Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
File:                     1745A0504D7F11EE8487CA3CC4F9AE02.roa (raw, json)
Hash identifier:          WlNZrvGXgnz0t+pLb+IM+mQV0E2lUXQrFk9V5C1tTxI=
Subject key identifier:   8E:3F:71:48:AA:06:83:7D:1B:57:47:56:46:28:9D:4B:70:3A:CC:66
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       05D5
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
Signing time:             Fri 01 Mar 2024 00:13:23 +0000
ROA not before:           Fri 01 Mar 2024 00:13:23 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Mar  1 00:13:23 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e11da2-6ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:9e:3a:e1:7f:ff:6e:1d:3a:cd:34:c6:a7:
                    33:6a:41:37:13:ac:fd:f2:84:03:0f:d2:a2:ac:99:
                    17:dd:8b:3c:2b:e9:68:ba:b6:cd:5b:3b:43:c2:9d:
                    d0:65:de:a8:4d:7b:ae:63:62:1b:fb:62:14:8f:22:
                    06:85:9b:e3:11:db:9a:b8:66:04:ad:ff:89:38:1f:
                    b8:a1:a1:c1:c9:ac:42:b4:9b:7f:9c:a7:cb:64:49:
                    7a:82:a4:77:1c:b1:7c:41:b9:46:68:83:e9:77:c4:
                    1e:17:a2:af:fc:94:5a:0d:23:ea:e1:4c:3f:dc:b4:
                    4e:b6:c2:31:3e:8d:d3:41:24:fc:50:a5:bd:b7:d1:
                    a8:a1:b5:98:59:73:6a:02:71:64:6a:84:7b:20:01:
                    bf:13:55:00:1a:d5:e5:c6:e3:8b:5b:32:25:52:e1:
                    20:21:9a:3d:01:c6:23:61:21:98:2d:01:fb:1f:f8:
                    db:68:b8:0a:60:59:5b:60:3e:8c:f5:cd:ff:f4:10:
                    5b:13:dd:02:73:07:94:f9:0d:e8:cf:47:b1:71:b0:
                    ba:3d:01:b7:a3:79:b5:8e:61:2a:ce:e2:e1:fc:8d:
                    8a:db:21:15:a1:e3:7e:72:a0:7c:62:89:e6:40:c2:
                    38:1b:50:ac:2a:b8:b7:e8:e8:c1:05:f8:8b:8b:d7:
                    f5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3F:71:48:AA:06:83:7D:1B:57:47:56:46:28:9D:4B:70:3A:CC:66
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:15:2f:06:88:cc:85:33:d0:ea:d8:05:f3:a3:3b:f3:a3:
         19:e7:d3:51:86:72:28:2f:5a:6d:1c:f2:05:b8:08:e1:f1:5c:
         b0:f4:e6:c8:00:a4:79:28:da:0b:31:f3:43:1a:9b:45:8f:6c:
         76:c4:a3:98:88:e7:13:0f:22:34:03:6f:80:2e:88:16:e5:d4:
         19:5d:82:13:e0:8f:87:87:9e:3a:4a:35:cf:ca:c4:aa:26:14:
         2b:e2:a1:0a:c5:ab:2d:30:3c:72:d5:38:92:b5:0e:fc:c8:96:
         75:a3:23:4e:58:7e:5a:be:ce:cd:87:82:b6:9e:85:db:d4:33:
         13:68:8a:06:98:87:b2:a4:7e:97:47:cc:5f:e1:87:e1:41:4b:
         7d:7c:87:bf:1d:ee:b3:a7:5c:91:b7:22:17:a3:39:bd:69:78:
         7d:0f:91:3a:ea:54:a5:7e:b8:03:c2:bc:a8:51:61:00:29:52:
         60:b5:a5:a1:e4:2e:4d:e0:11:aa:2b:86:32:0a:89:6e:91:d2:
         5d:f7:37:1e:aa:e2:b0:b7:cb:b9:2a:13:8a:15:5c:41:e6:4b:
         2c:2c:22:0d:d5:87:a5:18:dd:b5:d3:00:71:40:bb:55:3c:d7:
         f6:fb:ab:63:8f:e0:4d:d0:23:ad:4b:7b:ed:48:18:ed:51:98:
         fd:c8:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:41:46 2024 by rpki-client on console-fra.rpki-client.org