Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/5EF136B6F30E11ECBDF7B918C4F9AE02.roa
File:                     5EF136B6F30E11ECBDF7B918C4F9AE02.roa (raw, json)
Hash identifier:          oEE+S3sZ5y8PcsICEHhdZ4mRyR9Cw85Y8wDjNdp4NPs=
Subject key identifier:   3A:82:E2:3F:71:70:44:06:E4:40:BB:EE:78:F3:45:E8:BB:47:BD:37
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       05FB
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/5EF136B6F30E11ECBDF7B918C4F9AE02.roa
Signing time:             Fri 22 Sep 2023 22:59:54 +0000
ROA not before:           Fri 22 Sep 2023 22:59:54 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137580
IP address blocks:        103.154.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 23:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Sep 22 22:59:54 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=650e1c6a-710e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:a0:0a:68:d8:87:b9:46:be:90:79:0d:87:
                    f1:04:9f:f0:e7:be:ac:f7:7a:10:55:2c:24:0f:91:
                    ac:2a:b3:b9:0d:89:49:50:26:5c:ec:9f:5c:1d:5a:
                    b9:56:2a:02:95:8b:1d:52:fd:10:9b:e3:b4:29:a1:
                    ec:dc:a1:9f:a8:a2:50:5e:a5:1c:44:ed:d7:37:dd:
                    ed:ab:67:69:aa:92:d8:75:9a:33:7a:70:74:34:6e:
                    25:bf:15:84:72:a8:80:28:ba:da:29:70:a9:63:44:
                    f4:08:9b:81:49:9f:9a:1e:f9:7d:e5:92:1e:95:b8:
                    34:24:85:47:31:21:38:8b:8b:58:f7:17:b5:6f:a3:
                    42:6b:f5:36:b0:64:89:7b:99:df:4f:c7:d3:7b:79:
                    73:49:91:ea:fa:ec:36:f7:19:fd:0f:4d:07:a6:ca:
                    85:c8:87:77:42:68:81:c8:45:24:94:ec:c9:ea:ed:
                    0d:b8:db:7f:24:bb:96:b9:da:3c:ab:45:5f:ed:08:
                    6d:26:87:b4:21:b3:02:70:7e:a8:aa:75:50:29:c6:
                    5f:df:05:f1:62:71:ae:b1:ec:07:81:8d:70:4d:91:
                    6c:19:77:db:c9:36:9a:3b:62:5e:19:0b:cb:a9:4c:
                    34:21:aa:f4:d5:4b:98:84:07:c2:f5:04:1e:d7:12:
                    60:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:E2:3F:71:70:44:06:E4:40:BB:EE:78:F3:45:E8:BB:47:BD:37
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/5EF136B6F30E11ECBDF7B918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:68:f6:b1:b0:d7:08:9c:13:a0:55:1c:8f:cd:b4:d3:01:79:
         13:0f:da:57:28:25:96:e6:57:b9:12:43:94:0e:7b:12:ee:83:
         c1:f0:4a:43:be:16:42:90:93:b9:95:f9:b0:9e:a4:5d:57:d2:
         36:e9:50:ce:18:e5:7a:da:11:40:5b:fb:40:5c:2e:21:54:81:
         b4:7c:28:eb:fe:14:c6:f2:2a:31:9e:eb:d1:f3:f7:02:71:d4:
         70:24:4d:a7:be:02:1c:3a:64:48:9e:90:3c:89:38:c5:2d:5e:
         82:ca:b7:62:dd:14:3e:59:cf:32:66:30:11:39:4a:af:5a:2e:
         37:04:ca:fd:94:58:e0:11:12:44:62:46:69:8d:39:84:87:d8:
         0f:ff:6f:42:de:27:d0:e7:df:3a:ab:1b:d5:0e:51:ee:3b:70:
         da:a5:55:a7:fb:71:61:6b:ab:b3:bf:6f:ec:b3:38:57:12:41:
         4c:fe:da:d5:4b:84:b9:78:59:66:91:68:73:36:b1:60:7f:a4:
         07:e6:94:57:f6:7e:30:7d:ce:22:f4:83:28:4d:9d:25:31:86:
         a4:8a:1a:4f:ee:06:c8:5a:33:e8:bb:40:4b:07:ec:6c:3e:2b:
         83:da:ba:6d:8f:d9:0b:e1:c3:00:e1:88:c0:04:09:e4:e1:35:
         6a:8c:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 00:53:20 2024 by rpki-client on console-ams.rpki-client.org