Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
File:                     E562A356702F11EF9806F81FC4F9AE02.roa (raw, json)
Hash identifier:          78jtZd1aLIJhGMZERXI/eJfp/YugWL7uQ9N+SuRaNXk=
Subject key identifier:   3E:E9:C5:49:A2:74:4C:E6:54:19:39:1A:E2:15:C9:20:EC:B1:9F:8B
Certificate issuer:       /CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
Certificate serial:       05C8
Authority key identifier: 26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
Signing time:             Wed 11 Sep 2024 11:20:49 +0000
ROA not before:           Wed 11 Sep 2024 11:20:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141159
IP address blocks:        103.146.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl
                          rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 22:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00E/serialNumber=26A8C84C20D02A7FC4AEEDE155C0B31B08EE7B67
        Validity
            Not Before: Sep 11 11:20:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66e17d10-69e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3a:04:e1:97:0c:dc:20:86:b0:99:02:7f:3d:
                    de:bb:46:4b:e5:24:24:ec:bb:db:6b:22:dd:39:37:
                    99:99:b4:90:3b:a9:8e:04:b3:cb:f7:86:17:ba:35:
                    55:2f:70:4c:db:8a:91:2e:df:6f:5f:73:9f:7a:47:
                    02:ab:6c:b6:32:c3:2f:ad:77:5e:b4:3c:07:8f:14:
                    6c:64:1e:f5:8b:f1:53:9b:50:10:de:07:83:d2:b2:
                    2a:56:ec:cd:29:11:21:af:a3:87:bc:c5:e9:49:ff:
                    57:3d:02:17:38:ae:04:81:97:f2:09:1c:6f:91:f3:
                    38:8e:2b:d1:40:04:c1:6e:82:da:85:70:bc:8c:f9:
                    bd:91:ee:85:a1:00:4a:13:79:41:46:99:aa:01:42:
                    93:1b:f8:3f:51:11:6b:e8:2d:25:73:1a:13:21:cb:
                    ba:0b:c1:ea:0c:68:15:56:a2:d9:90:e4:71:49:36:
                    66:02:17:df:f9:e3:a3:12:6b:d6:9c:39:7c:62:84:
                    a0:d7:8c:fd:ff:50:b7:8a:83:b6:e4:61:6a:f3:69:
                    67:ee:84:ba:00:b2:71:7e:e3:1f:cf:b5:87:36:cb:
                    52:3b:21:66:38:07:ad:f9:0e:d6:aa:31:20:69:67:
                    98:80:ab:59:42:5d:17:0a:98:71:d1:8c:01:f7:d3:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E9:C5:49:A2:74:4C:E6:54:19:39:1A:E2:15:C9:20:EC:B1:9F:8B
            X509v3 Authority Key Identifier:
                keyid:26:A8:C8:4C:20:D0:2A:7F:C4:AE:ED:E1:55:C0:B3:1B:08:EE:7B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/JqjITCDQKn_Eru3hVcCzGwjue2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JqjITCDQKn_Eru3hVcCzGwjue2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00E/C6B57C8E8C9011EB91DE0E7AC4F9AE02/E562A356702F11EF9806F81FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:8e:1c:0c:ee:12:e3:84:ac:20:1d:3e:c0:3a:62:5d:08:
         73:ff:e9:54:7f:b7:57:93:53:e5:44:bf:cb:96:e6:34:24:5a:
         ad:a8:21:1b:48:33:7b:31:cf:03:93:53:b4:92:38:89:44:98:
         e8:59:65:96:94:b5:1d:30:d4:f2:f9:ea:d7:af:ba:01:da:0f:
         bf:68:9e:f9:d8:df:b1:f5:91:83:9c:5c:3a:56:10:20:9a:ea:
         8e:40:b2:26:d6:f0:7e:52:e7:ca:36:c0:95:53:b0:3c:50:07:
         cf:42:fe:21:cc:cb:81:b2:40:96:22:e1:6d:bd:de:e3:fc:e3:
         df:17:f0:ff:56:54:0c:d5:83:16:9d:d7:cb:cf:46:dc:13:ea:
         f0:93:52:43:c2:ff:d3:29:01:9a:c8:21:e7:31:9c:6a:ba:1b:
         c0:19:98:ef:2a:5a:6d:6c:f2:f6:7c:62:10:49:66:75:59:16:
         59:60:3d:59:37:fb:3b:f0:91:c4:cf:75:c9:9a:ac:07:a3:7d:
         da:c1:80:75:62:f5:dd:b2:02:2a:f5:76:22:f4:36:71:be:ea:
         f6:bb:76:90:2a:1c:66:14:3f:1e:b7:b9:57:90:de:a3:ed:46:
         ff:e1:bf:86:17:df:5f:5e:1d:43:e0:06:9a:51:d6:5a:11:0b:
         f4:4f:99:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:49 2024 by rpki-client on console-fra.rpki-client.org