Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa
File:                     E649E89E6C0D11EB89BF4725C4F9AE02.roa (raw, json)
Hash identifier:          5jGLbN1I7+GANw0PJTx7Mh3WkS4coMideo7Yv1TbjW4=
Subject key identifier:   26:E0:D2:92:0E:10:A2:37:2A:64:07:E2:DB:4F:B4:EA:32:93:F1:6B
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       059A
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa
Signing time:             Mon 04 Dec 2023 23:50:52 +0000
ROA not before:           Mon 04 Dec 2023 23:50:52 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        103.153.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 23:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Dec  4 23:50:52 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=656e65db-7753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:2d:56:d5:f7:0d:98:1c:e0:76:3c:9f:22:
                    f7:d7:6c:6b:b4:c1:36:61:7b:ed:8d:7c:e0:65:76:
                    95:c4:37:e9:79:64:6e:22:f8:39:70:ef:02:c9:ba:
                    1b:1e:ca:d6:94:19:ee:04:3e:c5:59:38:f8:7e:0d:
                    fb:58:f1:7e:78:52:2e:b0:d6:91:80:c8:3c:cc:b3:
                    c9:cd:39:d5:e6:65:82:49:13:98:bb:a4:1c:19:48:
                    8a:86:90:fe:6b:c5:5a:85:43:5a:75:17:95:04:07:
                    a6:3e:26:29:d7:b7:86:3f:7a:e1:f9:a6:0f:78:c4:
                    30:4c:8b:dc:8a:e5:20:00:c9:b1:85:0a:80:79:27:
                    7a:26:a5:10:33:7c:d2:cb:29:54:48:ab:f3:28:fb:
                    a9:91:9e:36:e2:91:2e:66:ec:eb:bc:24:2c:2c:6e:
                    a6:47:49:e1:e9:2f:b3:38:a1:c6:19:50:21:4a:37:
                    43:30:17:79:b7:0c:cf:fe:46:b6:fd:80:63:95:b2:
                    25:27:fd:07:b6:6b:04:6d:83:f1:fc:59:4f:af:51:
                    89:70:b6:75:3c:98:b9:97:91:91:6c:c2:f1:7d:dd:
                    52:bf:88:ab:0b:0b:e8:6b:26:fb:49:f4:12:2d:bf:
                    1a:41:29:64:fa:76:07:0a:a2:03:c7:53:26:45:e3:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E0:D2:92:0E:10:A2:37:2A:64:07:E2:DB:4F:B4:EA:32:93:F1:6B
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/E649E89E6C0D11EB89BF4725C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:90:97:a6:3f:e1:87:7e:0e:b5:86:16:b6:8c:78:36:08:b5:
         89:ef:ae:e6:cb:e5:54:84:51:4a:14:be:da:67:7a:23:61:dc:
         e0:82:6d:00:89:1c:39:81:85:99:18:f1:a4:4c:d1:5d:8c:3e:
         f6:9c:37:45:27:41:ba:cd:e5:21:4c:bc:46:d9:73:59:52:ba:
         9a:54:e9:83:58:3b:00:ca:c3:94:cc:44:c6:62:38:b1:79:1b:
         47:74:a6:98:59:83:49:16:ba:ab:94:34:53:fa:2d:bd:47:c9:
         53:ac:e7:0e:ff:32:51:72:ab:63:36:bc:ba:0a:25:a3:0e:8f:
         bf:e2:fe:61:b1:92:85:43:bd:4c:da:06:ba:da:c0:af:5a:3f:
         16:5a:42:24:db:63:34:39:08:b0:e2:fc:ad:16:a3:a9:cb:5a:
         8d:68:bb:92:12:e7:1e:c2:8b:04:a1:be:5e:c9:66:df:8b:67:
         cb:48:31:6c:24:95:7e:7b:8b:a7:3f:2d:0c:cd:f7:38:8c:4a:
         ab:fc:2c:de:ec:78:ce:6f:9d:6c:58:32:94:4e:78:11:44:20:
         98:41:72:a0:12:b8:aa:88:49:b8:a3:d4:ac:10:93:a1:07:69:
         04:47:48:35:8b:a8:71:61:7e:70:30:26:84:87:17:05:44:28:
         dd:62:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 00:42:08 2024 by rpki-client on console-fra.rpki-client.org