Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
File:                     C664689AE0F511EABB96D531C4F9AE02.roa (raw, json)
Hash identifier:          6z7hYBLguvvLle11iq9Qd/Si+IGvsECaX+4wJJHRkBI=
Subject key identifier:   D5:93:E1:16:2E:54:0D:6F:28:3C:E2:81:BC:38:27:94:7D:B7:36:DD
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       074C
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
Signing time:             Thu 18 Apr 2024 22:31:45 +0000
ROA not before:           Thu 18 Apr 2024 22:31:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.152.248.0/24 maxlen: 24
                          103.152.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Apr 18 22:31:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66219f51-aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:95:3b:1f:f5:41:92:51:8a:54:d3:b7:bf:
                    5f:53:e5:03:b3:46:8f:60:39:a2:e9:db:51:5c:53:
                    83:b0:cf:84:eb:a6:02:05:da:3e:45:9e:80:34:4d:
                    25:7f:4b:b5:ff:08:ca:e4:0e:ab:fe:de:aa:85:f1:
                    9c:63:db:fe:d3:81:b6:cb:53:aa:5a:3a:e8:d9:ac:
                    cf:57:e4:91:a3:71:de:07:67:0e:31:31:84:93:39:
                    9f:4e:8b:37:dc:d7:f2:d3:3a:cb:e1:55:01:38:4c:
                    8f:06:7c:84:b2:d2:f4:d5:93:c4:7f:c4:4a:47:5f:
                    cc:02:1d:5f:e6:6e:9f:ba:02:b0:b4:19:7a:ad:e3:
                    fc:a4:21:0c:e2:93:ca:bc:9e:4c:74:31:a3:33:50:
                    21:e0:91:98:8a:9b:fd:74:c1:0e:58:55:33:17:b8:
                    4f:e5:3d:45:bb:79:4c:68:e3:ff:5f:b7:70:9f:1d:
                    31:f8:b5:3d:1f:42:60:cb:c8:7d:59:ce:f8:4e:4a:
                    58:00:b3:31:1e:43:fd:f5:32:bd:35:e3:c2:da:b9:
                    e9:43:1a:31:2c:de:bb:1a:c3:5b:4d:fa:5d:00:7f:
                    32:ab:09:f7:ed:29:2b:38:90:e8:af:0a:cc:69:d5:
                    cc:2a:c6:3c:3a:14:72:a1:56:2b:44:f3:c1:79:7e:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:93:E1:16:2E:54:0D:6F:28:3C:E2:81:BC:38:27:94:7D:B7:36:DD
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/C664689AE0F511EABB96D531C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:80:4b:e1:db:75:c4:87:55:6b:f0:3d:89:d6:0d:04:03:
         f6:44:2d:c4:cd:4e:0f:fe:90:49:51:6c:2b:34:eb:6c:63:4a:
         e2:08:02:55:11:8e:34:98:9d:da:98:cc:a6:fb:2b:1e:58:4d:
         f6:4d:fd:0d:ed:d6:d4:7d:43:3f:30:93:8a:d7:74:f1:88:e6:
         36:1f:9a:e4:b7:6f:44:f7:1e:2c:b8:4a:65:d0:9f:d8:80:ad:
         a2:a5:a4:3d:e4:b7:26:49:d2:a7:b7:d5:67:30:5c:83:9e:bf:
         e5:7e:db:de:ea:6d:f8:df:19:72:88:70:6a:ba:52:ee:4b:2a:
         95:53:8d:4a:87:e0:4d:c2:64:c6:65:9d:d9:ec:35:4f:a8:82:
         6a:f4:bc:91:84:ef:93:3b:94:82:23:e0:29:2f:06:94:09:e5:
         b3:f2:96:c5:d9:af:ea:75:bd:83:cd:de:26:77:2d:38:b2:67:
         84:4a:84:60:15:c9:6b:c1:5b:8f:c8:e2:9f:58:7e:73:93:39:
         96:c1:f0:72:45:08:14:db:f8:b7:6b:26:c5:d6:32:a5:8e:26:
         0d:ae:b6:b5:80:21:4e:31:7e:2d:ce:76:fc:a7:08:51:47:2c:
         7c:68:27:2e:1a:6e:99:4c:ef:bf:12:3b:f0:83:4a:5b:84:80:
         49:3b:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:31:16 2024 by rpki-client on console-fra.rpki-client.org