Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
File:                     81D7961ADD9211EDA5A21671C4F9AE02.roa (raw, json)
Hash identifier:          /d+3fZPCGo1EI2NxBk0ZXd//ZYng40jgQ5F5FO301dQ=
Subject key identifier:   5A:14:65:2F:C1:7E:9B:B9:8A:F1:5E:E5:15:73:12:9B:F5:24:8C:4F
Certificate issuer:       /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial:       052E
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
Signing time:             Sat 22 Jul 2023 23:20:48 +0000
ROA not before:           Sat 22 Jul 2023 23:20:48 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     9232
IP address blocks:        103.151.228.0/24 maxlen: 24
                          103.151.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
                          rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
        Validity
            Not Before: Jul 22 23:20:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bc6450-5503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:45:35:65:9a:35:86:7e:32:2d:cd:b2:bf:
                    33:48:3e:56:2b:90:67:0a:16:a3:89:5e:3d:ba:6d:
                    3d:73:fa:bb:18:8a:31:b1:8e:ed:ac:b7:01:b5:eb:
                    cc:54:8b:54:de:5f:45:51:da:8c:eb:6f:f9:6c:54:
                    d3:84:97:3e:d0:07:79:36:84:5b:68:9e:d7:5c:71:
                    cc:8d:90:49:b0:e4:67:5f:e7:6a:a3:44:39:a2:38:
                    a8:ac:64:e4:6a:3b:50:67:3a:2d:79:af:ab:28:90:
                    a3:1d:3d:cb:40:33:28:bf:f9:8b:95:40:89:24:c1:
                    f2:df:20:79:11:74:d1:34:0d:13:c4:0a:2a:36:80:
                    00:25:c5:f6:9c:77:af:b1:22:5c:82:67:3e:71:01:
                    36:c1:e8:d9:c9:06:a3:3d:b4:d3:4f:0b:82:61:f7:
                    23:c2:07:82:15:b9:06:1e:99:53:22:bb:71:f0:33:
                    7d:9e:fa:67:ef:e0:50:20:a8:ba:e8:b5:15:6a:7f:
                    f5:2f:b7:c8:0c:c3:f1:1c:d1:6b:32:f2:ba:3d:8d:
                    2c:70:37:11:3c:54:b1:65:57:84:a6:10:1b:d2:fc:
                    0c:63:85:36:3a:1d:24:a6:be:df:ae:f0:a5:94:59:
                    cb:f8:39:ae:69:61:67:06:9c:b0:de:c1:f3:0b:17:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:14:65:2F:C1:7E:9B:B9:8A:F1:5E:E5:15:73:12:9B:F5:24:8C:4F
            X509v3 Authority Key Identifier:
                keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/81D7961ADD9211EDA5A21671C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:bb:f6:60:9c:5f:2a:32:ad:e1:39:4c:32:5e:07:d1:87:64:
         ca:1e:48:9d:95:af:1c:d6:3c:5b:fe:24:c5:66:3d:9d:40:6a:
         61:91:23:a0:77:4f:68:58:ca:94:9b:5b:17:e8:65:03:b5:79:
         41:57:31:9b:99:6c:61:43:bf:5e:56:e3:5f:c2:e7:5d:f4:67:
         e9:51:08:ae:da:ed:f4:74:0e:25:06:8f:69:2c:af:62:49:c1:
         dd:76:db:ad:72:f6:18:d0:e1:97:f0:1b:e1:da:2e:51:7e:29:
         53:66:19:1d:56:c5:ea:da:8c:e6:85:bd:4f:9e:2c:f2:50:64:
         c5:04:be:8f:fe:2c:df:50:f1:1b:1d:14:13:db:b2:80:ea:3b:
         ce:db:22:b2:29:88:52:88:fd:5d:c0:94:f4:73:68:15:79:5e:
         94:21:be:6c:6d:49:37:69:41:17:18:61:9a:fd:12:c7:31:2c:
         0d:d4:f4:ce:47:36:b8:15:c9:35:db:78:74:43:3c:3d:17:09:
         71:8b:2b:d4:06:d0:92:51:c9:53:90:72:00:d3:b1:9c:0b:d1:
         1b:a5:8c:3f:ad:f1:35:0d:85:6e:14:01:f0:93:da:5e:3c:05:
         a0:15:f1:51:9d:ab:45:f0:08:6d:2e:9e:84:f0:3c:ce:ca:af:
         22:d1:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:15 2024 by rpki-client on console-ams.rpki-client.org