Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
File:                     58EB6F3E115511EC97960769C4F9AE02.roa (raw, json)
Hash identifier:          UeXSFF+zo/4rj+qYv4V/Cq4ESD6uTAvgoBhZgRFq1yI=
Subject key identifier:   08:F5:76:E6:1B:70:10:F6:E2:43:B4:FE:D4:15:E0:71:D9:7E:2B:9A
Certificate issuer:       /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial:       2466
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
Signing time:             Sat 16 Sep 2023 15:52:39 +0000
ROA not before:           Sat 16 Sep 2023 15:52:39 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     146995
IP address blocks:        103.237.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9318 (0x2466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
        Validity
            Not Before: Sep 16 15:52:39 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6505cf47-f130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:b7:1c:83:a7:2f:c8:af:0e:14:5c:c2:7c:
                    0a:9d:90:48:33:24:ed:cc:ff:4d:9e:65:4f:1a:62:
                    49:64:ad:d0:15:52:fe:0e:dc:fd:98:4d:ee:51:70:
                    99:16:bf:e1:73:0d:f1:eb:d4:22:75:51:7b:09:3e:
                    d8:b0:5c:cf:c6:06:3c:89:b0:43:e9:7b:d8:6e:69:
                    bd:0f:91:35:ce:1d:64:81:60:ba:12:f9:a3:35:88:
                    50:59:ee:3f:f4:c1:67:a8:b9:36:4f:5e:37:89:b6:
                    ac:93:c2:4a:38:3f:65:d3:1e:2b:32:35:2f:b5:e7:
                    4c:9c:99:fe:03:82:d2:dd:24:ee:77:32:27:68:02:
                    94:f7:73:35:f7:dc:04:12:f9:e2:79:de:59:a3:38:
                    2a:3f:2a:d4:9b:37:12:d2:dd:15:d3:8e:94:2f:09:
                    e2:cb:42:29:68:fc:30:97:51:0c:18:d8:8f:4a:05:
                    c0:ff:b4:2f:64:35:f4:ca:ca:89:2f:6a:03:b1:3c:
                    d5:1b:61:6d:68:fe:b4:10:ff:b7:e3:dc:eb:29:71:
                    70:24:03:e6:3a:bf:cf:be:5d:4d:98:23:ee:51:b1:
                    84:b9:1c:56:85:40:c2:2c:f1:50:3f:b4:eb:52:55:
                    a8:9f:bd:e1:ca:8e:d6:b1:a8:44:9e:d5:11:91:2e:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:76:E6:1B:70:10:F6:E2:43:B4:FE:D4:15:E0:71:D9:7E:2B:9A
            X509v3 Authority Key Identifier:
                keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/58EB6F3E115511EC97960769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:1f:50:32:29:18:16:da:0a:85:d3:04:6d:9d:fe:8c:62:
         1c:2d:3c:60:d5:f9:20:dc:5f:29:72:10:4d:73:61:db:17:e7:
         ba:24:49:c6:9d:2d:c7:d7:12:0c:53:88:ce:f0:bc:35:c9:d8:
         d6:73:f7:62:49:89:24:d9:ba:28:17:75:e2:2e:c1:e8:da:ed:
         dc:b2:4e:c3:88:f4:61:7e:a8:f3:5b:5b:e5:34:59:20:48:dc:
         05:6d:9b:53:66:e6:18:af:0a:0c:ea:ab:3d:d7:c1:b7:b3:2d:
         f0:f5:09:eb:37:48:14:c9:f2:47:22:b7:32:4e:11:78:28:b6:
         e2:ca:58:3a:45:e1:e0:ba:ed:b1:4b:de:01:9c:d7:ee:24:da:
         a5:fb:f9:42:85:e5:95:b1:f2:1a:33:06:03:57:43:1f:84:89:
         f9:94:5c:ee:0d:07:34:9d:89:a3:af:b9:50:7e:d5:a6:f8:b6:
         bc:73:06:a9:f1:b1:68:83:2b:4b:bc:f6:38:31:d3:eb:a3:4d:
         8c:1f:67:33:49:82:65:f7:8a:37:5a:49:97:58:0b:e4:16:7b:
         91:52:aa:d8:e1:23:60:ab:02:04:bf:52:3d:47:51:4f:3e:6e:
         6b:1f:51:51:3e:38:b8:30:f5:5a:13:2c:ec:68:70:a3:37:d0:
         ae:da:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org