Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/C4563C423ABB11ECA7767769C4F9AE02.roa
File:                     C4563C423ABB11ECA7767769C4F9AE02.roa (raw, json)
Hash identifier:          sG88SxrVFp/XvRYvgO7S1ew3iSJEpUo95Y3m+rU426o=
Subject key identifier:   EF:78:95:EC:FB:1B:A2:F9:E9:2A:24:E1:2C:FB:1C:FB:6F:3C:22:8F
Certificate issuer:       /CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
Certificate serial:       0543
Authority key identifier: 25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/C4563C423ABB11ECA7767769C4F9AE02.roa
Signing time:             Thu 31 Oct 2024 23:32:29 +0000
ROA not before:           Thu 31 Oct 2024 23:32:29 +0000
ROA not after:            Sat 01 Mar 2025 00:00:00 +0000
asID:                     139629
IP address blocks:        103.142.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl
                          rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4BF/serialNumber=2552D444C2F5EEE524C6C01BAA4F9DF2BAECA2AA
        Validity
            Not Before: Oct 31 23:32:29 2024 GMT
            Not After : Mar  1 00:00:00 2025 GMT
        Subject: CN=6724138c-55f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:9c:ed:17:fc:5c:7d:87:97:f1:2e:dc:c7:
                    63:20:81:54:d4:46:1d:3b:1e:25:73:67:1f:d7:8e:
                    d4:10:5e:c4:5b:34:30:be:b8:cd:31:6e:79:26:84:
                    0d:34:e2:b8:69:f2:02:5d:a4:24:da:5b:a0:32:0f:
                    32:49:94:b7:69:78:0f:cd:f2:35:6f:25:58:7e:99:
                    0b:5c:ba:a6:d0:f1:cf:5c:87:49:c1:60:16:ba:b5:
                    6b:86:43:b6:6f:dd:14:9c:3f:ba:99:69:77:1d:3e:
                    e0:99:11:3d:2e:a2:7b:cd:19:a3:47:5e:ae:d0:9f:
                    06:38:16:1d:41:4d:ff:2f:4f:3b:ba:1a:86:bf:c0:
                    7b:03:70:71:e3:be:75:8e:fe:de:12:93:c3:97:b7:
                    d6:ba:2f:29:02:6e:e3:de:1c:db:46:34:9d:ff:a5:
                    64:34:7d:ea:28:db:96:51:47:ce:48:ea:ff:8e:4f:
                    7a:81:c9:d0:14:7a:77:d0:b8:dc:c7:91:b2:59:e8:
                    cd:68:f9:db:75:70:d7:cd:10:27:fb:f6:01:d7:bf:
                    49:55:56:4b:ce:a5:e3:cb:1c:d8:85:a7:d8:b2:ef:
                    46:94:ea:e7:68:82:51:15:61:90:1a:e9:50:a8:04:
                    55:7c:64:ec:8c:54:fe:a5:5c:c1:51:89:de:b8:bc:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:95:EC:FB:1B:A2:F9:E9:2A:24:E1:2C:FB:1C:FB:6F:3C:22:8F
            X509v3 Authority Key Identifier:
                keyid:25:52:D4:44:C2:F5:EE:E5:24:C6:C0:1B:AA:4F:9D:F2:BA:EC:A2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/JVLURML17uUkxsAbqk-d8rrsoqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVLURML17uUkxsAbqk-d8rrsoqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4BF/39C42242CF7C11EB81A1AE19C4F9AE02/C4563C423ABB11ECA7767769C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:32:14:9d:5a:d0:72:be:42:1b:0d:e7:9e:bb:85:8a:07:
         cd:16:43:f7:52:b2:e2:40:62:77:1e:fc:ee:eb:44:23:36:60:
         60:31:2f:71:1d:29:29:47:b0:e3:d4:51:60:3b:a5:56:e8:e8:
         fc:5c:84:65:97:e9:9a:16:27:df:e8:ae:5e:85:86:2c:fe:44:
         db:c0:6c:b9:65:d9:dc:db:60:87:af:33:fc:cc:b7:8f:c3:ab:
         42:6d:ac:10:24:f6:4d:c0:f0:c2:61:99:50:5c:8b:6a:91:89:
         26:44:e1:62:b1:d4:49:e5:3e:0b:57:3a:19:be:b5:13:6f:bc:
         4f:1d:0e:d7:a6:67:54:88:bb:58:bb:f2:43:8f:b8:d1:8d:4f:
         74:cf:d3:a4:b5:26:b1:5c:01:45:53:6a:b3:12:6b:29:69:a1:
         38:15:f5:15:38:74:e9:9c:f6:79:f7:f5:12:0a:81:2c:10:1b:
         ea:0c:0d:81:6e:83:c4:17:76:24:2b:41:8d:40:e2:b9:a0:02:
         c9:5e:76:bb:f7:35:19:62:82:99:67:dd:57:a8:6e:31:21:92:
         ba:07:f8:3b:a7:06:35:00:f4:be:74:b3:b1:66:84:42:39:30:
         e2:95:86:cf:15:b9:55:4e:10:ac:14:d0:47:56:be:90:f1:69:
         fb:56:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org