Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
File:                     8B75957671A811EB8698AD67C4F9AE02.roa (raw, json)
Hash identifier:          14bCMjs5ypMSAN3k1DNyX0cKffTXtR9OfofjgbrFc7E=
Subject key identifier:   7D:04:E5:F7:87:3A:81:42:A9:FB:29:D0:2E:56:1A:34:DC:43:F0:CA
Certificate issuer:       /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
Certificate serial:       0519
Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
Signing time:             Sun 07 May 2023 01:41:49 +0000
ROA not before:           Sun 07 May 2023 01:41:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     132335
IP address blocks:        103.150.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B
        Validity
            Not Before: May  7 01:41:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=645701dd-d028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:a3:1b:34:4b:79:d0:79:6a:48:6e:ed:13:
                    28:39:a7:e2:c7:d1:a5:72:ad:69:ad:13:08:79:cd:
                    10:e7:c7:6d:7c:39:be:8b:e1:41:c0:02:04:9c:e7:
                    ab:bd:a6:0f:c7:3b:fe:6e:74:e7:3b:98:23:35:a8:
                    a2:6c:95:04:26:7b:ec:e1:c1:e4:a5:c9:d8:7b:ea:
                    a0:99:eb:0c:a3:91:13:91:cf:17:99:39:56:ab:9a:
                    24:91:ad:4e:63:2e:a9:b9:cf:b8:c9:ed:ed:b2:51:
                    52:47:a5:dc:58:6e:bd:99:75:1a:c9:79:fb:b2:b6:
                    35:15:24:66:72:2c:93:05:9d:78:32:7a:4e:1e:f9:
                    bc:9d:95:b4:f2:4f:5c:3e:97:22:ab:ad:0c:4a:e3:
                    a4:ba:b1:74:15:2e:c1:cc:b4:26:89:22:a3:fb:dc:
                    3c:ef:f6:a8:b5:02:61:7a:6c:60:76:79:41:95:b3:
                    93:f8:86:fa:c0:36:45:44:18:0c:29:e6:3e:7a:4d:
                    b9:26:29:c7:9f:5e:3f:5f:56:d4:31:4b:15:8c:05:
                    c2:a1:bd:1d:17:2c:b4:9d:33:c8:40:73:ca:03:90:
                    c3:2e:bb:bd:74:81:f6:00:29:00:4d:c5:d1:7d:9c:
                    f7:f4:36:9c:04:3f:98:ea:c8:2c:83:9b:6c:b8:b6:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:04:E5:F7:87:3A:81:42:A9:FB:29:D0:2E:56:1A:34:DC:43:F0:CA
            X509v3 Authority Key Identifier:
                keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/8B75957671A811EB8698AD67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:3d:6b:8b:5d:94:18:23:b2:e2:07:e5:91:6a:c4:ed:99:
         ff:2e:f7:59:3a:16:ef:d2:28:31:4e:68:45:5f:5a:ff:38:fc:
         cd:7f:d9:b3:d3:4d:23:97:1d:21:79:15:3f:aa:ae:f3:0a:c9:
         a3:4c:49:33:85:70:52:21:71:92:e2:96:99:7c:44:75:2d:64:
         88:11:bf:99:bd:94:7d:24:50:72:23:82:bf:3e:5b:a8:db:3e:
         a4:e6:c3:14:ac:91:ea:50:0a:43:ee:fa:0d:51:39:07:8a:a9:
         b1:ae:d3:23:d0:71:63:63:dc:8b:c4:84:bb:d7:0b:a1:c9:46:
         47:00:f0:62:b9:b5:5f:8d:88:91:6d:30:f0:2e:e7:c0:5e:4d:
         26:38:6d:23:b2:36:ad:df:7b:db:f1:de:b2:4a:d5:09:22:0d:
         d2:5d:17:4e:44:98:9c:ee:94:d6:a4:bd:39:cc:40:a5:fb:7b:
         fb:67:c6:9f:f8:0c:d7:9f:33:e1:43:9f:3f:60:24:d5:df:f5:
         d5:f1:fa:0c:cc:6e:bc:b6:c5:14:ae:31:a9:cd:83:ac:9f:9c:
         f4:ae:09:b5:ed:a1:8a:2d:4e:86:0e:82:50:30:96:ee:e1:43:
         05:70:25:2c:0a:db:00:1c:05:45:ec:51:1b:87:66:ad:9d:67:
         5b:cd:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:24 2024 by rpki-client on console-ams.rpki-client.org