Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
File:                     5EEC619850A611EA823DE980C4F9AE02.roa (raw, json)
Hash identifier:          AxteJTYQfKhzHJcNDMSvPfiq/UKu+BhiRHq6hallwyw=
Subject key identifier:   C3:94:96:E5:97:B1:71:3D:04:68:B2:B9:F6:5E:49:1E:B8:11:59:78
Certificate issuer:       /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial:       09CD
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
Signing time:             Fri 02 Feb 2024 20:38:38 +0000
ROA not before:           Fri 02 Feb 2024 20:38:38 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137416
IP address blocks:        103.107.132.0/22 maxlen: 24
                          2402:55c0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
                          rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
        Validity
            Not Before: Feb  2 20:38:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bd52ce-7829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:c3:54:23:4f:22:20:f1:1c:bc:99:4b:4e:
                    12:53:cf:cd:14:d5:28:53:80:e7:d1:e5:64:91:db:
                    8a:b7:28:54:74:a2:ab:c5:7a:7d:ba:1b:39:47:2c:
                    b2:8c:60:d1:c1:c5:8b:ca:97:4d:a7:82:65:e2:9c:
                    cf:c8:3c:2f:81:9f:4a:24:34:45:12:0b:a5:e3:8c:
                    c7:78:ee:9c:66:c4:3e:01:e9:9e:9e:b1:2b:39:8a:
                    29:5d:13:cc:74:ca:2c:bb:8e:ae:87:c0:71:cf:8c:
                    40:86:fb:02:56:8f:81:8f:62:03:ca:6d:32:4b:d1:
                    3e:32:80:73:71:4e:5d:71:1c:c9:07:f9:0a:c5:73:
                    c9:18:20:e5:1f:14:a9:07:9c:ad:c1:20:8d:8c:d1:
                    ff:8d:0a:a8:75:aa:cb:2c:66:94:45:e2:49:43:ae:
                    2a:1a:a8:5b:08:6a:11:d1:30:86:97:19:be:23:d4:
                    46:10:98:d7:b5:48:83:4a:bb:0a:63:80:3d:af:b9:
                    73:9f:df:ca:35:9c:36:ba:6a:2c:2a:b3:e0:6b:c5:
                    d8:22:e3:87:23:a8:fa:cc:2d:a6:e6:b0:39:74:97:
                    df:67:5d:25:29:9f:61:3d:fb:d0:d2:e6:c1:52:bb:
                    51:64:01:f5:74:98:8e:cd:1f:1f:08:bc:6e:be:c9:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:96:E5:97:B1:71:3D:04:68:B2:B9:F6:5E:49:1E:B8:11:59:78
            X509v3 Authority Key Identifier:
                keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/5EEC619850A611EA823DE980C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.132.0/22
                IPv6:
                  2402:55c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:c5:3c:14:5e:33:f2:60:71:57:8f:af:12:b8:68:7a:25:
         90:74:2f:44:3b:be:65:4a:62:1e:aa:18:53:d5:61:09:bb:dd:
         fa:19:e8:97:16:9f:6f:2e:51:22:48:36:00:e2:32:37:12:40:
         98:ce:92:93:88:f1:00:34:96:e5:d9:03:6d:fb:44:b4:a0:ed:
         d2:83:ae:10:de:25:b0:8a:67:cf:bd:24:5f:07:2f:5c:27:15:
         9b:e6:c3:3a:57:be:07:6f:b4:9a:31:ab:d8:4e:ca:e9:b2:af:
         df:d9:b7:de:0b:4a:46:40:ca:a7:fd:d7:ab:2e:85:4c:ac:fc:
         bb:b3:78:07:2e:0d:71:64:00:d9:ce:bf:b0:63:a5:09:4c:7e:
         84:63:cc:fc:18:74:d4:20:e1:07:19:71:67:2c:2f:2e:e4:f2:
         ed:be:67:0d:59:93:5e:13:06:fb:4a:0c:b2:6e:39:33:24:de:
         96:98:c4:7c:03:fe:47:de:f1:e7:de:5e:83:98:96:43:5e:b1:
         56:5c:5f:58:ff:8f:df:57:08:9c:3f:30:5a:32:ef:38:61:ec:
         2e:ab:0c:b7:6f:b6:31:47:92:2b:9a:8e:bb:d7:65:72:a9:60:
         1c:a1:0d:dd:df:b8:49:6f:37:6c:ef:9c:8c:d9:aa:38:d7:cd:
         03:d0:7b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org