Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
File:                     45F398E6EA6C11EE9C6A0650C4F9AE02.roa (raw, json)
Hash identifier:          T2GxpprBCkLcK8nLanU7+iPRdUPJ3LHSQZhYNBEF7S4=
Subject key identifier:   88:00:65:AF:C4:84:AF:E9:16:F9:DC:2E:03:4E:01:B0:F9:F1:B9:D6
Certificate issuer:       /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial:       D1
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
Signing time:             Thu 16 May 2024 04:39:00 +0000
ROA not before:           Thu 16 May 2024 04:39:00 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     152464
IP address blocks:        103.131.198.0/24 maxlen: 24
                          103.131.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
                          rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
        Validity
            Not Before: May 16 04:39:00 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66458de3-0d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:23:46:10:0f:fd:27:8b:e6:63:85:9f:25:
                    a5:00:57:69:35:7d:68:8e:a4:4d:3d:76:79:5d:de:
                    26:77:1f:a6:7c:79:c3:11:9b:c4:28:60:80:20:87:
                    11:a8:10:4b:73:7a:21:76:03:30:66:28:96:18:cc:
                    eb:44:f9:12:a9:79:5a:be:fa:4e:5d:05:52:4c:c3:
                    91:24:05:d6:93:ea:1e:63:5e:ef:52:b6:18:87:dc:
                    25:f4:61:a3:2e:12:85:ce:d5:0b:10:cf:c0:98:d6:
                    e8:e1:51:d6:7e:f7:81:25:54:0b:7e:3a:70:1f:b0:
                    e6:5e:b7:6f:c8:2b:24:69:0c:61:27:75:3c:9b:9a:
                    e7:14:7b:6a:07:86:ac:ef:02:eb:f6:14:19:cb:45:
                    50:37:65:2a:d9:42:51:ac:ad:d6:e7:fc:be:2d:eb:
                    33:08:a2:57:c1:68:96:13:91:b7:8c:8b:7b:13:d7:
                    b4:b1:a4:d4:76:a2:66:5a:40:0e:82:fe:bb:dd:69:
                    f0:8d:42:99:4b:d8:57:d9:fc:9e:69:95:72:f2:0c:
                    79:1b:4c:49:00:bf:c3:a9:9b:32:46:f3:d4:52:df:
                    4b:97:43:58:fc:46:5d:d4:bc:58:e7:ae:68:40:56:
                    da:84:25:02:98:0c:f9:57:5d:47:6e:49:48:a4:18:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:00:65:AF:C4:84:AF:E9:16:F9:DC:2E:03:4E:01:B0:F9:F1:B9:D6
            X509v3 Authority Key Identifier:
                keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:2f:83:6e:cb:bb:64:6b:9a:e8:a8:2c:46:d2:b5:d1:ef:02:
         75:aa:03:7f:a8:ad:f7:b4:5b:1d:67:2a:21:4e:65:38:5d:fa:
         e7:64:30:21:ef:c2:5d:27:c1:82:78:00:20:60:07:c7:e6:f9:
         e0:2f:e5:34:0c:9e:79:77:12:df:e1:6c:66:66:5a:bc:a2:14:
         93:ea:c6:2c:db:8f:6d:c8:2f:2d:1b:0b:e9:fc:7e:ee:9c:d5:
         fb:f0:7a:c0:00:a1:71:60:e2:5c:61:d7:fc:df:0a:22:71:fa:
         16:65:c2:d8:f4:85:5f:b7:68:4c:f2:b0:d4:46:73:02:96:2b:
         44:5d:0f:65:de:70:65:e0:98:b1:bc:c5:4e:87:35:17:0d:cb:
         72:b9:e9:f9:2b:a5:c3:c5:b0:63:8a:7d:70:89:d6:e2:d6:36:
         4f:68:22:30:68:7f:48:77:ba:8d:18:6d:32:fa:cd:46:e4:43:
         9b:75:73:b4:42:6e:24:0a:0a:04:bd:5e:43:06:95:a6:a1:7b:
         97:ac:df:d8:2a:f4:02:17:15:c9:cb:3c:ad:8c:5e:1d:6d:d9:
         66:a6:e8:2f:ae:bc:10:71:fd:2c:84:3a:70:67:1e:60:c7:87:
         24:d1:b5:b6:12:66:18:b5:e2:d6:80:04:b3:ae:cd:64:e2:be:
         18:b2:c7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org