Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
File:                     9D4041FA376411EEB0C70459C4F9AE02.roa (raw, json)
Hash identifier:          ZFtHcBc54ZeKS+b4WzXq0vpdKRKFZcVziUY5NK5/ml8=
Subject key identifier:   78:0D:15:BE:20:56:AE:A7:5E:81:3D:D8:20:A3:2B:FF:3F:F6:90:CA
Certificate issuer:       /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
Certificate serial:       75
Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
Signing time:             Fri 15 Mar 2024 06:39:26 +0000
ROA not before:           Fri 15 Mar 2024 06:39:26 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139285
IP address blocks:        103.148.228.0/23 maxlen: 23
                          103.148.228.0/24 maxlen: 24
                          103.148.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl
                          rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1
        Validity
            Not Before: Mar 15 06:39:26 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f3ed1e-5d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:52:7d:5d:96:06:1c:cb:b2:5e:9b:38:cb:
                    8f:11:42:bc:99:56:ee:64:78:8f:a8:8a:e4:85:4e:
                    3a:7f:c2:91:04:0c:3c:f7:5c:eb:9c:11:a0:85:53:
                    00:82:9c:f6:16:b0:04:38:c0:ee:45:c5:78:2e:55:
                    e8:17:b2:31:c9:a4:2b:92:a2:15:23:d7:a9:79:77:
                    32:5f:37:79:da:41:9a:5e:13:20:2d:1e:4e:7b:00:
                    ae:32:23:df:85:dd:3f:17:96:69:e6:ef:b5:42:1a:
                    85:36:e7:de:07:b2:0f:d9:8b:97:95:42:9c:48:10:
                    b1:19:d1:84:1b:32:0b:35:a0:31:a4:c7:e7:34:04:
                    b4:b0:b2:14:76:a7:76:d0:55:ea:fe:47:5a:c1:a9:
                    5a:6c:ec:c1:b2:20:51:af:5a:9d:34:19:cd:68:3a:
                    fd:72:23:cb:c2:88:96:39:fd:d2:53:f6:ba:05:f6:
                    4f:c0:e8:df:fc:36:01:67:9f:54:6b:1c:77:fc:04:
                    5d:e7:5c:6f:17:f8:50:f9:83:f5:9d:23:b5:51:03:
                    5c:1d:83:93:dd:c0:4b:61:5a:1e:b4:2b:37:f6:2b:
                    45:09:27:91:f2:0c:5a:6a:38:22:e7:62:bc:9b:e0:
                    12:87:bf:31:ed:ed:44:f0:0a:8d:13:9e:a2:b7:a6:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:15:BE:20:56:AE:A7:5E:81:3D:D8:20:A3:2B:FF:3F:F6:90:CA
            X509v3 Authority Key Identifier:
                keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/9D4041FA376411EEB0C70459C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:17:10:e4:6f:e7:43:d8:cf:c4:19:0d:42:05:01:3d:a5:
         38:a7:a0:21:c8:d9:dd:d5:29:40:a5:bb:06:ca:43:0b:54:00:
         3d:43:19:7b:1a:ca:8d:95:e6:80:a5:df:60:d2:92:7c:30:dc:
         b3:09:55:5d:9f:e7:2a:e6:2f:eb:17:e8:da:17:25:90:81:e0:
         fd:fe:1f:81:fc:e6:10:12:da:8e:9a:a5:c9:2b:09:be:e0:8c:
         fb:ca:e6:1d:92:8b:ad:84:df:14:25:62:0e:01:06:e3:d9:77:
         01:4b:d3:17:9b:67:6a:3b:b0:de:68:e0:17:10:0e:78:b0:1d:
         7a:58:8f:a4:59:23:9b:bc:0f:d7:bc:7c:c3:73:92:e7:a7:d2:
         78:6b:37:b5:aa:d5:48:81:76:01:1f:6d:1c:3d:cf:34:08:75:
         f5:34:23:56:7c:6c:02:e2:ef:65:69:89:2a:5b:b9:45:05:42:
         6c:67:50:14:c9:d4:09:21:07:e4:dc:13:fc:8c:98:4c:ab:78:
         8c:0a:d0:b8:8c:19:0c:f0:9d:4b:fb:4f:62:4e:a4:f8:9b:da:
         e3:9e:f4:55:ff:e4:30:e2:16:9e:36:59:76:7b:6d:b7:8f:b8:
         17:c5:b9:56:3f:43:4a:56:eb:e5:0b:e3:47:df:eb:b8:ef:66:
         3e:4c:23:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org