Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
File:                     27030ADA8EB211EA9D09090FC4F9AE02.roa (raw, json)
Hash identifier:          gLuoJW8vJX9f9pGeIxuvpKdQoZyIHfDvjf5EmSyhTPE=
Subject key identifier:   16:23:90:04:23:C6:11:55:D7:E7:BE:1F:18:98:FA:B8:C9:33:64:18
Certificate issuer:       /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial:       086E
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
Signing time:             Wed 06 Dec 2023 21:28:35 +0000
ROA not before:           Wed 06 Dec 2023 21:28:35 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139919
IP address blocks:        103.147.24.0/24 maxlen: 24
                          103.147.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
                          rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
        Validity
            Not Before: Dec  6 21:28:35 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6570e782-1c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:0f:d8:3f:cb:13:32:27:04:c6:1f:8d:2d:
                    d2:7e:5d:03:e9:4e:af:37:40:46:1f:15:57:cc:85:
                    b6:14:37:d1:a9:f1:2f:e1:3e:08:cb:1c:06:bd:a5:
                    e3:33:b3:34:fd:fa:71:2f:b7:60:96:98:d0:18:9d:
                    09:a3:e4:e6:e6:2f:2e:bc:f2:b4:c2:1c:8d:cb:47:
                    f9:f2:6a:78:68:df:a4:dd:32:77:f9:7d:26:11:2b:
                    99:b4:b6:71:03:5f:29:3b:c1:9e:3e:13:08:95:5b:
                    8c:99:79:cb:09:0a:2b:c0:e5:b8:e8:00:dc:8b:1e:
                    3e:35:2f:9c:63:0c:4a:b4:86:6a:77:5b:e4:cd:48:
                    9c:f3:f9:09:66:78:21:bb:9f:ba:e3:ef:89:28:96:
                    ee:8b:ae:10:1e:b0:6d:1d:90:a2:c4:fe:02:dc:26:
                    ef:04:f8:ff:c2:9a:d8:b8:ae:5e:9c:38:4f:33:2d:
                    e6:da:5f:27:40:6c:fe:6d:41:5b:36:00:92:ee:bb:
                    89:ff:60:a9:cd:ec:ac:db:ea:fd:a8:3b:0b:f8:ef:
                    2b:23:a0:ea:a0:4e:f2:46:2b:7b:0a:35:86:4a:39:
                    7a:41:1b:37:4e:e9:9c:b2:cf:3d:59:a2:88:4d:df:
                    77:aa:46:58:06:80:32:64:61:d4:7c:85:56:3f:d1:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:90:04:23:C6:11:55:D7:E7:BE:1F:18:98:FA:B8:C9:33:64:18
            X509v3 Authority Key Identifier:
                keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/27030ADA8EB211EA9D09090FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:75:6f:61:5b:b4:cd:e5:1e:67:0d:fa:b0:fd:95:8c:a8:
         3a:45:07:a9:0b:d6:b6:df:d2:49:33:44:a9:a4:ee:d0:86:78:
         6a:52:55:e1:bc:85:b9:82:27:fb:22:59:d5:df:d1:bf:04:35:
         48:dd:94:b0:a7:a2:d1:88:b2:b1:08:39:3b:d2:ff:c1:46:81:
         96:8f:6f:a4:df:9e:6a:cf:97:66:76:2e:ec:bc:66:46:29:6d:
         b4:c6:0b:a0:48:71:73:bc:ea:00:82:81:98:9a:f6:13:4b:aa:
         9c:16:83:bc:6b:16:ef:93:bc:64:80:62:6c:59:13:08:5a:ef:
         17:6e:30:6c:4a:de:80:39:f1:95:e5:24:e3:d8:62:66:81:0b:
         c2:dd:84:0c:63:f9:82:4b:eb:55:f3:b7:20:da:c5:28:6e:7b:
         17:b9:b5:5e:92:70:78:87:79:5d:1f:2e:a9:28:16:bb:c6:4d:
         fc:a7:d2:0b:03:d8:e5:ae:23:4b:b0:29:95:0b:09:f8:e7:4e:
         c9:44:cc:03:7e:f4:6f:99:b3:8b:b6:06:04:9d:96:ee:f6:bf:
         e8:2a:56:58:c8:66:04:77:e0:62:b8:8a:e5:3f:9c:c8:70:14:
         e5:5e:58:d0:bb:40:96:a6:9e:b5:86:99:49:77:5a:7b:0c:e2:
         5c:c6:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org