Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
File:                     C47523F0509D11EFA81FC32AC4F9AE02.roa (raw, json)
Hash identifier:          iRtSO8+daPW9a/0caUBf0vb/ctWu9OylLCXHZ0eMlmo=
Subject key identifier:   17:0B:D4:40:7C:66:F5:5F:0E:6B:19:97:35:79:6F:5C:3D:9E:8F:B4
Certificate issuer:       /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial:       39
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
Signing time:             Thu 07 Nov 2024 02:35:52 +0000
ROA not before:           Thu 07 Nov 2024 02:35:52 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     150734
IP address blocks:        103.151.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
        Validity
            Not Before: Nov  7 02:35:52 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=672c2788-1f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:fd:d5:20:86:d4:36:6c:f7:8e:cb:46:29:
                    b0:f2:a8:3a:08:fb:d1:f3:a5:97:16:57:6f:bd:af:
                    3c:68:00:da:ae:3c:17:f9:00:f7:8e:d7:4b:a7:30:
                    a9:24:7f:75:59:3c:55:eb:5c:e2:a8:22:70:e9:11:
                    69:00:be:f9:a5:15:b3:62:fd:4b:f1:8b:16:f6:aa:
                    4b:cd:04:b6:cf:0b:f7:13:b3:bc:d2:1c:61:ea:2c:
                    22:b7:19:25:00:c4:14:b6:cb:08:f0:7b:69:59:80:
                    a3:0d:8f:a7:93:71:39:5e:11:e7:67:9f:41:b6:a8:
                    4f:07:6d:e3:84:8c:a0:26:41:a0:cb:17:d5:eb:03:
                    cd:f7:2e:d5:4b:01:9b:3b:43:49:a6:66:fd:e5:8d:
                    03:5f:43:fc:ec:6a:af:4b:d6:e5:17:16:c4:3e:14:
                    47:41:e7:36:03:cf:6b:68:2f:ed:9f:db:22:e4:ea:
                    9a:5e:c9:4a:d7:c2:c8:e2:cb:b5:89:c4:24:bf:02:
                    0d:93:ac:9b:ce:bb:9d:40:f9:73:43:1d:8c:66:8f:
                    79:de:e0:07:1a:7f:43:5f:ae:81:75:aa:2f:ef:54:
                    d9:db:a6:cf:0b:f3:aa:5f:43:61:53:a0:93:40:49:
                    5a:91:04:71:62:8f:9b:7e:49:f0:82:27:0d:e4:54:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:D4:40:7C:66:F5:5F:0E:6B:19:97:35:79:6F:5C:3D:9E:8F:B4
            X509v3 Authority Key Identifier:
                keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/C47523F0509D11EFA81FC32AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3c:8c:3b:4f:8e:6a:e0:20:54:50:a5:61:47:ec:54:55:e7:
         5c:96:62:8c:18:4c:12:f5:d4:2e:ed:85:35:5c:59:bf:6b:5b:
         79:b5:9f:58:d9:8b:8d:ef:83:21:74:7e:fd:24:16:89:70:c1:
         62:d7:50:5f:02:07:e8:1c:c9:69:0f:61:ad:d7:34:37:9c:37:
         3c:9d:5e:0c:d0:ba:8f:cc:79:03:f4:47:0b:5f:65:78:16:35:
         6f:82:a0:f2:1c:e3:e7:13:2d:08:1c:39:8e:ac:fe:44:b4:20:
         e5:ea:8c:ff:9d:e3:1b:d8:03:5e:89:56:c1:ff:88:d0:64:1d:
         d9:8f:a5:3f:96:17:e9:0c:e6:78:44:0e:b8:b4:2b:cc:4d:ec:
         29:53:fe:6c:28:76:34:eb:b6:d4:92:3c:01:4e:67:0e:8c:63:
         18:ab:1d:d1:24:9b:14:73:d4:dd:14:40:a4:9e:53:3c:0d:14:
         bc:5a:b7:b6:bd:e3:db:7a:63:46:ba:31:dd:67:b4:ae:6d:71:
         b8:a1:7c:28:52:ec:f1:54:8b:0d:97:c0:8d:47:8c:fd:20:5e:
         c4:db:fb:bc:a1:e6:14:36:cd:55:44:bb:45:cd:56:d8:d5:bb:
         e3:09:25:b2:ef:14:cb:59:cd:47:80:13:22:77:bb:a5:12:d7:
         8b:14:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org