Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F5BE1E346FFD11EE83D3D154C4F9AE02.roa
File:                     F5BE1E346FFD11EE83D3D154C4F9AE02.roa (raw, json)
Hash identifier:          zkvJXsg6ZbaTEwK193SUdCnoyTyMt79mUaZuDwnshuE=
Subject key identifier:   E7:4D:F2:66:DF:FB:09:4D:FE:DD:A6:20:E8:93:16:21:6F:A2:06:36
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       0539
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F5BE1E346FFD11EE83D3D154C4F9AE02.roa
Signing time:             Sat 13 Jul 2024 01:14:58 +0000
ROA not before:           Sat 13 Jul 2024 01:14:58 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142150
IP address blocks:        103.151.42.0/24 maxlen: 24
                          103.151.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Jul 13 01:14:58 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6691d512-aa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:66:cf:85:15:7c:d5:f0:31:e6:57:1c:1c:
                    8d:ff:de:e5:4b:e8:6a:f6:3a:78:80:b7:55:c9:b6:
                    f5:cd:03:7a:73:82:c0:37:72:a4:6a:6b:ee:66:1d:
                    79:00:ef:65:85:9d:44:34:79:00:45:d8:ab:2e:d7:
                    e3:e2:37:9c:8f:9e:16:2f:8d:16:66:99:ac:26:c6:
                    64:43:29:93:c7:bf:97:68:c3:17:5c:bc:1e:08:c3:
                    4e:26:2b:80:e1:77:b7:be:11:f9:18:e2:34:9b:15:
                    dc:00:4c:6d:b7:be:31:6f:df:ef:ab:8e:ab:4d:a4:
                    78:01:d6:65:20:1d:44:ff:ed:98:44:43:5c:60:df:
                    95:17:f4:44:3b:92:d2:92:f1:6f:64:1d:4c:ee:00:
                    6d:c9:de:9b:59:78:ed:70:7c:b0:32:03:a8:39:07:
                    4c:22:91:86:ff:48:dc:f1:1d:71:84:b4:6c:47:c6:
                    d0:75:75:78:dd:9f:90:ee:37:ce:f3:a8:b8:8b:ca:
                    f5:eb:7e:3b:6f:5e:46:bf:d4:6c:0f:eb:55:1d:f8:
                    81:30:ad:84:36:dc:94:d7:0c:f1:81:ae:ca:45:44:
                    d7:0d:51:cc:bf:8e:85:1e:07:35:96:dd:30:b4:1a:
                    1c:12:a9:06:54:51:fc:88:6d:d2:38:9f:32:ee:8d:
                    ef:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:F2:66:DF:FB:09:4D:FE:DD:A6:20:E8:93:16:21:6F:A2:06:36
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/F5BE1E346FFD11EE83D3D154C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:c7:77:2c:dd:5a:de:32:89:36:72:75:92:b3:e0:9f:1c:
         01:78:6d:d2:ac:a7:f0:39:fd:78:99:c0:05:20:83:ee:08:5b:
         a4:a2:9e:ad:3b:c8:4b:1e:7e:0f:d6:a1:2a:c1:2b:b7:9d:7c:
         6d:88:d9:3f:d3:8b:8e:1d:81:e7:d9:6b:f9:4b:21:fa:8a:c7:
         0e:41:6a:35:4f:77:8b:af:98:49:16:35:48:1a:17:bd:1b:91:
         86:a7:6f:dd:a9:be:8b:85:96:18:cb:a7:7d:c4:88:c2:40:22:
         81:73:e6:bf:cb:41:b2:68:24:09:6c:38:16:9f:28:47:c2:5f:
         71:bd:46:07:72:de:9d:fb:3a:d0:13:23:cb:f7:46:a2:ca:22:
         f7:78:69:f7:68:cd:f8:fa:07:80:5a:bb:17:16:22:1a:c5:ec:
         99:01:e8:fe:0f:cc:7e:4f:d0:cd:18:48:db:1f:7c:d7:70:44:
         60:3f:cb:fe:bf:74:ee:3a:9a:bd:9e:e8:8c:31:ae:9c:82:6e:
         a4:99:92:27:27:8c:d2:88:7d:35:8d:60:05:9f:a3:96:43:de:
         09:3a:25:c4:d7:31:7a:8a:d5:1a:95:92:a8:a9:cd:6a:d7:c4:
         09:9e:95:03:77:41:1d:1b:1c:52:7d:65:43:ca:8a:7b:50:44:
         2c:b7:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org