Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/1E4394CC03AC11EBBA025F2BC4F9AE02.roa
File:                     1E4394CC03AC11EBBA025F2BC4F9AE02.roa (raw, json)
Hash identifier:          AVie/3r3Cv2E5zLZN+Oa2f/YcfZCV4nyOlsn+CIPmSM=
Subject key identifier:   12:DB:0F:E4:C0:2F:49:A9:94:4B:85:84:2D:61:C9:04:2E:EF:B3:5E
Certificate issuer:       /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial:       06B4
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/1E4394CC03AC11EBBA025F2BC4F9AE02.roa
Signing time:             Tue 06 Feb 2024 22:41:40 +0000
ROA not before:           Tue 06 Feb 2024 22:41:40 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139917
IP address blocks:        103.147.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
                          rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
        Validity
            Not Before: Feb  6 22:41:40 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65c2b5a4-0689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:df:11:77:a5:b5:1c:63:3b:bf:68:89:13:
                    d5:ed:74:ed:53:e4:6c:90:2b:8d:96:b7:a2:e3:4b:
                    23:01:d0:e6:89:ef:5a:f1:30:b7:fa:d9:bc:7b:d7:
                    e0:68:46:05:c2:c3:bf:2f:f6:d3:84:53:77:5d:4d:
                    d5:40:c9:1f:41:0b:d5:13:9b:b2:ca:b3:db:30:be:
                    53:8d:d0:1e:90:a8:04:74:b3:6a:5e:44:a2:35:c0:
                    06:3d:b4:57:4e:2e:99:61:66:99:20:ec:55:c3:3c:
                    a8:52:4b:83:3e:cf:42:61:d3:42:f9:38:03:8f:19:
                    65:3e:06:64:c3:3d:51:2e:cb:99:dd:3d:d8:a0:6f:
                    fe:fd:62:b7:5c:c4:19:a2:13:82:be:a3:51:55:41:
                    eb:d8:2a:2c:bf:59:f6:81:21:56:64:9e:de:70:71:
                    d4:c7:49:19:aa:94:3f:b9:5f:a2:1e:9d:12:71:1f:
                    19:77:91:e9:5a:eb:a2:0f:5d:2b:9c:fa:cf:6d:5a:
                    ad:97:15:6a:55:1e:24:d4:e0:2c:1b:bc:f0:63:82:
                    4f:83:1e:5a:36:24:c8:80:c0:34:59:b4:c8:24:e5:
                    0e:95:6f:fa:e1:f1:f7:1d:5b:5f:d1:30:2b:97:69:
                    68:a0:78:fe:f9:a8:ba:85:ae:c9:1f:09:fc:3e:d0:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:0F:E4:C0:2F:49:A9:94:4B:85:84:2D:61:C9:04:2E:EF:B3:5E
            X509v3 Authority Key Identifier:
                keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/1E4394CC03AC11EBBA025F2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:ee:25:95:20:a8:af:54:d2:87:a9:3b:0a:6f:25:0d:bd:
         46:ab:65:19:1b:e1:80:2c:78:ef:07:7b:f4:ba:bf:2f:d8:8f:
         e7:76:54:c5:c6:2f:60:cc:b7:95:52:9e:5f:dd:97:f5:fa:bd:
         4c:8c:20:df:d5:69:87:5b:a5:d2:59:a7:a0:7f:c6:3f:cf:30:
         11:2e:3f:b9:2d:24:ad:5c:98:e2:de:a4:4b:00:04:44:42:0e:
         84:75:4b:42:d3:ed:56:56:7f:79:d4:e2:87:16:74:83:17:4d:
         6a:22:6c:80:00:31:42:56:00:fd:34:e4:3f:01:2a:18:c3:84:
         02:da:f2:00:a2:2d:e4:95:ed:12:86:2c:b4:98:5a:0e:83:57:
         5a:85:2a:54:89:1a:23:0b:36:7f:41:31:94:70:e1:c4:3a:60:
         3a:31:6f:75:7c:12:78:cb:9d:5d:44:9a:12:9d:18:80:a0:c5:
         20:3c:6e:e5:23:5e:9d:96:fa:61:83:79:b2:65:1b:f9:5a:18:
         d0:89:0d:10:a7:95:73:a5:b0:3e:db:b9:c3:13:df:59:10:d8:
         0a:95:a7:97:19:d2:2f:1e:6c:5d:a8:73:bc:fd:d2:a7:f0:4a:
         a8:ec:60:f4:52:a9:d6:e7:58:5b:a8:14:d2:15:5b:0f:8a:cf:
         c3:a3:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org