Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
File:                     598E740E5A6011EDAF6FC679C4F9AE02.roa (raw, json)
Hash identifier:          HL4pbC/iVl60jzP8PvY6wEjqTSd1XUG9dKyfATvV9ks=
Subject key identifier:   50:8D:25:3D:C9:5F:34:5C:9F:2E:CC:20:65:A5:5D:35:E8:97:AB:4F
Certificate issuer:       /CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
Certificate serial:       2530
Authority key identifier: 47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 16:03:18 +0000
ROA not before:           Tue 08 Oct 2024 16:03:18 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     0
IP address blocks:        103.7.144.0/24 maxlen: 24
                          2001:de8:1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9520 (0x2530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B28/serialNumber=471606785B32F4DF3EC943F2A787DBA212696E1F
        Validity
            Not Before: Oct  8 16:03:18 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670557c6-fd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:5d:1d:74:2d:a1:65:00:87:a6:60:d6:25:
                    be:a6:ff:e5:01:29:0f:5c:43:88:69:8d:5f:44:51:
                    c7:f4:42:b5:4c:2f:53:f8:f0:44:76:3b:d1:f2:d7:
                    9a:dd:1e:0f:80:37:4d:5f:43:74:cc:e8:c4:b4:0c:
                    15:f3:59:58:8a:d5:51:6b:04:bf:9e:f8:79:30:61:
                    e5:a7:6a:12:7f:c3:9b:e7:07:72:ad:72:68:4e:fe:
                    b6:da:31:38:62:d2:e7:9a:73:81:24:10:08:f6:e8:
                    52:0b:9b:c2:a9:6c:51:92:e8:1e:48:b5:08:b6:82:
                    68:45:23:f5:10:96:95:7e:b8:19:40:24:0e:7e:f2:
                    ff:f6:a2:2e:0e:c7:cd:8c:7b:a5:91:f1:4e:28:4c:
                    33:93:ad:29:93:2e:e6:87:65:5f:8b:b9:c6:0e:c1:
                    b8:78:47:92:d9:86:31:09:2f:76:eb:ed:75:db:73:
                    ef:d1:5c:f0:0f:94:ff:a4:5a:9b:2e:fa:c1:2b:95:
                    5c:50:f0:c7:0f:48:6e:d9:20:5a:51:3c:f6:ca:81:
                    cc:77:d1:35:f9:2c:8a:14:8b:82:02:5c:6f:15:0d:
                    d7:28:99:fb:8c:c1:dc:91:a1:65:f4:84:ec:ae:b5:
                    a4:f8:a1:49:f9:c2:6c:c4:68:c2:fa:57:bb:ba:c3:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:25:3D:C9:5F:34:5C:9F:2E:CC:20:65:A5:5D:35:E8:97:AB:4F
            X509v3 Authority Key Identifier:
                keyid:47:16:06:78:5B:32:F4:DF:3E:C9:43:F2:A7:87:DB:A2:12:69:6E:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/RxYGeFsy9N8-yUPyp4fbohJpbh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxYGeFsy9N8-yUPyp4fbohJpbh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B28/FAEF8CBE134311E596F5401EC4F9AE02/598E740E5A6011EDAF6FC679C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.144.0/24
                IPv6:
                  2001:de8:1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:52:2b:6b:8a:17:c6:dd:28:4f:77:a6:1e:a1:ea:74:d4:28:
         35:44:a1:06:39:cd:77:73:2f:74:6d:d3:05:ab:6a:fd:74:22:
         1e:79:5c:07:c4:3a:a5:dd:e0:69:b4:f2:6f:7e:29:b2:03:7c:
         6c:5c:b9:40:ac:82:f7:16:47:f4:65:af:54:62:b8:a6:f3:ed:
         99:d6:05:44:98:05:13:d8:09:47:60:88:5f:be:d0:ee:5e:37:
         65:b3:ba:71:a0:cb:56:ac:31:86:1d:2d:c5:54:aa:db:23:ad:
         34:7d:44:2f:f3:5e:59:d5:ee:39:25:4b:a6:5c:e2:b3:f0:18:
         57:7a:ba:bf:79:3f:44:4b:a7:fe:bf:26:66:17:2f:c9:c8:e0:
         75:73:32:4d:d0:98:1c:7d:f2:98:ba:01:9f:49:0a:fc:f7:5b:
         35:3b:39:9e:af:1e:d1:e7:b2:55:24:d0:59:c4:c9:a5:7c:b6:
         1c:7c:51:23:19:78:ef:00:6a:50:c0:b0:ee:09:6f:cd:a5:4e:
         37:98:df:a3:fb:2d:19:84:00:2a:77:e7:26:51:94:ab:7a:13:
         6f:13:6b:7c:bc:d2:39:e4:a1:9c:ec:ec:f2:4b:33:56:de:3c:
         40:d7:22:30:e2:4c:57:5f:ce:21:b0:61:94:70:e0:47:10:27:
         45:83:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:17 2024 by rpki-client on console-ams.rpki-client.org