Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
File:                     746D55EAC51911EE8C160640C4F9AE02.roa (raw, json)
Hash identifier:          FewobRFb3rsd82Ahzklt3XYh4cRb8CgeRQe0nUwAxX4=
Subject key identifier:   E1:75:F7:01:E5:39:40:ED:19:53:60:ED:3B:00:5A:8F:05:A5:42:05
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       08D1
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
Signing time:             Fri 31 May 2024 22:58:18 +0000
ROA not before:           Fri 31 May 2024 22:58:18 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     135019
IP address blocks:        103.151.58.0/24 maxlen: 24
                          103.151.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
                          rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 21:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: May 31 22:58:18 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665a560a-fc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:01:3f:59:5c:83:3a:2b:39:cb:19:b2:d8:
                    12:56:42:69:6c:6d:cf:91:aa:83:ee:8d:20:c4:90:
                    61:58:60:c8:b8:56:39:bc:49:2a:a9:20:5b:25:9e:
                    43:08:95:98:63:a8:db:ec:dc:ef:b4:6f:cb:08:cb:
                    5e:67:3c:da:ea:fb:08:d0:39:e0:63:11:c6:67:b1:
                    e6:20:1a:d8:45:6e:c7:c7:56:ca:68:c3:61:1e:9a:
                    ab:c8:a7:8b:8e:ec:54:f5:c2:ea:f4:d9:9f:a0:f6:
                    f5:4a:36:fb:e4:ff:fe:f0:64:28:fd:99:dc:0f:0d:
                    a8:49:81:1c:a7:ef:ca:b2:ef:cd:f7:34:4b:2d:bc:
                    cf:5b:ef:04:22:6f:8c:73:0f:7d:45:b5:fb:7d:29:
                    f7:59:70:83:d8:20:20:59:cf:e6:94:1d:20:fb:8f:
                    8d:73:d4:b6:1d:6d:45:e2:cb:50:5a:ad:51:c8:d0:
                    0d:41:ba:70:8a:31:72:7a:ad:29:3c:b1:43:65:15:
                    65:ac:bd:22:5a:2c:c3:7b:92:53:ad:a1:65:28:1c:
                    8c:53:85:9a:42:a2:93:d8:43:7e:83:2b:a5:c2:d1:
                    18:97:ae:3f:dc:e5:8f:b6:5d:1e:69:9f:21:de:29:
                    1d:45:0e:23:20:c9:87:86:1c:b2:31:8e:a4:a0:3f:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:75:F7:01:E5:39:40:ED:19:53:60:ED:3B:00:5A:8F:05:A5:42:05
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:94:bc:64:4d:32:13:c9:16:3b:6b:52:21:35:ae:3b:a4:
         da:a3:e1:95:d5:63:c7:f7:e2:27:81:72:a5:be:f6:9b:e9:d7:
         f7:66:b7:5d:13:62:59:8a:b6:46:ef:7c:ca:d7:b7:28:ea:05:
         7a:da:01:e7:fe:48:2d:cf:b2:19:92:1a:86:50:c4:f7:5d:15:
         56:12:bb:ad:e8:ae:87:bf:28:58:9f:fd:1a:df:e7:ce:64:d2:
         0d:bc:3e:ec:ce:6f:96:d5:69:d8:cd:8e:70:09:5f:e9:8b:60:
         f0:b3:ce:5f:69:73:dc:35:19:7e:7e:d2:a7:2f:fc:9a:36:10:
         84:02:37:5e:1a:9e:f6:fa:cb:ca:23:f1:50:1a:e4:d5:4b:7e:
         10:bd:ff:14:d2:83:c1:12:0d:0d:c9:28:e1:6d:7a:45:0b:77:
         b2:0a:15:d0:fe:91:88:73:94:b8:c5:88:f2:88:d6:fa:1f:53:
         b3:43:6a:fe:14:9e:16:99:7f:3f:e6:d8:af:26:c6:a0:e0:55:
         36:48:70:22:3b:b6:1c:92:aa:03:3c:f3:82:5c:0f:6c:9d:8d:
         18:81:aa:3c:43:12:bd:8a:2d:62:d6:26:7e:e1:7c:ee:7a:4a:
         3c:3e:55:0e:8d:dc:d6:94:64:7d:2b:fc:18:19:2d:88:da:dd:
         07:8e:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 22:35:25 2024 by rpki-client on console-fra.rpki-client.org