Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
File:                     C130A016889811EE8EB03D6EC4F9AE02.roa (raw, json)
Hash identifier:          ps8T51LAEWm+2oQL0cFEdFjjIOqwK71webhbpBac664=
Subject key identifier:   FB:78:4A:6E:02:78:72:8F:29:1E:1E:11:AF:79:BD:5C:E7:D0:D8:3A
Certificate issuer:       /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial:       0760
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
Signing time:             Wed 18 Sep 2024 21:40:30 +0000
ROA not before:           Wed 18 Sep 2024 21:40:30 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     138197
IP address blocks:        103.155.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
                          rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
        Validity
            Not Before: Sep 18 21:40:30 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66eb48ce-5fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:45:95:5a:57:1c:f9:2e:82:13:75:af:aa:
                    d8:01:33:4b:fd:16:43:40:73:7b:31:7b:42:9c:5d:
                    9a:cd:e3:ea:53:9c:99:c7:dd:81:29:cf:52:22:87:
                    a7:4f:f6:08:00:25:5a:1d:0a:fa:6b:6b:f4:61:e5:
                    93:8a:ed:63:ca:1d:8f:e9:ee:10:a5:76:d1:86:63:
                    17:15:f9:64:44:23:78:a8:54:0b:62:bc:27:12:f6:
                    04:57:0f:12:0f:ae:26:96:22:fc:5e:30:ce:1a:dd:
                    7c:f7:68:9a:4b:78:68:32:37:6f:2c:2d:52:2b:54:
                    eb:b5:30:eb:a4:2c:5b:66:34:1b:3e:d6:db:d5:64:
                    33:38:e5:8f:9f:f4:ff:07:03:de:07:12:70:ec:20:
                    f4:b1:1b:ea:c5:ec:1a:db:06:59:36:2d:02:7b:62:
                    be:cd:32:99:8f:39:23:47:6d:5c:03:20:8b:cd:d1:
                    9e:0f:fe:0f:a5:90:78:99:75:d1:e6:18:0b:0a:e3:
                    76:2d:5c:1c:58:4b:ce:d0:a9:41:de:2f:37:58:bd:
                    53:7c:d7:72:e4:3f:80:df:70:3d:8a:3d:e7:4e:56:
                    7e:2a:5d:c3:c3:9c:03:2f:43:ac:b3:66:2d:51:75:
                    ad:b9:74:ca:09:16:c5:cc:b9:6a:06:27:2b:81:5c:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:4A:6E:02:78:72:8F:29:1E:1E:11:AF:79:BD:5C:E7:D0:D8:3A
            X509v3 Authority Key Identifier:
                keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/C130A016889811EE8EB03D6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:46:32:d9:4f:0e:1f:08:7d:ec:73:ae:f9:a2:f5:9d:18:
         71:71:8e:81:6f:50:a8:ff:00:69:ee:e6:f4:d6:80:40:85:52:
         93:b2:4a:fd:9c:d2:b2:d8:5b:13:9a:f7:43:ee:bd:3c:be:be:
         96:9d:09:b9:7f:29:24:85:0f:2c:e9:3d:7b:13:0e:16:ea:db:
         97:1f:0a:ac:f8:f5:8c:85:43:75:98:a6:e5:6e:5d:b8:89:61:
         09:c7:52:17:04:06:4d:eb:8f:c3:2f:a6:6e:e2:fe:27:e1:cb:
         e8:6c:af:09:00:6f:e9:dc:4c:f9:a6:30:e7:80:d1:64:c5:86:
         55:73:be:31:2a:d3:ef:cd:dc:cd:68:3a:22:b6:77:6a:d4:f5:
         af:f6:5e:c8:89:e8:22:be:8e:5b:72:c6:65:27:86:1a:28:a6:
         10:a5:20:4e:57:96:a2:ac:b1:d1:85:06:9c:ba:43:a3:b3:a0:
         45:e0:85:8a:b3:20:c0:fc:df:0c:85:1c:78:1f:08:1d:c1:e3:
         a9:8d:b0:b7:0b:37:5d:6b:dd:e3:24:58:c5:03:f4:df:47:93:
         72:5b:92:ee:80:1b:55:70:2f:b1:2b:d7:47:d5:21:4e:eb:8d:
         5e:51:a1:53:cd:c4:fd:ba:16:14:ad:60:b7:3e:e3:d0:83:98:
         1b:f2:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org