Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
File:                     92F8EAF428F511EDA8D1655FC4F9AE02.roa (raw, json)
Hash identifier:          eWEKn2C8Q5U4Dbtdbo63L8x5F49ZJgmIxX3AKCcfHMU=
Subject key identifier:   A9:80:19:A2:3C:0E:EB:CA:BE:F9:04:B3:F5:61:45:FC:EE:83:CA:05
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       01D5
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
Signing time:             Thu 29 Aug 2024 03:16:18 +0000
ROA not before:           Thu 29 Aug 2024 03:16:18 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150132
IP address blocks:        103.191.178.0/23 maxlen: 23
                          103.191.178.0/24 maxlen: 24
                          103.191.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Aug 29 03:16:18 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66cfe802-5c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:82:aa:91:10:90:88:46:b7:91:5d:c1:1e:
                    38:63:57:97:2e:d6:35:d7:b0:0c:3a:bb:58:36:6f:
                    6a:31:2e:a4:5f:5d:63:10:0c:53:3a:82:7b:82:67:
                    5d:78:20:da:5b:22:c8:0b:bc:70:26:23:08:42:87:
                    6e:a9:97:ac:2c:78:7f:57:23:91:7b:7a:9d:6b:aa:
                    58:00:30:61:b8:15:da:f1:0a:c2:58:70:db:49:02:
                    58:61:23:6b:f8:e9:4c:65:06:79:1e:04:1f:55:f3:
                    b4:cd:e4:17:21:48:d5:8e:81:2e:dd:92:b5:c6:36:
                    e8:7f:1d:73:94:84:7e:9b:0c:e6:a7:63:1c:15:de:
                    97:b3:fb:df:58:54:c4:e4:16:5f:3a:30:67:31:9f:
                    4d:91:a6:42:ac:ca:54:5f:69:0a:ae:7c:f7:6f:49:
                    01:bd:b3:fe:67:59:88:96:36:b5:a0:93:58:0c:b1:
                    dd:ec:b5:ba:ad:be:2b:de:f9:08:a1:7e:7d:ba:a4:
                    20:00:cb:21:9b:98:c6:4b:02:fe:85:53:5b:4f:14:
                    6d:5c:6a:11:fa:1c:fe:7f:3f:d8:2f:53:e9:15:3f:
                    2e:a3:06:4d:d8:e1:03:9e:22:9e:7e:d6:a4:4d:5c:
                    17:40:d7:8a:d9:30:f8:5f:30:27:d2:e8:62:14:33:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:80:19:A2:3C:0E:EB:CA:BE:F9:04:B3:F5:61:45:FC:EE:83:CA:05
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:46:75:0f:af:9a:be:f3:75:be:9b:03:70:76:2a:a2:78:93:
         97:1d:64:68:ae:25:94:58:fc:0a:bd:a5:88:e8:75:7b:cd:35:
         90:05:45:84:e0:52:e6:93:f6:b3:aa:bd:1e:c4:67:8a:1c:28:
         48:53:e8:b2:15:84:50:d3:de:bd:c7:63:20:a6:5d:c4:16:c5:
         ed:94:6d:d6:8d:c9:ee:a2:4e:4a:ba:87:df:4c:b0:cd:e9:85:
         4d:bb:17:57:fe:21:11:0d:4e:e8:27:17:d4:eb:61:2f:b2:e3:
         c1:cd:e2:f2:22:1e:8f:ac:8d:2b:54:16:f8:d8:df:72:57:a6:
         65:74:53:91:54:ab:80:0c:c2:32:5e:b6:c5:f6:04:e3:2c:e3:
         37:0d:55:a6:ab:7d:a0:e5:a1:73:b9:ce:89:e0:4e:37:51:87:
         0e:6f:84:ea:ff:ff:1c:00:57:07:ff:aa:be:a4:6b:17:0d:5e:
         57:29:87:de:fd:bb:18:62:89:9c:c9:5b:ff:a9:13:12:5e:d5:
         de:40:66:be:51:c7:ee:e7:98:1a:1a:2f:5e:a5:da:de:fb:c5:
         de:20:10:21:c1:9c:91:11:6e:c5:f6:07:27:e0:7b:13:73:17:
         3e:ee:b6:2e:e8:6c:3b:1d:e2:75:8b:cc:01:9d:6d:73:f7:ff:
         8a:96:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org