33:00:54:4e:93:bd:e0:81:b4:14:ee:ac:
         35:53:23:f6:09:d8:b2:38:92:2f:79:da:11:7e:ad:e8:bb:4a:
         a6:f7:73:e6:e2:98:13:f6:9b:3d:8d:26:3d:01:95:d1:b9:0e:
         1f:76:01:d2:d8:ae:0e:7d:81:ed:8d:65:f4:33:5e:8b:d5:c9:
         0a:ad:52:92:0f:66:8c:59:df:36:c5:ec:05:ad:1e:d9:e2:47:
         2d:21:bd:b7:fb:49:74:0e:35:70:fb:ed:35:e1:8c:76:f7:c9:
         3d:05:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:17 2024 by rpki-client on console-ams.rpki-client.org