Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
File:                     138E2452F89011EE8B2FC42AC4F9AE02.roa (raw, json)
Hash identifier:          /QO+4V0fLYx8g3hL0Bgq9nBiIuvSmIV2wmk+9euyuaI=
Subject key identifier:   4F:CC:39:81:65:88:DA:41:BE:63:A7:D2:51:AE:B3:7A:BC:40:66:48
Certificate issuer:       /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial:       43
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
Signing time:             Thu 01 Aug 2024 07:48:01 +0000
ROA not before:           Thu 01 Aug 2024 07:48:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     134090
IP address blocks:        103.153.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
                          rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
        Validity
            Not Before: Aug  1 07:48:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ab3db1-2535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:4d:98:03:36:79:3c:c8:74:84:66:c3:05:
                    81:92:25:7d:f9:d1:42:68:53:f0:45:f4:7a:20:fe:
                    d5:2f:77:54:0e:3d:15:83:a6:a2:5a:df:28:bc:6c:
                    33:fd:41:10:a4:5c:5b:66:80:91:01:67:fd:36:06:
                    0e:a8:7f:9f:20:7e:43:b2:bb:e6:27:7d:d3:dc:3a:
                    85:0b:4c:02:cd:94:65:57:0e:82:61:7d:c6:70:16:
                    d8:22:fe:08:b5:0e:e3:a6:87:44:96:a8:9b:3e:e1:
                    d9:47:9e:bc:a8:aa:51:a5:f9:2c:34:d0:32:30:48:
                    b4:44:e5:e0:a5:d7:f6:7c:8a:0c:19:41:8e:6d:31:
                    63:55:bc:db:9a:9e:41:dc:40:45:b6:db:32:20:ff:
                    55:b1:03:c9:a8:f1:3c:32:1e:ad:87:d0:95:96:cf:
                    31:86:90:5b:7b:c1:b3:6a:74:1f:f0:4c:ed:60:63:
                    3a:9f:92:82:c3:3f:94:82:29:ef:6b:07:cf:e8:39:
                    61:6f:41:11:8d:fb:71:b9:04:bf:3f:09:a4:ac:fc:
                    62:49:21:6f:bc:8e:48:66:8d:dd:ea:b8:a0:2e:f6:
                    35:e7:98:45:48:a3:02:34:7e:c5:fd:82:06:9c:9d:
                    dc:17:64:fd:89:19:90:71:ed:4e:27:27:10:63:cc:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:39:81:65:88:DA:41:BE:63:A7:D2:51:AE:B3:7A:BC:40:66:48
            X509v3 Authority Key Identifier:
                keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/138E2452F89011EE8B2FC42AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:00:77:c9:61:87:fb:8a:c2:d0:84:da:3f:e7:88:83:a7:91:
         52:91:d4:0a:e5:33:20:93:77:ea:47:d9:85:ae:09:c4:28:53:
         97:5f:a2:56:5e:85:bd:04:1b:8f:fb:ad:95:23:5a:52:7a:a2:
         2e:9d:cb:c1:de:b4:84:c5:0d:27:64:9f:c8:5c:6b:d8:f6:9a:
         20:5b:71:a5:7a:83:f0:67:0e:67:7a:98:73:fc:26:42:88:cf:
         c1:0e:97:90:c7:9b:d4:19:36:ff:ae:18:9b:0f:c6:6b:6f:a5:
         bd:ef:1a:e7:8b:19:dc:d7:f7:d4:b4:87:a7:20:16:15:44:63:
         08:22:34:be:d0:ed:eb:ae:55:46:b9:8d:44:e5:47:e6:73:51:
         2c:4c:74:ab:a0:0a:ed:90:f3:f8:31:72:5b:3d:c1:8f:8d:d7:
         ae:38:be:52:cb:99:51:c9:3b:ed:f4:ae:80:43:66:31:77:37:
         43:18:28:cf:d9:38:f5:c1:60:a2:c8:e2:42:9c:0b:46:5a:4b:
         b2:b3:75:0a:a1:a1:7d:1f:73:01:b1:49:3f:50:35:a1:a0:06:
         e4:4f:72:b4:1f:1b:6e:66:3c:09:de:c9:af:49:1b:43:7f:c4:
         1f:cd:9e:68:61:e0:7a:bf:b4:2b:ca:7c:4b:e3:cb:22:b6:12:
         4e:d2:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org