Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
File:                     58EB6F3E115511EC97960769C4F9AE02.roa (raw, json)
Hash identifier:          o3kWnyNSxJFY3lvDnoQm9cCtMvw8qbOporWcpE2Yjl8=
Subject key identifier:   FC:8B:B8:94:D3:C6:00:85:CF:93:4E:01:3F:DA:29:6F:11:CE:23:9A
Certificate issuer:       /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial:       2532
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 16:03:20 +0000
ROA not before:           Tue 08 Oct 2024 16:03:20 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     146995
IP address blocks:        103.237.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9522 (0x2532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
        Validity
            Not Before: Oct  8 16:03:20 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670557c8-9717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:16:57:f1:4f:b8:6b:a4:d9:a4:76:80:3b:
                    b9:96:f6:f8:f9:4b:7e:53:71:ad:9f:ff:b1:20:f7:
                    d9:1b:45:c3:4d:95:18:24:68:5b:ab:8b:cc:04:ad:
                    fc:38:6a:6b:71:da:1c:ec:be:ef:44:0c:ab:ea:dc:
                    6f:09:10:e5:3b:ab:65:30:b6:92:e2:4d:fd:c3:a1:
                    68:2d:66:c5:b2:94:a4:05:11:9c:23:bd:e9:f8:cb:
                    fe:e5:0c:dc:8a:51:8a:b1:43:32:d7:ec:43:27:e5:
                    83:9b:8a:b0:c8:26:b2:5d:3a:9a:6c:2f:86:c0:7c:
                    6c:3d:f9:bd:91:a0:12:ce:9c:bb:a2:da:30:4e:30:
                    04:a2:08:02:f1:60:17:aa:f2:4e:02:53:45:b2:d4:
                    5a:63:e9:f9:0f:c7:9e:ad:29:89:45:bf:30:d9:60:
                    8a:26:de:fa:92:b0:23:53:e2:9b:f5:3e:ec:73:3b:
                    c7:12:b9:12:9d:7b:b7:64:0f:8b:5b:fe:c2:79:d0:
                    56:84:8b:51:9d:f1:df:5a:83:dc:b6:2f:33:b8:1c:
                    14:59:b7:8f:36:c3:8f:70:b0:11:2b:99:f3:b3:05:
                    99:99:de:38:d4:dc:83:1e:6b:60:3c:6d:17:b6:45:
                    e8:65:69:9b:2e:eb:68:3f:94:33:fe:fb:7b:66:68:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:B8:94:D3:C6:00:85:CF:93:4E:01:3F:DA:29:6F:11:CE:23:9A
            X509v3 Authority Key Identifier:
                keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:30:bf:69:e4:b8:18:74:e6:3b:38:60:22:4d:07:2c:24:
         5b:a3:e2:d0:dc:24:65:8d:dd:2d:55:1c:e4:93:83:25:dd:b6:
         f3:38:21:d2:e7:75:e7:46:15:80:1e:89:f8:7c:6f:8c:37:ed:
         2f:c4:b4:4f:71:63:6f:5d:ff:6d:50:09:df:c0:ef:89:17:c1:
         de:dc:39:8f:d6:d6:80:3b:e6:d1:59:eb:e4:51:97:b4:54:ee:
         7c:f1:e7:b0:1b:fa:72:a9:60:ff:e9:d3:3a:26:58:9f:dc:bc:
         b4:20:d6:20:b6:13:bb:61:27:66:50:f7:20:b2:5e:27:8e:f4:
         0b:a7:7d:45:e9:77:f5:89:11:12:3e:d7:70:94:43:5f:cd:89:
         50:ef:95:07:94:50:e7:33:46:46:04:55:76:b5:25:9f:6a:4a:
         21:b5:8b:f4:0b:b7:f0:81:c3:5c:8a:8c:32:07:f7:35:af:c2:
         dd:8c:e7:23:e1:b4:f1:85:b7:db:3c:26:76:4b:a3:ce:02:bf:
         3a:54:a5:92:7e:d1:41:36:66:81:8d:04:85:0f:58:91:3c:a7:
         bc:f0:7c:5d:e2:cd:e8:c9:d2:bc:e5:d5:0e:4a:0e:1d:ff:8c:
         ba:65:97:6b:9a:dc:4f:af:8d:54:af:31:35:62:5d:39:bf:92:
         2d:7e:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:02 2024 by rpki-client on console-fra.rpki-client.org