Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa
File:                     552D155464A711ED99D40117C4F9AE02.roa (raw, json)
Hash identifier:          vqnq1ln0jacCM48xfrENGgLrWxqslFbyB5Snj9ZJdaw=
Subject key identifier:   F4:D8:8C:1E:70:0B:D1:C0:61:36:81:9B:2D:5B:15:03:11:2D:A2:A1
Certificate issuer:       /CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
Certificate serial:       0126
Authority key identifier: 2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 06:03:14 +0000
ROA not before:           Wed 05 Jun 2024 06:03:14 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137816
IP address blocks:        103.114.192.0/22 maxlen: 24
                          2402:d1c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl
                          rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153D75/serialNumber=2DBC465DA681B5B311897AB6C468C254706E5D2F
        Validity
            Not Before: Jun  5 06:03:14 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665fffa2-005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:9a:f7:7d:18:06:90:76:78:5b:ac:ac:28:
                    c4:29:c1:6e:fe:bb:6a:7f:04:f3:be:7d:5a:89:58:
                    43:5c:63:c4:8d:8c:8f:10:1a:68:5d:d4:2b:20:17:
                    32:cf:d8:8c:9e:58:b0:d1:8b:f3:2c:5f:d3:26:8d:
                    08:7c:98:ec:97:7b:ca:64:b3:22:3b:29:ba:30:be:
                    75:b5:77:b8:28:33:86:e3:ab:80:0a:86:f0:f0:c2:
                    f8:f7:4d:09:e8:cc:da:3a:d8:2f:0e:08:ed:bf:4f:
                    e1:ec:ce:51:46:a8:47:a0:95:83:03:b2:80:83:1b:
                    2d:6d:8d:87:f7:e1:95:ef:a2:a5:c3:fe:e1:94:c6:
                    9a:61:5a:6e:8b:39:0e:ed:65:d6:f9:79:1d:77:45:
                    61:4e:4f:de:2f:a0:c3:28:f6:57:55:08:28:83:a9:
                    37:8f:b1:5c:d6:5d:76:05:5f:c6:12:b9:9d:a6:6e:
                    d3:94:74:40:ec:76:05:5f:a5:5c:51:e7:66:d8:b9:
                    7e:fe:5b:72:c2:ad:bc:b5:a6:5d:2a:43:17:6d:fc:
                    94:77:93:b1:ea:1b:31:9b:25:89:06:77:ef:14:7f:
                    46:2d:71:f6:a5:5a:3d:06:bc:35:4e:22:67:9e:30:
                    a2:46:8f:ae:66:5b:9a:8e:59:41:f8:b3:9a:87:f5:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:8C:1E:70:0B:D1:C0:61:36:81:9B:2D:5B:15:03:11:2D:A2:A1
            X509v3 Authority Key Identifier:
                keyid:2D:BC:46:5D:A6:81:B5:B3:11:89:7A:B6:C4:68:C2:54:70:6E:5D:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/LbxGXaaBtbMRiXq2xGjCVHBuXS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbxGXaaBtbMRiXq2xGjCVHBuXS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153D75/52DE4C4A64A311ED82202412C4F9AE02/552D155464A711ED99D40117C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.192.0/22
                IPv6:
                  2402:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:ac:d1:e3:61:2d:eb:7b:a6:c9:52:98:f4:e2:61:58:a5:
         0e:db:af:f1:05:ea:4b:ad:02:df:d1:80:41:39:b1:af:97:97:
         20:68:2f:6f:04:6f:94:35:86:9c:89:bf:2d:b2:74:10:80:f7:
         10:6e:2c:89:29:5e:07:73:6c:5f:74:a4:0f:72:56:34:65:92:
         d0:88:21:ce:1c:c5:20:2c:ed:fa:fc:a3:f4:39:c7:03:31:d6:
         48:2a:c3:47:c1:cc:53:b3:03:10:9c:bb:ee:c8:5a:06:15:e4:
         00:be:9c:46:5c:3f:01:b4:80:a5:49:17:79:a1:c1:30:cd:94:
         37:e8:b4:69:e3:72:22:a3:b4:e0:4b:60:17:0a:8c:6e:cd:26:
         89:bc:24:1c:0d:67:20:34:08:2b:d0:6d:b2:52:e5:86:95:07:
         6a:e9:44:db:32:73:a3:6f:4c:f0:f2:00:57:5c:6f:b9:98:9a:
         a1:e0:2f:e9:90:b8:1d:f3:6f:75:d3:7d:46:40:72:d7:e4:5f:
         84:29:ed:2e:00:da:e2:6f:ea:02:0f:cb:2a:37:ec:f0:72:b9:
         da:58:10:59:17:5f:3a:82:52:87:6d:16:e4:79:af:bc:2e:3b:
         fa:d6:d7:d0:03:d1:13:73:ad:7e:e5:f7:41:a4:e4:b1:3a:94:
         b9:6b:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org