Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
File:                     C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (raw, json)
Hash identifier:          ZzinzTlIW5G+E7Cn69/SSCuiLh8Bteyn8yaFUqPW2mk=
Subject key identifier:   EC:91:E9:3F:57:23:64:BE:98:C8:FB:D8:87:26:6F:45:C4:F9:C1:10
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2B3F
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
Signing time:             Sat 18 May 2024 15:52:33 +0000
ROA not before:           Sat 18 May 2024 15:52:33 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     133535
IP address blocks:        103.233.240.0/24 maxlen: 24
                          103.233.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11071 (0x2b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: May 18 15:52:33 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6648cec0-fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:4f:56:b8:3c:c3:e1:ab:96:be:2e:95:64:
                    54:a6:91:58:c0:1e:63:ba:15:89:5e:79:aa:d5:f4:
                    ee:37:7a:cd:fe:f7:bd:77:00:f0:5c:31:27:21:38:
                    b3:e4:ee:a8:8a:b1:ec:d1:45:d6:0a:17:ba:22:20:
                    09:59:64:fd:f4:96:6a:96:80:ed:18:c2:6b:15:1f:
                    10:60:33:cc:17:3b:c3:c4:93:93:fb:c2:fa:35:b4:
                    f5:8d:d7:4f:11:6b:70:1f:d3:ab:a1:0f:fb:89:35:
                    0a:dd:a6:6f:62:d2:fb:dc:98:cc:de:26:95:76:79:
                    73:ff:ba:34:07:52:d8:19:7f:86:1a:32:39:ad:fb:
                    a4:57:64:a2:79:1f:1b:76:27:a9:6e:a2:db:5a:98:
                    0a:10:fd:84:de:42:b4:52:17:00:20:83:7c:e4:2c:
                    19:fb:3b:75:0a:92:aa:94:bf:76:28:84:91:96:4d:
                    ea:5c:06:09:59:42:91:12:17:1e:41:5d:3e:54:ec:
                    42:ab:bf:06:a0:d1:fc:03:fa:b3:1b:64:37:67:75:
                    dd:95:e3:4e:64:fe:1c:3b:45:d5:3f:0d:d4:42:65:
                    eb:95:ed:1b:96:5f:0f:53:ee:d6:b2:54:50:07:e5:
                    a5:6f:ba:e5:62:b8:6b:2e:25:c8:31:eb:14:09:9b:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:E9:3F:57:23:64:BE:98:C8:FB:D8:87:26:6F:45:C4:F9:C1:10
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/C49CBEFCD27711ECAAC6BD51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:17:90:1e:d8:77:b1:2f:03:e9:09:86:18:39:22:be:76:
         02:07:e8:9f:40:10:c6:d1:a0:ab:e3:7d:de:6d:8f:1a:94:be:
         ce:1b:fa:b9:2d:f0:4c:81:d3:da:1f:a8:23:48:f4:1f:59:60:
         01:4e:80:7a:d3:12:8c:f6:7b:45:7c:1c:7a:6f:a6:ec:91:bf:
         59:f4:8e:ca:c6:fd:c4:f2:0b:0a:08:32:c2:ee:ac:1b:fd:90:
         0d:61:fe:6a:6d:0b:35:2a:54:ce:3f:d7:f6:07:0d:b1:80:a0:
         56:06:05:c1:0b:b0:f0:79:aa:5c:4f:46:c8:d5:30:65:26:43:
         a5:39:d6:b4:93:83:f1:fa:47:04:35:f1:79:b5:29:3f:36:50:
         94:2a:e6:d3:48:3e:b9:c9:c4:40:32:2f:e4:5b:7d:e6:4c:11:
         7b:a0:e0:c5:9a:a4:12:33:3b:bb:2c:ba:39:43:5e:aa:4b:3b:
         cd:aa:3b:1a:4a:3a:48:9d:5a:23:df:74:06:a8:61:d3:62:c6:
         3b:c9:40:ae:60:ec:cb:74:74:bf:27:91:c1:75:1b:66:c0:ab:
         d5:b0:39:33:28:1d:fe:7f:43:ee:34:41:e7:45:03:04:7c:ed:
         5c:8b:cf:2a:ef:a5:1f:29:6d:8b:34:e0:ce:29:8c:99:12:8a:
         68:73:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org