Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/81A1363E652B11EF8DDDB555C4F9AE02.roa
File:                     81A1363E652B11EF8DDDB555C4F9AE02.roa (raw, json)
Hash identifier:          PLhk6N75GMzt0LCkeHhTZXOpHSNV9ZRgMrQ7j9F01Js=
Subject key identifier:   65:BB:2E:93:45:2D:B4:2A:60:D2:AD:BE:8A:97:9F:53:5C:97:2E:9B
Certificate issuer:       /CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
Certificate serial:       0381
Authority key identifier: 76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/81A1363E652B11EF8DDDB555C4F9AE02.roa
Signing time:             Wed 28 Aug 2024 10:51:41 +0000
ROA not before:           Wed 28 Aug 2024 10:51:41 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     139303
IP address blocks:        103.141.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl
                          rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147526/serialNumber=76DF846E6554C70CCAB78B8F8A5A7463E930AC0D
        Validity
            Not Before: Aug 28 10:51:41 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66cf013c-ba4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:ef:59:63:70:40:40:13:ba:ff:c7:ed:72:
                    c5:c7:87:b2:b1:c0:44:a2:26:e4:77:05:91:80:16:
                    63:f4:a4:65:4f:3b:4c:d3:8a:9e:5b:3b:5b:a3:d8:
                    18:e2:87:81:5f:8a:04:a8:62:d4:7a:6e:4a:2d:ef:
                    b9:e8:53:c7:4b:db:6e:cd:83:55:3b:5a:5f:4c:fe:
                    8c:12:38:a7:46:4f:a9:24:c3:a4:fe:8b:85:1f:d0:
                    d3:ae:27:b9:22:17:07:e3:a9:e3:4a:b6:b4:b9:73:
                    d9:a0:f1:bd:e3:82:ca:ba:0c:77:a5:97:fe:85:09:
                    ba:8d:7c:1f:71:3f:ea:d7:f3:71:2e:af:bc:16:44:
                    e4:d1:f0:78:78:d1:bc:94:a3:48:6d:c5:2c:44:73:
                    a1:ad:81:05:dd:6d:d9:b3:f1:ee:f8:cd:8b:a2:bc:
                    de:c8:6a:32:62:80:07:9e:fe:2c:bb:f4:2d:34:56:
                    af:1d:9d:d4:28:51:86:40:8a:f5:99:aa:11:a0:54:
                    2f:5b:0a:82:c9:f3:8d:64:4c:65:44:99:ac:7a:78:
                    49:0c:a9:35:1f:02:8d:53:96:19:e0:c6:44:6d:b2:
                    6f:83:bc:bd:58:b3:96:ed:ca:53:de:75:fa:48:06:
                    32:cc:71:38:8e:7d:0a:4f:82:62:ab:39:8f:2d:68:
                    f5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:2E:93:45:2D:B4:2A:60:D2:AD:BE:8A:97:9F:53:5C:97:2E:9B
            X509v3 Authority Key Identifier:
                keyid:76:DF:84:6E:65:54:C7:0C:CA:B7:8B:8F:8A:5A:74:63:E9:30:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/dt-EbmVUxwzKt4uPilp0Y-kwrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt-EbmVUxwzKt4uPilp0Y-kwrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147526/4B149548744C11EC9B58307AC4F9AE02/81A1363E652B11EF8DDDB555C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:02:fc:8d:cc:dc:fd:64:6b:d4:c5:65:37:34:6f:8c:4e:
         8f:28:db:31:3b:11:e9:11:03:56:eb:8c:c5:93:19:d5:47:19:
         0c:94:bf:89:97:43:7e:f4:72:9b:d9:fd:55:73:3b:2f:04:2f:
         9e:96:54:4d:a0:0e:da:9b:ae:2b:28:f1:fe:c9:0b:91:7c:a6:
         8c:71:a2:04:57:a2:73:cd:54:70:43:8a:82:f1:ec:9c:22:d5:
         2f:95:4c:bb:b8:2a:58:0d:72:f3:84:2f:33:90:a0:6e:76:ca:
         85:47:2a:d4:ec:ba:8c:6b:22:6c:e7:27:54:d1:28:bd:b0:7c:
         62:a8:de:b9:50:36:30:29:86:2c:2f:35:57:c9:a3:57:00:8c:
         d7:d0:73:5c:80:bc:c2:dc:d5:52:2a:d7:30:9a:80:bd:dd:a0:
         34:9e:e1:8c:cf:25:c9:3b:15:64:e2:69:4d:49:6e:a7:80:cc:
         6b:da:11:4a:d6:bd:06:ac:96:25:8a:95:b0:11:42:e5:45:f5:
         47:af:f3:c5:8e:d7:60:bb:ca:b1:f0:c8:5c:1d:b6:70:82:dc:
         a7:94:e9:3a:25:5d:37:26:9c:09:fd:b2:e1:5e:c5:d2:05:2f:
         34:a0:64:df:f3:0b:0b:fd:a2:fa:50:d3:57:f5:6d:39:7b:20:
         45:2b:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org