Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
File:                     E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (raw, json)
Hash identifier:          De2Jq2Xgko4z7eCmwmukR8L5+7gU5B92v8E7JGWOgY0=
Subject key identifier:   CA:95:4F:73:C4:F2:30:51:D4:42:40:53:02:FE:3B:A5:C1:EE:82:18
Certificate issuer:       /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial:       0A0F
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
Signing time:             Tue 24 Oct 2023 20:08:13 +0000
ROA not before:           Tue 24 Oct 2023 20:08:13 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133149
IP address blocks:        103.75.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
                          rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 20:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
        Validity
            Not Before: Oct 24 20:08:13 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6538242c-0253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:10:78:ef:d5:56:27:60:45:33:ea:c2:01:
                    de:f9:90:75:49:1d:20:ce:97:78:44:ae:ca:34:43:
                    73:70:0b:56:9d:0d:89:79:2a:7e:f8:9e:b5:3c:49:
                    29:8c:6c:0d:bf:d8:48:b0:4c:11:db:5a:5e:72:bc:
                    5e:73:d7:99:b5:ee:ff:36:54:27:fe:bd:52:bb:f5:
                    de:14:a1:1a:bf:96:35:3d:be:ba:10:cc:ba:ca:3c:
                    b5:db:7f:78:13:7e:b3:62:03:05:a9:ab:35:41:79:
                    2d:9b:51:fe:b4:70:59:0b:f9:7f:44:44:07:a3:ea:
                    71:0a:30:f3:b2:ff:cd:ca:b7:b0:b0:2c:c5:ce:e5:
                    c0:94:31:dc:1d:d5:db:66:79:03:ab:31:90:45:34:
                    f7:5a:2f:ef:e6:2e:8a:30:0a:5f:83:e1:8c:b6:c1:
                    e8:5a:9e:95:c3:1b:ae:03:ea:2f:3d:9d:d3:4f:96:
                    fb:eb:de:b0:61:8d:64:b9:64:ff:14:43:e1:81:97:
                    ef:d6:84:21:16:0c:b0:ff:2a:5f:07:e3:7f:04:ce:
                    0a:d1:ee:68:fe:42:fb:33:b8:62:ed:ce:07:6a:d4:
                    da:f8:79:bb:a9:fb:30:78:d3:9e:b8:d3:5e:c4:39:
                    c1:22:4a:07:b5:06:b4:6a:c7:80:f3:a8:e6:5f:6d:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:4F:73:C4:F2:30:51:D4:42:40:53:02:FE:3B:A5:C1:EE:82:18
            X509v3 Authority Key Identifier:
                keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:c8:a0:1b:f4:79:3e:c9:30:96:1b:cd:96:9d:5d:fc:a0:
         d3:49:bc:dc:45:77:82:5b:df:e0:9b:77:09:9f:64:c0:6d:a6:
         93:19:09:7a:4b:21:06:52:99:c8:4c:c8:43:a9:73:6f:34:79:
         0c:34:87:f2:9b:f0:1a:f4:37:58:8b:95:af:35:3a:df:26:c5:
         85:86:df:04:02:d0:f0:e4:32:91:97:94:d8:e9:5b:b9:e6:8e:
         2f:49:80:b0:e3:41:a4:7d:f2:47:d0:a7:77:43:fa:cb:57:05:
         c4:17:d1:88:64:5f:48:43:db:96:a5:2a:9d:e6:0b:7d:65:30:
         37:56:91:03:ed:5a:a0:aa:9a:b7:c4:66:19:99:65:f1:a1:89:
         67:f3:00:04:21:48:25:ef:ce:6e:43:56:1a:87:b0:97:f0:0d:
         c8:d0:5c:56:a7:8f:4b:9a:63:17:91:b5:62:a4:ab:a5:fc:eb:
         7a:16:f0:15:70:dd:79:22:5b:53:ee:7d:cb:ea:63:69:3f:5b:
         94:a5:77:25:47:ff:ba:ef:65:11:6d:af:f0:2a:4c:a9:b1:d2:
         ee:d0:d6:2a:a1:f9:47:dc:84:11:c4:3a:5d:fa:45:58:95:89:
         b0:4e:7b:a5:d9:28:1d:08:6f:10:3e:cc:a8:16:ce:c3:85:15:
         2b:32:84:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:40:11 2024 by rpki-client on console-fra.rpki-client.org