Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/13950414817211EF986A3B0DC4F9AE02.roa
File:                     13950414817211EF986A3B0DC4F9AE02.roa (raw, json)
Hash identifier:          QeQdfhIkLyghxL6rKoknKgwuaGIjqy1eNwy3Q6L5EMI=
Subject key identifier:   02:37:9F:90:9B:D3:B4:E2:FA:38:B6:CB:1F:F7:5E:AB:80:5F:04:7D
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       F4
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/13950414817211EF986A3B0DC4F9AE02.roa
Signing time:             Thu 03 Oct 2024 10:27:45 +0000
ROA not before:           Thu 03 Oct 2024 10:27:45 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149977
IP address blocks:        103.115.17.0/24 maxlen: 24
                          103.115.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Oct  3 10:27:45 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66fe71a1-3fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:6d:5a:76:b2:e1:cb:f0:11:52:50:36:9d:
                    2b:cf:7a:2d:99:25:16:9f:83:9e:f8:cb:aa:bd:8e:
                    07:de:51:19:3c:f4:dd:93:c0:b2:aa:4a:ef:6b:93:
                    a9:b2:1d:f7:12:bc:c7:22:7f:14:70:85:97:f2:6b:
                    e9:c8:d2:cc:1a:e3:24:f4:aa:66:9d:db:cf:7e:4f:
                    f0:7a:ef:4e:9d:f6:1b:74:cc:7b:49:2d:80:e6:0c:
                    b7:7f:30:1a:7d:d1:6a:bc:e1:e6:b8:01:6f:63:78:
                    88:e7:29:2f:39:d5:93:6c:0b:d2:89:45:ab:f6:f6:
                    29:12:86:89:51:a1:ad:d3:46:dc:68:26:c2:3b:d8:
                    32:b0:6b:48:62:4e:f0:9f:78:71:68:c0:e3:4f:17:
                    1b:79:ff:20:34:e1:c6:50:ef:5b:d4:09:1b:88:7e:
                    1b:e5:e8:12:ad:81:00:92:65:d1:c2:41:b9:01:c8:
                    c2:db:8d:10:73:4c:a4:c7:ec:c7:d6:ae:af:52:46:
                    ee:da:c8:2f:24:84:f1:01:99:98:3b:98:1a:a5:32:
                    65:18:b1:ff:93:f8:e6:6f:3a:e3:cf:c9:61:bc:2d:
                    22:d9:be:b3:c0:8c:97:3e:bc:c6:27:97:2f:2c:b1:
                    03:2b:68:bf:38:95:20:b9:dc:62:2d:0f:24:23:4a:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:9F:90:9B:D3:B4:E2:FA:38:B6:CB:1F:F7:5E:AB:80:5F:04:7D
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/13950414817211EF986A3B0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.17.0-103.115.18.255

    Signature Algorithm: sha256WithRSAEncryption
         98:c1:39:57:57:0b:2a:a7:03:94:5d:3d:46:1f:c1:f5:f4:f6:
         c1:bc:25:c8:61:c9:51:d2:68:94:fd:48:49:78:b3:30:8f:dc:
         a4:35:69:0a:bc:0a:8b:5c:57:27:a4:58:c7:94:e1:33:d3:b9:
         8f:8b:2f:8f:c5:bc:8a:46:f5:10:5c:97:3c:8e:f1:69:3f:5c:
         63:67:0d:03:cd:31:37:fd:95:25:2c:fe:fa:b8:9e:dd:e7:f0:
         60:0d:97:4f:78:18:c9:2b:4a:86:87:10:c8:7b:ed:ad:84:81:
         ee:af:e6:4e:0b:b6:4b:f2:e4:7d:15:2c:2b:b0:00:1d:df:0b:
         db:76:f4:7b:96:4a:05:04:0d:27:68:f2:91:5c:e9:47:1c:2e:
         1d:62:af:bf:23:19:4a:2f:cf:21:83:b0:72:02:8c:39:f2:1a:
         be:2b:d9:c0:fa:a9:a8:f9:2e:11:19:f4:39:b7:6d:82:24:9a:
         aa:6b:67:61:47:5b:2e:f9:53:9c:e1:90:5c:58:fc:b9:9c:2e:
         4a:42:15:19:d9:d0:30:fd:d2:79:be:c6:5c:30:03:e8:6c:71:
         dd:db:fd:af:41:25:f8:74:21:41:0f:e7:10:c8:b4:53:67:82:
         8e:63:a6:4b:ea:58:63:91:ef:a7:03:85:35:8a:0e:61:6d:6b:
         9a:b6:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:00 2024 by rpki-client on console-fra.rpki-client.org