Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
File:                     7E4ED0E4798B11EA90252969C4F9AE02.roa (raw, json)
Hash identifier:          StcHXD7OSDwjaAiPvm4lKhdtSQLcm5zEPAFncff2hIQ=
Subject key identifier:   FE:78:A3:8D:21:73:D8:8C:C8:92:26:0E:27:83:D6:F9:FC:2B:F1:0F
Certificate issuer:       /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
Certificate serial:       08DD
Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 21:28:50 +0000
ROA not before:           Thu 30 Nov 2023 21:28:50 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     139790
IP address blocks:        103.145.64.0/23 maxlen: 23
                          103.145.64.0/24 maxlen: 24
                          103.145.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl
                          rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
        Validity
            Not Before: Nov 30 21:28:50 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6568fe91-b103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:b5:93:7a:6f:72:bc:27:0e:7f:90:54:62:
                    24:be:32:a1:95:8d:3a:3c:2f:2e:04:32:3f:c4:64:
                    4b:72:b3:15:44:af:a6:1a:1f:de:6f:dc:95:d1:4a:
                    83:c7:40:b8:a1:85:bc:1b:8b:ec:e0:a5:d8:05:f2:
                    7f:54:36:77:8a:31:5e:32:df:7c:10:30:fa:62:de:
                    d1:05:00:36:58:af:80:90:3f:b6:70:03:89:d6:95:
                    80:79:96:e3:5b:c2:20:73:cc:bc:d5:dc:47:28:26:
                    1e:be:fe:9f:f6:31:09:9a:39:a3:27:5f:5c:a1:b4:
                    b7:3a:8c:dd:57:2d:47:2f:63:46:4a:26:78:30:28:
                    18:de:69:4d:2d:17:98:f5:46:c3:51:6d:3e:e9:70:
                    2b:f1:89:5a:89:58:85:b2:52:07:b6:0d:81:c1:a2:
                    87:bf:ec:fb:3e:7d:50:47:73:6a:88:e3:74:e0:ce:
                    8f:ca:7d:ee:48:b7:af:1f:5a:b9:61:8d:b2:75:dc:
                    85:7f:9e:2e:e8:4a:1c:0f:d7:78:e3:8e:c4:bc:ac:
                    71:e5:46:d9:47:55:65:b2:c2:24:90:a0:b0:85:3a:
                    3a:38:a5:c1:0e:39:58:21:3c:1c:27:44:5d:aa:34:
                    9b:6b:ee:28:14:ee:f5:15:af:98:ab:13:e1:e4:54:
                    69:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:78:A3:8D:21:73:D8:8C:C8:92:26:0E:27:83:D6:F9:FC:2B:F1:0F
            X509v3 Authority Key Identifier:
                keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:85:7a:1b:5e:fd:ea:a9:5a:ec:72:06:4d:7d:86:46:a4:
         df:25:3a:68:48:ff:bc:fb:67:a9:2d:92:23:ed:41:05:e9:4d:
         98:0c:1a:cd:6e:d7:a6:17:49:02:d2:32:1d:cc:49:3f:18:ff:
         ff:6b:17:ff:b0:5a:77:56:e4:ff:9f:58:96:88:b9:cf:ad:23:
         4e:fb:b0:9f:05:3f:8d:62:b4:7a:3c:84:24:ce:69:e5:32:f4:
         63:68:ed:20:16:4d:19:ee:c7:c4:4a:8a:8f:fa:ca:2f:66:bd:
         9c:32:b6:59:0d:71:2c:ce:cc:39:cb:b3:cc:00:02:e5:f1:91:
         ec:79:18:9f:cd:15:6d:90:96:8e:a9:3b:22:30:5a:fc:09:71:
         10:42:5e:2f:1d:82:23:83:54:c6:68:8e:3b:37:bf:98:73:f5:
         01:d1:e8:eb:d9:7e:15:5d:37:21:ed:5c:62:59:5b:d5:09:58:
         ab:f2:8c:95:17:7d:f3:fa:5c:37:84:3f:8a:b2:7e:f3:d8:d8:
         4b:db:fc:66:ee:fa:ff:46:13:28:3f:2f:1f:a3:86:8b:41:b6:
         96:2d:d8:63:44:90:a2:83:3a:50:d4:cc:74:37:78:65:33:1a:
         31:08:7b:4c:b8:4c:7c:bd:72:57:5f:f7:36:08:65:17:b3:28:
         b9:db:1e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org