Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
File:                     8479151EC72011EA8062547CC4F9AE02.roa (raw, json)
Hash identifier:          a8T2tDSruvMY8XhGVCjDtKcaR5fee/wuPWX28KfJWEw=
Subject key identifier:   BB:47:8B:4D:B5:2F:C1:60:AE:6C:17:C2:CE:ED:92:8C:A9:55:29:C5
Certificate issuer:       /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
Certificate serial:       07A6
Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
Signing time:             Wed 22 May 2024 22:31:32 +0000
ROA not before:           Wed 22 May 2024 22:31:32 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     139034
IP address blocks:        103.138.186.0/24 maxlen: 24
                          103.138.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl
                          rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF
        Validity
            Not Before: May 22 22:31:32 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664e7244-3e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:bf:f9:e9:66:b4:e6:07:63:02:18:5c:cb:
                    06:82:98:5c:2b:07:86:19:cf:87:16:58:c9:e8:a8:
                    a7:16:85:1d:b7:3b:b8:e3:d9:9f:74:b0:91:40:b1:
                    72:c3:d6:d0:37:04:9e:9c:da:e8:85:1a:19:7e:ca:
                    14:3c:33:05:3c:0f:27:33:e1:6e:3d:3d:dd:7c:91:
                    05:fe:eb:e8:ce:c3:f4:8b:55:e4:84:6d:f9:9c:2f:
                    6f:a4:68:4e:4f:16:18:a3:8c:ea:dd:11:15:0c:da:
                    cf:cf:77:4b:1f:96:15:71:10:29:f4:23:6e:24:56:
                    3d:ef:42:31:5a:8a:08:2e:70:3b:42:37:91:83:6b:
                    29:c3:93:e7:1f:80:68:86:4d:a8:4b:4e:91:7d:be:
                    0f:25:3a:40:72:b0:01:dd:09:74:22:27:24:a6:ed:
                    bb:2f:3e:97:23:75:0c:61:fe:7b:6f:67:d8:5d:23:
                    13:ea:d9:c3:05:41:f1:44:86:18:e6:24:6e:3e:f0:
                    57:b8:2c:68:ac:c3:92:62:a5:9a:7a:a5:a0:b0:e1:
                    11:5f:f0:4c:96:18:d0:19:4b:3f:48:37:e4:f5:6f:
                    61:a4:9d:4c:13:f6:fc:82:3f:14:8f:30:6d:57:1e:
                    52:aa:64:ef:f2:2e:20:1c:71:86:b3:13:b3:1b:5b:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:47:8B:4D:B5:2F:C1:60:AE:6C:17:C2:CE:ED:92:8C:A9:55:29:C5
            X509v3 Authority Key Identifier:
                keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:87:db:4c:86:ab:7a:9b:3f:cd:2b:60:34:d7:e5:cc:32:95:
         9e:22:5f:fe:0c:e3:29:0e:35:76:53:c8:96:27:fc:31:4e:4a:
         8f:1e:40:55:bd:40:f4:48:81:cb:37:77:27:7f:ca:46:69:ca:
         4e:d6:20:71:d0:aa:bb:cc:ac:00:73:70:8d:81:25:f9:a5:11:
         34:ab:f4:5b:98:d4:a8:a3:1c:7a:11:55:ca:aa:c2:89:33:cc:
         75:ba:98:5d:01:ba:96:94:96:4f:81:16:23:cb:5b:6f:e6:20:
         07:15:37:01:fa:1d:96:57:01:b2:0f:4e:aa:8b:af:e1:af:37:
         c8:9e:89:5a:75:68:db:ff:2a:e5:16:9b:ef:b5:18:e3:9c:f5:
         2b:a5:04:1c:58:31:1a:bc:55:c7:38:cf:60:23:72:e7:13:f5:
         fc:b2:6f:2f:a3:28:5c:36:72:11:13:16:d2:42:8a:76:7d:50:
         a4:eb:da:01:d3:cf:9b:a1:d0:3f:0f:fe:24:f1:8b:04:58:6c:
         16:8b:d9:cc:a4:b2:8a:7b:2c:a8:16:c8:3a:74:01:d5:af:40:
         80:24:a2:b3:bf:86:27:a6:de:92:34:b4:83:aa:eb:0d:cd:68:
         25:29:08:41:55:d2:38:89:e1:10:d3:f7:c5:ab:77:17:ee:a6:
         cf:33:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:11:58 2024 by rpki-client on console-fra.rpki-client.org