Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
File:                     F95379BE124411EB9E551E38C4F9AE02.roa (raw, json)
Hash identifier:          8/9NmjJSzWwLgBSh9ZIA8mU7QUTPCv3Je8e4MkPOAoc=
Subject key identifier:   65:4F:9E:88:A7:7E:22:59:B8:42:D6:BC:1F:70:79:7C:46:F0:BD:35
Certificate issuer:       /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial:       0732
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
Signing time:             Tue 14 May 2024 23:02:27 +0000
ROA not before:           Tue 14 May 2024 23:02:27 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     140103
IP address blocks:        103.148.148.0/24 maxlen: 24
                          103.148.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
                          rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
        Validity
            Not Before: May 14 23:02:27 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6643ed83-2a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:5b:1a:3e:c5:be:5a:65:82:34:78:0a:d6:
                    cd:5f:86:31:96:46:b2:dc:e2:d0:74:ac:51:5b:80:
                    e2:51:92:04:70:37:49:57:65:08:16:21:a9:02:de:
                    f6:02:5a:de:a8:b8:cc:87:f2:f2:6d:23:15:f0:73:
                    d6:bf:ff:ef:d4:5e:85:cd:a0:fb:95:42:ff:05:5a:
                    92:38:3c:0b:ae:bc:b9:ed:f4:38:a4:fd:ab:6d:c5:
                    7d:06:6d:80:a3:d1:c5:53:3f:56:84:07:6a:91:05:
                    41:91:06:b8:37:df:22:15:24:16:10:13:20:a6:79:
                    8d:29:c9:e6:7f:fa:c7:22:a5:ba:70:a2:30:f7:d2:
                    c8:94:3a:d9:86:77:b4:37:e0:71:29:03:af:37:e2:
                    c6:24:1d:40:85:71:06:a9:fc:0a:7c:71:e0:d2:1d:
                    df:7c:30:c3:1c:8b:42:34:b8:19:b4:7f:96:14:79:
                    a3:91:cc:41:37:22:f6:51:c4:5b:d5:18:bd:f4:c7:
                    22:f4:bb:67:f9:ef:25:0d:38:3f:50:a4:48:a9:63:
                    8f:55:01:ee:b8:87:26:fc:d6:e5:67:77:64:df:4f:
                    c7:fa:da:2f:0f:4c:b5:ad:31:99:cc:c5:15:4d:ff:
                    a5:95:e4:b8:4c:2e:84:d2:2c:3b:4f:c3:2c:4f:c9:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4F:9E:88:A7:7E:22:59:B8:42:D6:BC:1F:70:79:7C:46:F0:BD:35
            X509v3 Authority Key Identifier:
                keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:88:7d:dc:4a:4b:5c:4e:0b:5f:ca:e1:c8:2c:0f:31:6e:60:
         ba:66:7d:c7:3d:c5:9e:2c:97:fe:17:96:d7:65:06:3d:72:9e:
         51:4d:f3:2b:a3:fe:22:5c:4f:f5:39:25:5e:03:61:af:5a:68:
         12:af:db:5d:06:df:5c:e9:4e:ca:13:e4:e6:af:b4:66:75:94:
         8a:a3:67:9e:12:42:4e:41:82:a7:eb:bc:e4:b5:91:e1:03:1c:
         c5:c1:d1:ff:85:81:3a:71:c4:b2:db:9b:41:6a:ea:89:45:52:
         19:60:17:0b:cc:94:fb:59:a2:5c:23:57:d9:a8:0b:59:d4:e4:
         45:14:32:66:06:73:79:b1:6b:41:1b:dc:22:ed:ac:d8:51:1f:
         73:21:51:ca:29:6a:3c:aa:0c:c8:72:03:ea:d7:9a:0f:e1:db:
         99:b3:f0:0c:52:24:a6:5c:92:8e:2e:8c:ce:07:c3:a3:62:f6:
         c4:8b:a6:de:58:37:db:02:b3:c3:8e:ce:1b:d6:38:9f:9a:09:
         0c:21:05:cf:f8:3b:01:e8:c5:aa:a5:7a:3d:60:60:c8:f5:e4:
         41:dc:a5:99:bf:0c:5e:5a:d9:5d:d3:c8:34:f6:8b:07:c7:92:
         0a:28:74:61:73:c8:86:2a:66:3e:e3:36:25:26:45:9d:93:48:
         ac:3c:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org