Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
File:                     E747F80C6AA411EDB76B7A36C4F9AE02.roa (raw, json)
Hash identifier:          dN3gEjNd8wufOpuEw2boxe4zVacqfqgizcT+8wPtnGM=
Subject key identifier:   0A:1D:A7:4D:0E:FA:B4:89:CC:D2:35:F0:79:91:25:4E:BF:35:A1:AF
Certificate issuer:       /CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
Certificate serial:       02C5
Authority key identifier: 0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
Signing time:             Wed 15 May 2024 03:37:50 +0000
ROA not before:           Wed 15 May 2024 03:37:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138336
IP address blocks:        103.184.24.0/24 maxlen: 24
                          103.184.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl
                          rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153838/serialNumber=0C9A469988961778E2D11E8AE8A43E48296DAD15
        Validity
            Not Before: May 15 03:37:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66442e0d-3144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:9f:ba:56:87:b6:a8:7b:50:72:46:7f:83:
                    3c:34:5f:83:a1:e7:0a:cc:99:45:72:33:d9:d2:15:
                    4a:82:69:65:dc:23:4d:c8:23:84:8a:29:64:5d:54:
                    33:b9:fb:b2:0b:e9:25:85:1b:fc:87:ad:e9:14:d3:
                    29:77:fe:6c:5f:6e:3c:a9:ce:0d:7f:db:0d:64:91:
                    fa:a5:33:15:20:62:dc:cc:05:f1:5e:87:b9:ed:33:
                    b8:fd:b1:c2:8a:9c:ef:58:e0:82:07:88:34:fe:70:
                    bb:5b:66:22:7f:2a:6e:42:4f:80:2d:c0:1f:87:90:
                    92:ac:36:d9:e4:45:b5:90:01:e7:22:db:16:59:98:
                    24:50:ce:05:0f:53:9e:a8:f3:55:e6:a6:e6:a9:29:
                    f3:ad:55:63:5b:22:2b:65:7b:e3:5e:ea:a9:04:ed:
                    53:e2:52:8f:e9:29:ef:19:f2:d1:7a:3a:d6:1c:95:
                    04:0d:98:80:62:e6:9a:54:11:63:e1:7e:08:eb:5f:
                    82:25:98:2e:cc:48:7a:4c:f1:d2:2d:7f:25:f9:71:
                    da:b7:6e:7e:37:92:61:a9:8d:64:2b:38:0a:97:bc:
                    62:f4:69:b7:a2:51:cd:87:46:87:7c:1a:56:5e:0a:
                    07:59:cc:81:bc:87:58:9a:ff:50:6f:6f:b7:08:92:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1D:A7:4D:0E:FA:B4:89:CC:D2:35:F0:79:91:25:4E:BF:35:A1:AF
            X509v3 Authority Key Identifier:
                keyid:0C:9A:46:99:88:96:17:78:E2:D1:1E:8A:E8:A4:3E:48:29:6D:AD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/DJpGmYiWF3ji0R6K6KQ-SCltrRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DJpGmYiWF3ji0R6K6KQ-SCltrRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153838/9ECA4556A67A11ECBC2EB14EC4F9AE02/E747F80C6AA411EDB76B7A36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:54:ea:60:92:2a:36:5f:4b:4d:b2:9e:2c:6d:b2:24:72:65:
         1b:be:e6:e0:2d:59:92:13:36:86:eb:2d:c6:30:d6:2c:e6:6d:
         cc:72:3c:1a:7f:b9:8f:04:a0:c3:bd:69:f2:04:fb:65:79:50:
         94:8a:e2:60:e7:48:55:30:18:b4:57:ef:f3:9a:41:d1:68:ed:
         e6:e0:53:df:68:eb:0d:3c:1c:0b:6b:1d:fe:50:4b:24:3a:e0:
         3e:36:20:75:83:51:36:4c:47:0e:69:ab:eb:da:8c:2f:f4:74:
         18:06:87:3e:20:a5:6e:f4:98:ec:8c:c0:54:53:94:f1:04:17:
         66:25:08:d2:87:e7:a4:36:6c:3d:dc:2c:92:6e:3e:29:56:83:
         79:66:96:37:32:6d:20:77:f9:61:01:f8:80:11:c6:7d:ab:aa:
         bc:31:a3:88:ff:47:16:6a:64:45:f7:65:e9:82:30:88:87:4b:
         b9:5e:a3:1c:95:a1:e6:61:92:8c:c9:ea:a0:b3:8f:8c:9d:6b:
         44:f0:01:3f:f5:8d:51:9a:7d:b4:d1:f8:b5:6f:e5:90:1e:f1:
         e2:fe:ea:b8:1c:ef:21:09:65:fc:2f:2c:6d:99:c9:62:6a:ea:
         30:e6:c5:77:55:8e:79:e5:3b:03:ea:27:f7:41:46:dd:24:07:
         db:50:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:26:59 2024 by rpki-client on console-ams.rpki-client.org