Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
File:                     20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa (raw, json)
Hash identifier:          D/TZ8T0XgnreynRCRy5zVf683hKpinfTXOHdjWZ73gs=
Subject key identifier:   65:9E:75:05:45:2F:C1:E8:D9:08:45:76:B1:10:8A:1D:03:1C:7C:E9
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       0255
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
Signing time:             Fri 31 May 2024 05:01:09 +0000
ROA not before:           Fri 31 May 2024 05:01:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149765
IP address blocks:        103.185.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: May 31 05:01:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66595995-7535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:43:f2:76:c8:ab:9a:84:8d:1b:7c:ea:ff:
                    2a:73:31:d2:e8:19:25:3d:1b:7e:ff:f5:5b:1c:ed:
                    91:a2:73:a8:77:37:0c:21:af:15:cc:16:eb:b1:e8:
                    94:de:ba:20:d0:78:c5:1f:8e:3e:70:e8:25:2d:28:
                    50:4d:8a:13:fe:31:cf:30:d5:ee:32:fa:91:a5:47:
                    a5:5a:6d:e4:41:df:23:5c:ef:64:69:67:3a:5d:97:
                    34:a7:02:61:e2:4a:a4:15:1b:50:c1:e5:39:f3:99:
                    dd:49:cf:de:ca:45:4d:29:50:c8:d6:74:09:f6:ee:
                    3e:81:3d:2d:58:3c:39:de:c4:3d:87:d2:6a:40:9f:
                    f5:28:3c:67:8a:10:77:f6:77:5b:37:b9:05:fc:0b:
                    44:73:01:84:34:7e:e4:2b:fb:bf:61:99:72:68:40:
                    58:d5:4f:65:36:06:0b:b0:cd:38:2e:e3:d1:1b:cf:
                    9a:40:ac:56:78:d7:e5:3c:13:ed:49:1b:5b:e7:6b:
                    35:9f:7f:17:5b:98:98:19:fa:f0:87:a0:e7:62:22:
                    5a:e5:14:4d:53:42:b2:d5:19:14:17:28:b7:2c:e8:
                    3b:64:34:36:c9:36:9a:c5:0d:f2:dc:2b:bd:09:9b:
                    aa:44:13:7a:db:c0:ec:08:c7:f3:84:e8:44:84:44:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9E:75:05:45:2F:C1:E8:D9:08:45:76:B1:10:8A:1D:03:1C:7C:E9
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/20C11D5ECC0E11EEAB56CF7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:ab:72:2b:c9:34:4f:94:9a:ba:bb:99:3c:38:b3:82:75:
         99:61:30:15:f1:90:c2:f2:cf:82:3a:d8:0e:fd:0a:f5:a2:c3:
         7e:46:e2:11:67:1c:58:0e:dc:ab:96:0b:0c:7f:3c:0e:26:f5:
         e4:8e:1d:3b:d7:45:82:76:dd:09:fa:eb:d5:b4:e4:08:ff:94:
         bb:6b:a6:2b:5b:b3:41:eb:4d:97:0d:21:87:8f:da:87:5e:5a:
         c2:01:1a:ca:ce:91:25:b5:04:6d:47:6e:27:79:1b:d2:36:db:
         63:26:d9:4c:8a:f2:12:07:31:30:88:fa:4d:4b:b8:64:ab:eb:
         53:d4:f6:ce:15:c4:54:02:cc:9e:4b:57:e0:2c:a6:8c:0d:ec:
         ba:74:93:87:b8:fb:cc:86:91:4f:ae:57:47:7a:7a:4e:3d:f4:
         52:5a:95:35:c3:2c:62:25:fa:12:79:ac:87:c8:94:91:92:ef:
         5f:b3:ec:45:01:0e:16:f7:d7:7f:79:92:74:59:66:ac:64:bf:
         80:d2:93:f8:02:5d:c1:c0:0c:82:1b:aa:ad:a6:d5:31:6f:a5:
         89:5b:62:8f:75:42:b7:5c:51:ee:dd:68:6d:c8:ea:ff:a2:10:
         05:cc:a0:13:91:ed:ea:f8:75:69:25:ac:50:12:23:45:98:30:
         fd:d4:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org