Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa
File:                     5D79BDF8486C11EEB3C19A71C4F9AE02.roa (raw, json)
Hash identifier:          JR4QCnQHMEnbae0jDivqa08cLD58ejemmAtSkeG22K8=
Subject key identifier:   AB:50:EF:E7:BB:D2:C7:A5:D5:55:3C:3E:43:97:2F:B5:CC:49:0D:AA
Certificate issuer:       /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial:       06
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa
Signing time:             Fri 01 Sep 2023 02:08:47 +0000
ROA not before:           Fri 01 Sep 2023 02:08:47 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151654
IP address blocks:        103.250.122.0/24 maxlen: 24
                          103.250.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
                          rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
        Validity
            Not Before: Sep  1 02:08:47 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f147af-561a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:15:96:b9:ce:4e:57:c6:e8:4b:33:18:3e:
                    16:33:df:b6:77:ed:72:49:14:fa:f1:01:41:bc:61:
                    ec:c5:e6:e5:22:97:35:19:00:5a:4e:6c:13:8e:ef:
                    49:fe:02:bc:e7:f4:45:d3:7a:f9:07:5c:0a:00:48:
                    09:b0:4d:18:9d:e7:de:68:9e:5b:67:ca:a2:14:4d:
                    e9:b6:34:19:5c:03:06:54:24:85:3b:50:9c:a2:e9:
                    a2:d2:67:bc:bc:c1:71:d4:68:31:a2:29:a0:b6:6d:
                    8c:01:2e:4c:f6:55:e3:74:e8:56:4c:cf:d4:74:7f:
                    c3:ad:ad:62:77:1d:b0:b0:e0:79:8e:7d:b0:fb:22:
                    da:f7:b3:ef:84:27:d5:14:cd:43:99:40:36:9d:2c:
                    5d:6b:72:42:c9:5a:e8:f5:f2:ef:60:34:2e:5b:b5:
                    67:47:f0:38:de:16:7a:68:ea:2c:a0:c2:4b:0e:28:
                    ba:08:c5:3b:c2:d1:d2:d9:95:38:7d:70:e7:97:83:
                    69:86:7f:bf:ab:a6:27:5f:2d:94:2d:92:12:17:e1:
                    19:0d:4d:23:93:36:9a:87:60:12:60:55:e2:18:6a:
                    38:5a:26:5b:79:0d:95:dd:4d:84:3c:cd:35:9e:cf:
                    ee:9a:7a:5b:cf:98:12:5c:b9:40:d7:f4:5d:fe:94:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:50:EF:E7:BB:D2:C7:A5:D5:55:3C:3E:43:97:2F:B5:CC:49:0D:AA
            X509v3 Authority Key Identifier:
                keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/5D79BDF8486C11EEB3C19A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:e1:7d:dd:b2:d9:b1:67:5c:b2:ff:88:f4:c3:ef:2a:8a:
         a6:34:65:31:c8:84:3b:9b:ec:bf:2d:ca:37:b3:13:8b:02:d6:
         95:37:6a:78:d5:06:e7:49:4a:b7:9c:33:10:b6:96:a1:5d:17:
         3c:29:e3:6f:d6:d5:f3:e9:c2:01:b9:fd:64:2b:2d:a1:02:07:
         e7:f6:c0:fd:78:37:ee:03:bf:58:4d:e7:9d:0a:41:14:6f:a7:
         10:20:f9:9f:8e:15:7a:6e:a7:fe:f2:15:98:c1:9b:6e:78:a8:
         fb:58:18:15:36:63:8d:f0:45:f2:0b:02:bc:fd:65:15:9d:d0:
         c4:ab:07:7d:21:21:88:18:77:b3:17:e0:05:8e:75:bd:cd:97:
         a6:c4:2d:b3:01:1c:c1:c0:42:11:3e:42:c7:2e:77:a3:34:3d:
         ed:6f:20:e8:fd:f5:b4:c9:f9:d4:17:17:3f:3c:70:97:dd:0d:
         5e:64:d8:50:8c:53:f2:f7:ae:dd:88:d1:e0:17:1c:ad:a2:b1:
         7a:1f:55:21:10:01:b4:a3:a0:f2:66:d9:eb:48:79:9a:60:9c:
         aa:b6:01:05:9e:7b:a5:b0:bd:7a:a9:f8:00:c7:d8:29:d3:65:
         98:bc:e2:96:e0:7b:a5:fa:bc:10:cb:99:95:e1:21:1b:65:ed:
         95:9e:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:40:12 2024 by rpki-client on console-ams.rpki-client.org