Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/5B129B682D5711EFAE93E757C4F9AE02.roa
File:                     5B129B682D5711EFAE93E757C4F9AE02.roa (raw, json)
Hash identifier:          1u53jzsW9gwZ1e+NtNnhWTml83rb08AOtybYYad5GN0=
Subject key identifier:   5F:0E:C4:24:A7:32:93:58:46:72:73:C9:ED:C8:B2:EC:AA:72:23:DB
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       0215
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/5B129B682D5711EFAE93E757C4F9AE02.roa
Signing time:             Wed 07 Aug 2024 03:24:36 +0000
ROA not before:           Wed 07 Aug 2024 03:24:36 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     137451
IP address blocks:        103.237.101.0/24 maxlen: 24
                          163.53.244.0/24 maxlen: 24
                          163.53.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69
        Validity
            Not Before: Aug  7 03:24:36 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66b2e8f4-f3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:ab:e8:2f:3f:e5:f4:5c:58:79:ab:0a:e9:
                    bd:1e:86:a2:3a:fb:d1:ce:0a:0c:81:bb:65:19:aa:
                    52:72:e0:7c:e9:da:31:c1:2c:99:06:27:77:4c:2a:
                    ca:97:17:0a:af:94:7c:4f:86:49:9c:96:c9:ec:d5:
                    b1:84:9c:1d:23:7c:7e:9e:89:97:6b:80:88:63:e4:
                    9f:53:20:60:37:27:f0:08:77:fc:8a:59:4c:57:69:
                    68:46:d8:a2:f4:8a:2e:00:46:d7:2f:06:24:e8:5c:
                    e1:7b:8f:b6:f1:3e:9c:d3:c7:9b:ed:46:1e:5c:cb:
                    65:f5:5b:fb:2b:c4:70:ec:1a:7e:ee:a1:93:19:b0:
                    e9:13:24:cc:7c:e9:d1:e7:67:75:59:e4:ee:3f:cd:
                    2c:1b:28:d6:87:43:67:c5:3a:4e:ca:ad:64:df:e8:
                    2b:7e:fb:4d:ed:93:5e:8c:bc:00:35:79:16:41:90:
                    57:79:93:ae:2b:ec:7d:b6:a6:d8:d8:37:50:4e:0e:
                    f2:fb:b8:06:8b:8b:f6:ce:28:6c:d7:2d:f8:12:f9:
                    39:20:5e:cf:05:b8:64:b0:d4:0d:5b:76:50:b3:04:
                    e5:03:44:e0:a3:ae:2e:1d:a1:9d:33:83:c5:06:5f:
                    33:c0:17:c0:0e:de:c0:1b:59:2b:a6:ad:f5:88:da:
                    87:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0E:C4:24:A7:32:93:58:46:72:73:C9:ED:C8:B2:EC:AA:72:23:DB
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/5B129B682D5711EFAE93E757C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.101.0/24
                  163.53.244.0/24
                  163.53.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:26:63:cc:df:e7:73:89:b7:91:e9:d7:d7:05:c7:f6:4f:32:
         8e:39:9e:43:37:ae:23:1e:09:3e:15:46:11:8d:18:75:4d:fa:
         71:7c:d6:ba:96:29:f9:4a:59:46:9b:b5:7c:b0:ae:c3:d9:f1:
         6b:e6:72:85:6c:48:5a:68:13:14:84:27:5f:08:45:fb:91:c1:
         15:5f:7c:7e:f0:4b:97:d5:7b:48:0e:3b:cf:9b:0a:79:2d:1b:
         47:79:83:a7:c4:76:c4:94:c6:11:3f:aa:7c:ff:0a:b0:cb:90:
         d4:9e:58:0b:72:91:20:75:7c:79:8c:41:44:35:96:3c:7a:e2:
         8e:1c:e8:af:24:74:71:51:8c:6d:d4:5f:45:15:b2:bf:9b:f4:
         21:dd:63:ab:06:e6:a3:0b:9e:5f:5d:41:bd:af:83:ce:12:7a:
         ec:89:74:76:c1:59:3e:b9:7f:dc:d5:f3:68:26:ea:88:10:69:
         74:86:f1:46:95:d7:16:b4:5e:10:33:36:b7:61:f1:d3:5f:22:
         6c:fa:33:9b:de:c6:1c:c0:4b:82:07:4a:73:7c:ff:ab:1c:26:
         40:40:48:5b:aa:0c:c1:6a:89:3b:ec:31:e8:80:46:0c:82:a5:
         5e:8b:5a:5f:aa:6e:f7:76:f4:62:fd:25:94:af:a3:82:c6:b0:
         cb:73:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:09 2025 by rpki-client