Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
File:                     5C9259B631DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier:          Elvwrb+lnz51/voO2VptmUh2haZZEQ24Voi0xDDY46w=
Subject key identifier:   DD:E8:E8:B9:34:78:20:1D:10:93:B7:D2:F6:0C:EE:A8:84:A2:F0:97
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       36
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
Signing time:             Sun 29 Oct 2023 05:57:09 +0000
ROA not before:           Sun 29 Oct 2023 05:57:09 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     139671
IP address blocks:        103.143.112.0/23 maxlen: 23
                          2405:4cc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 07:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Oct 29 05:57:09 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=653df435-f57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5c:10:1e:b5:7f:ac:34:e2:5e:60:cc:24:bd:
                    ae:f4:17:41:21:f0:57:7b:a9:be:4a:31:2a:7c:83:
                    7f:56:d0:43:1e:a4:c4:d6:41:29:f2:ef:f3:8e:98:
                    4d:82:15:78:f7:a9:3c:0c:e3:a8:9b:d6:09:60:f5:
                    34:b2:ec:52:91:86:63:c5:85:41:b0:c6:36:be:c6:
                    4b:63:0d:09:62:1f:70:45:a5:7e:1b:6d:df:32:fb:
                    08:9b:9b:f2:7b:bc:cf:17:f8:87:92:c7:9e:77:6c:
                    ff:e5:f6:32:4c:5c:2f:03:71:a1:e6:8f:97:08:a2:
                    7e:11:0a:60:7d:2c:e6:74:82:a1:b7:b3:3f:37:24:
                    50:73:69:3e:b1:0e:e4:55:57:f6:19:91:3a:e9:b5:
                    d1:2b:47:61:c7:80:b8:fb:6b:4f:62:48:42:38:2e:
                    60:58:88:9b:13:2a:9c:f1:de:34:70:4f:99:07:0e:
                    28:07:ea:05:d5:89:2d:1c:78:ab:bb:75:a6:2e:8e:
                    58:fd:fb:5c:08:c9:99:c4:3f:c5:4d:b6:58:b9:91:
                    4e:27:da:c5:06:fb:8d:90:91:06:e4:18:2a:a0:50:
                    69:f1:0a:8f:7e:70:2e:57:ae:85:f2:76:f0:fd:42:
                    67:fc:65:83:f1:60:0c:cb:e4:3c:b2:8d:60:36:43:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:E8:B9:34:78:20:1D:10:93:B7:D2:F6:0C:EE:A8:84:A2:F0:97
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5C9259B631DA11EEBE28A546C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.112.0/23
                IPv6:
                  2405:4cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:5d:03:de:79:02:fc:bb:8c:99:1d:3d:de:a0:c9:16:db:
         59:42:d3:ad:a1:a8:be:20:3b:f9:b2:e2:38:67:ac:f1:0c:79:
         c9:e2:23:7b:c1:55:db:bc:01:c8:44:3a:99:ee:63:32:a1:db:
         c7:eb:40:67:a6:f0:1b:3b:80:61:57:a9:80:73:f9:ad:5d:46:
         df:67:c6:15:f4:27:17:67:70:2f:06:20:80:a0:25:35:47:87:
         fe:a8:19:3b:2c:28:35:3e:e9:b6:c8:ee:a7:b3:77:0c:f3:3f:
         1d:e2:49:0b:4b:62:85:5e:a6:50:d9:97:ca:b7:3f:9b:a4:d6:
         70:c2:13:b6:56:59:5c:7b:bb:bb:0b:39:45:7f:7a:34:fe:cf:
         9f:ad:5f:db:38:d7:01:cd:11:c8:00:05:55:38:ae:0b:d6:10:
         12:6f:fc:36:d2:ea:35:3b:b7:bf:44:1b:52:aa:ae:81:44:a1:
         c9:b1:a6:39:25:51:ac:ee:02:43:88:47:5c:5f:a3:78:0c:c7:
         cc:91:b5:b7:d7:2b:aa:7c:7b:b7:2f:57:2a:5d:f4:23:dc:d6:
         1c:18:30:18:10:12:ad:84:de:c5:a4:b5:eb:8a:8d:c0:3f:db:
         a5:ca:ef:e9:37:d3:16:9c:e6:d5:56:d5:07:67:20:7c:b9:f6:
         62:47:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 10:01:43 2024 by rpki-client on console-ams.rpki-client.org