Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa
File:                     D7F4292A53BE11EF819E6347C4F9AE02.roa (raw, json)
Hash identifier:          fjbU4kifknzThOl77MDsj7c6VVBdtScCgb61mfzRheI=
Subject key identifier:   37:73:95:BC:A1:1C:AA:9B:43:06:75:28:C4:3E:9E:A5:74:15:18:9E
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       343F
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa
Signing time:             Tue 06 Aug 2024 06:41:00 +0000
ROA not before:           Tue 06 Aug 2024 06:41:00 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     135381
IP address blocks:        203.130.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13375 (0x343f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Aug  6 06:41:00 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66b1c57c-abb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:15:a8:d2:69:5e:d9:b9:10:de:fb:77:05:
                    c9:2d:41:19:4b:7b:45:c7:b3:62:29:cb:52:d0:9d:
                    69:c5:a8:6b:20:74:b5:e2:01:67:ee:10:60:a9:09:
                    ce:dc:52:01:e3:7b:a3:4c:39:48:5e:94:77:d4:89:
                    b4:98:dd:6f:27:1e:94:a5:37:ca:7c:cd:a5:c2:8e:
                    d3:29:0a:8a:6b:32:3e:7a:e4:68:4b:5c:aa:9e:20:
                    70:6a:ee:eb:b5:e9:52:e9:b2:ab:4e:f0:ff:be:a0:
                    22:1f:73:f1:42:be:1f:99:64:0e:cf:d3:39:7c:e9:
                    ef:eb:fb:22:3d:d8:4a:74:cf:e3:a1:6e:03:ea:58:
                    b8:37:5e:1d:db:9e:ad:0e:f3:65:8b:34:df:96:42:
                    4e:d4:69:3c:75:19:e9:a5:44:e6:dc:37:1d:dd:72:
                    8d:a8:85:78:5d:ff:fd:5f:49:9b:43:c1:48:23:04:
                    8e:90:39:18:ac:78:8d:92:a1:cd:1d:e4:e8:56:c7:
                    22:0e:64:65:3c:68:33:c9:87:e3:7d:8d:43:c0:24:
                    fc:ae:54:c5:86:06:90:42:6f:8b:cf:ab:41:36:fd:
                    87:eb:54:7f:09:b7:da:77:39:00:7a:9a:41:da:60:
                    bb:0c:af:8a:f9:2b:73:0c:f9:40:b2:03:fa:90:55:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:95:BC:A1:1C:AA:9B:43:06:75:28:C4:3E:9E:A5:74:15:18:9E
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D7F4292A53BE11EF819E6347C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.130.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:83:b6:6c:d0:fb:f4:f2:d6:93:bf:e7:97:ca:6c:64:14:80:
         35:04:dc:bf:f2:c5:a1:2b:1f:d9:62:70:c9:3c:61:d3:61:ba:
         91:f9:42:3a:9b:53:81:73:79:ce:1e:4b:5a:04:6e:7a:01:e9:
         32:fa:0f:6b:f7:ca:f9:28:78:d8:b5:e7:e7:27:7a:43:f5:59:
         e4:96:05:e9:65:25:a7:6a:d1:00:58:12:8f:30:3c:12:c9:cf:
         2b:9e:f6:0d:46:58:23:22:77:4e:92:68:49:ec:17:e6:5d:52:
         02:f4:f2:3d:f6:1e:1f:23:47:43:4f:2d:77:cc:17:e5:5e:e9:
         16:08:86:48:fc:6b:ed:cd:eb:83:5f:85:1c:f1:f5:3d:7d:c2:
         e4:c3:8d:e0:f7:8a:1c:28:cc:4f:6f:df:8b:56:b9:57:34:36:
         7b:f4:33:67:42:7e:28:3c:62:c0:90:d4:83:fe:1a:25:f3:a3:
         f5:a7:d7:d7:a8:5e:52:8b:f9:13:5f:77:7a:a1:85:57:56:ab:
         60:d4:ae:26:7d:a0:22:e3:75:ee:95:bf:10:b7:be:d6:f8:6d:
         41:9d:7f:60:3d:ce:af:d1:36:91:ed:f5:8c:29:8e:79:31:6b:
         5c:5a:34:55:dc:af:ea:ad:cb:be:97:d2:97:f1:00:08:6a:64:
         7b:25:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org