Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
File:                     5B5592F07B0711ED9D595969C4F9AE02.roa (raw, json)
Hash identifier:          X3za7tb012nQ35aH6QmGQxHCcdo71+UHrc8XplSbxaA=
Subject key identifier:   2A:92:B1:7E:6E:97:C9:2C:19:2E:25:21:EF:8D:58:B2:A5:41:6E:5E
Certificate issuer:       /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial:       0828
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 21:38:45 +0000
ROA not before:           Tue 30 Jul 2024 21:38:45 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136429
IP address blocks:        103.152.106.0/24 maxlen: 24
                          103.152.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
                          rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088 (0x828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
        Validity
            Not Before: Jul 30 21:38:45 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a95d65-cabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:67:86:e5:7a:11:40:27:33:09:79:1b:a6:
                    11:76:32:7e:d2:e8:34:54:86:92:ea:e9:f7:87:61:
                    fb:d9:ae:80:42:d2:8d:eb:f4:db:b0:b0:ee:b8:4f:
                    cf:92:78:fd:98:ff:3e:87:35:49:82:0b:ac:fd:e8:
                    ab:e2:8e:47:19:b9:2a:eb:43:9a:f8:be:0c:8b:0a:
                    28:36:0e:d3:27:9b:54:d9:8d:a9:e6:e0:81:87:59:
                    8e:3c:89:97:cc:9c:96:ce:ab:8a:5e:82:ef:b8:f2:
                    ef:38:5c:a6:29:74:7b:19:5b:92:22:a7:3e:a5:d7:
                    ed:69:03:d5:d5:fd:74:91:4d:f3:1f:2c:83:da:67:
                    b9:d5:52:d4:25:5c:a4:ee:c0:14:fb:e9:49:7c:f5:
                    9e:f5:56:9c:47:5f:3c:bd:c3:22:7d:f9:ea:1b:4e:
                    e7:4d:ff:6e:a4:dc:0a:a7:fd:0d:54:21:a2:77:67:
                    c8:50:76:5d:52:7c:ff:9a:db:88:25:12:23:01:3d:
                    dc:6c:cb:7c:ec:90:3a:3b:f2:08:14:37:c0:62:3b:
                    db:99:8f:57:a5:95:73:d8:f5:20:d4:d4:4d:09:84:
                    2a:c1:3e:59:6a:4d:f4:6b:f0:a5:05:ee:3d:38:9b:
                    35:c9:35:56:13:d0:92:04:88:0f:30:fe:bb:7c:21:
                    d6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:B1:7E:6E:97:C9:2C:19:2E:25:21:EF:8D:58:B2:A5:41:6E:5E
            X509v3 Authority Key Identifier:
                keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5B5592F07B0711ED9D595969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:4a:0c:80:06:e3:cf:00:0e:40:85:85:b2:be:88:a9:94:
         50:30:93:4f:48:07:8c:d5:36:2a:3c:7d:0a:09:37:c6:81:1e:
         0f:06:60:5a:5e:2e:86:35:88:2b:c0:d1:63:a1:f8:35:c3:88:
         bd:bf:1f:92:50:a0:9c:43:72:6e:1e:b4:0c:9a:5e:e4:96:96:
         18:c4:f6:30:9e:16:63:9e:52:da:2d:e9:55:26:b6:66:49:7d:
         2c:20:ce:55:38:14:fc:ee:15:bc:07:37:13:9f:c0:01:92:6b:
         8d:0b:be:d3:a9:d1:8c:c5:0f:84:2f:1f:ed:46:29:8f:79:84:
         d7:5c:e6:ad:6a:cc:03:37:9b:66:fd:08:ae:eb:f1:bc:24:14:
         23:fd:7c:db:a7:84:2f:cf:28:c2:cb:13:cd:32:68:1b:e0:52:
         81:e8:b9:74:97:81:d1:a9:6b:26:25:e7:01:05:55:25:3f:7c:
         54:5f:04:cd:83:23:e3:db:64:62:a8:8a:0d:59:4c:0d:ce:85:
         08:17:8a:ab:a4:b3:55:3f:2a:5a:40:af:75:c5:89:79:ef:27:
         db:f5:33:cc:62:81:80:18:31:65:a8:24:06:4f:44:e8:81:ed:
         b8:2e:50:22:d7:88:fa:c9:ea:70:08:ba:62:e8:f7:34:a4:0d:
         7b:2b:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org