Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa
File:                     830C9F90EBCA11ECA2A1747EC4F9AE02.roa (raw, json)
Hash identifier:          LJB886NUTljPvfWlokxnMW+kRUtkV7Ec61N0MHSXzHw=
Subject key identifier:   02:D1:F9:99:A2:A8:80:A7:D9:3F:11:28:8C:4C:72:7E:47:AA:31:62
Certificate issuer:       /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial:       0226
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa
Signing time:             Sat 29 Jun 2024 03:34:17 +0000
ROA not before:           Sat 29 Jun 2024 03:34:17 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149865
IP address blocks:        103.189.162.0/23 maxlen: 23
                          103.189.162.0/24 maxlen: 24
                          103.189.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
        Validity
            Not Before: Jun 29 03:34:17 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667f80b9-66bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:0e:01:3a:41:70:b3:40:d8:3b:aa:43:d2:
                    c7:b8:f7:1f:52:5c:94:9d:a3:f2:c6:12:35:c6:94:
                    7e:73:c2:8c:0d:88:73:4d:ad:41:ab:7a:3e:e9:e2:
                    73:df:2f:d4:27:c6:29:b8:a4:b1:ec:aa:55:41:9d:
                    81:87:60:e1:92:ab:1a:d5:c0:8e:c8:00:91:0d:65:
                    23:7a:ff:e7:79:9c:a9:4c:4f:54:3f:e9:6a:f6:c3:
                    e2:45:17:6a:77:54:18:57:2b:5f:56:c4:03:4b:7f:
                    7a:e5:c5:bd:99:3e:05:95:91:3c:a0:6d:b8:28:4e:
                    db:33:d3:6c:4a:67:c8:74:4e:e2:27:62:fa:42:45:
                    27:46:61:f5:f6:fa:10:8d:40:88:df:9f:78:59:56:
                    46:2e:f7:1f:2b:8f:82:30:02:95:78:12:63:0c:30:
                    d9:76:a3:c0:e0:2c:3c:f9:42:56:48:71:cc:96:cd:
                    a6:74:a7:45:f4:75:9a:5d:73:9b:9e:44:a1:a4:28:
                    15:a9:cc:92:d2:fd:a8:8a:a9:c6:0f:4a:8a:d1:48:
                    9c:5f:66:b4:a0:4b:56:a9:a6:4d:68:aa:a3:2e:f5:
                    e0:69:6d:90:b7:2d:8f:88:9b:55:91:fc:83:fe:15:
                    ad:19:27:a4:a5:17:1b:88:89:22:34:b0:7a:55:62:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D1:F9:99:A2:A8:80:A7:D9:3F:11:28:8C:4C:72:7E:47:AA:31:62
            X509v3 Authority Key Identifier:
                keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/830C9F90EBCA11ECA2A1747EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:da:10:1f:76:14:dd:0e:06:57:97:0b:17:d9:0e:6e:4d:
         ee:e4:0b:ce:9a:ef:64:42:8f:3e:f3:a6:5f:b8:04:9a:10:c7:
         ee:69:61:c3:48:9e:e6:75:f5:92:6f:51:fa:39:19:3a:24:3f:
         82:85:28:f7:57:4b:94:06:7f:bb:d7:44:c2:9d:c1:89:6d:0a:
         16:13:f0:79:6b:b7:b2:ad:de:65:8c:05:4a:bd:02:d7:ef:05:
         1e:93:f4:2c:38:ee:4c:6f:de:f3:3a:2f:fb:16:0d:82:2f:5f:
         74:bc:ef:28:cf:89:4f:0c:b7:c6:e1:8e:08:f5:07:aa:8a:60:
         6e:89:28:55:ea:6c:2e:7d:87:d2:80:46:c3:79:1a:ce:17:06:
         30:c5:3c:ee:5a:51:ee:fb:44:e0:f1:cf:37:a3:a0:44:e1:b2:
         a3:4b:2e:30:03:40:63:d9:e3:cb:c9:d3:b6:47:0a:03:db:4c:
         e1:d4:71:e9:2b:47:e1:c5:9c:f6:7a:86:53:2e:37:d5:34:06:
         ac:7d:93:e5:1c:ff:a6:21:ff:24:2b:c8:12:d1:3d:e8:f5:4d:
         f4:e0:78:d2:75:47:7c:41:68:2e:d3:d6:00:da:5a:6c:ba:b1:
         82:81:3f:2a:43:a4:2e:a0:38:79:2f:67:01:13:39:cd:cf:f9:
         91:eb:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org