Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa
File:                     5F506D7C8C7911EBB7E88620C4F9AE02.roa (raw, json)
Hash identifier:          pJ8Q6VSAm/7OV0oYIwdLwufm1ts8Sapm0z7tUd9ygLw=
Subject key identifier:   B7:EE:DA:06:BB:E3:29:9C:41:97:C2:10:62:D3:BC:A0:3B:2C:22:81
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       0550
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa
Signing time:             Sat 27 Jan 2024 00:22:39 +0000
ROA not before:           Sat 27 Jan 2024 00:22:39 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139911
IP address blocks:        103.147.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Jan 27 00:22:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b44ccf-7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:53:3d:c3:7f:5d:49:fc:9f:f6:6d:65:99:
                    db:f4:9e:11:53:8c:93:2a:1f:36:32:1d:6f:ca:3d:
                    69:c2:0e:5b:66:b5:fe:f8:1b:e0:ec:94:c5:75:a9:
                    c1:97:8a:62:a1:0b:5b:9e:37:32:e5:ce:94:61:57:
                    c9:b1:c7:b1:e0:45:80:75:80:17:d9:46:bb:e9:1f:
                    8d:fb:df:a3:95:9b:01:69:59:9a:c6:b4:4b:67:28:
                    09:6a:e1:e9:af:93:59:97:ca:01:58:c4:de:ab:b5:
                    20:67:2f:ca:f1:e8:6d:fc:4c:02:72:7b:f7:24:45:
                    3f:e0:23:f8:0c:fe:42:73:d0:9d:48:ec:9b:d5:ee:
                    20:81:00:41:72:31:5e:11:a6:1e:9a:b6:0d:05:38:
                    b5:d8:04:4a:9f:ab:c7:76:5d:e3:31:6b:f2:07:93:
                    14:33:a7:63:70:44:27:f4:b9:1b:e4:23:7b:4e:8e:
                    f6:5c:e6:f3:48:85:e2:a2:b1:74:b1:56:06:8d:a6:
                    41:38:c2:1b:de:7d:cc:83:4b:7c:24:f1:12:3b:ca:
                    a7:1b:1a:40:62:63:81:38:a2:b5:68:6b:23:0f:6a:
                    0d:e0:34:f0:55:21:1d:cb:86:4b:3d:cc:2f:d7:f8:
                    58:01:c8:a9:fc:84:4d:ee:c9:f4:df:cf:fe:65:48:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:DA:06:BB:E3:29:9C:41:97:C2:10:62:D3:BC:A0:3B:2C:22:81
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/5F506D7C8C7911EBB7E88620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:ef:1a:34:9c:56:69:27:21:ce:c4:d3:73:e8:55:91:e4:
         0f:a4:47:1c:e7:92:cd:96:e9:80:55:ee:3a:38:ea:1a:0e:2c:
         68:34:f6:30:cb:2e:19:13:4a:c2:1d:2c:e2:22:0c:0c:c6:d6:
         e8:11:c5:8a:60:8a:dc:f6:33:10:21:05:b8:c7:d7:63:5a:b4:
         64:d4:4f:3e:5d:62:9a:04:54:ad:bc:5e:f4:fa:16:3f:b4:30:
         bf:b5:c1:ae:b6:a3:fc:79:d8:8c:ee:08:a1:10:61:b9:a1:02:
         5a:16:36:dc:aa:58:83:44:1f:ee:89:c4:48:79:d0:c8:bf:71:
         ae:2c:97:80:c4:cb:40:c4:ba:11:0f:b2:16:df:67:c2:bf:cc:
         2a:41:5c:49:f4:39:bb:70:a3:16:67:31:61:5e:6a:30:0e:9e:
         b3:be:c8:69:67:68:87:9f:06:45:fc:a0:0a:07:18:24:a1:e0:
         02:d7:4b:94:67:85:cd:11:65:a8:9d:52:bd:cb:92:1c:1a:57:
         e6:d5:9b:80:06:d0:d6:62:21:12:f2:5c:07:7d:b1:64:e9:0f:
         77:18:2b:33:1a:87:ce:01:5b:da:d3:4e:bf:21:5f:68:f7:9e:
         3f:4b:59:52:cb:2c:e9:ab:b7:0c:d5:f7:8a:0b:70:20:b0:40:
         32:82:ca:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org