Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
File:                     54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (raw, json)
Hash identifier:          MhAxL8s969meCKEJYh/A6392Up+MC9qpXlObK9HjlKk=
Subject key identifier:   83:7D:11:E8:31:55:2E:6E:71:4C:6F:F3:B1:C8:E4:4A:D9:28:B7:3C
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       0175
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 03:03:17 +0000
ROA not before:           Thu 03 Aug 2023 03:03:17 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     149856
IP address blocks:        103.188.248.0/24 maxlen: 24
                          2001:df0:c9c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Aug  3 03:03:17 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cb18f5-468d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:18:f1:fe:32:ab:ed:79:fe:8f:13:96:8e:
                    00:50:71:85:a3:c3:7b:84:cf:a7:40:e4:9c:af:f5:
                    57:50:97:1c:5c:cc:9d:c8:85:dc:06:75:d8:c5:99:
                    61:93:5b:e7:ef:5a:8a:99:58:9e:a7:96:53:46:1a:
                    3b:d5:3e:ac:e0:51:db:84:c6:6a:33:45:f9:a2:5a:
                    b4:91:92:e0:1d:65:90:0e:9b:2e:f6:72:0b:b5:0c:
                    d1:63:82:e6:83:ee:e1:cb:b2:85:d4:76:12:15:a2:
                    01:85:ae:35:e7:20:59:98:34:cd:51:98:24:b1:6f:
                    d8:88:42:57:36:36:1b:77:63:15:8a:f1:b2:56:6f:
                    c3:6f:30:ec:42:66:b2:4e:a8:72:df:7f:b7:44:bb:
                    13:cb:f4:6a:8b:45:38:9a:36:c9:0f:c0:ef:17:c0:
                    db:34:35:bb:55:ca:a0:57:fd:25:1e:e3:96:cc:b9:
                    70:97:74:c3:9e:35:ba:48:fd:ea:0d:71:84:c5:c9:
                    0a:d7:bb:13:c6:e9:91:ab:29:43:5a:60:b7:10:e9:
                    f6:aa:d8:26:58:92:5f:94:b5:62:ce:ba:f5:b1:8b:
                    ae:cc:41:20:9e:a3:b1:3f:11:e6:10:35:44:09:0d:
                    9e:ae:aa:64:72:da:91:e8:04:cc:7b:ab:6f:b2:54:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:11:E8:31:55:2E:6E:71:4C:6F:F3:B1:C8:E4:4A:D9:28:B7:3C
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/54FEFAA2ED4C11EC821F3D84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.248.0/24
                IPv6:
                  2001:df0:c9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:7f:49:06:1d:3f:b3:82:66:07:cb:0a:dc:9a:a4:25:95:
         24:d5:4c:de:65:92:2b:a9:dc:a7:b3:65:ea:29:2b:4c:a4:aa:
         39:25:61:02:ba:15:cf:e1:f1:ff:fa:87:aa:4c:03:34:77:c8:
         18:42:17:1a:71:ca:16:e9:44:ad:c8:ab:6f:53:2c:52:51:5b:
         16:f3:e7:b5:34:63:0e:f1:97:e2:4d:f5:b1:6f:f8:a8:01:c5:
         3a:cd:98:f7:38:1c:13:5d:ad:4d:1e:0f:2c:44:13:b7:76:50:
         52:e3:4b:c7:2e:ca:39:19:c8:52:30:ff:95:36:2c:96:dc:ad:
         8e:c6:51:ae:5c:fd:7d:3e:76:f8:6d:dc:12:0a:51:89:b8:e2:
         43:fa:27:6e:dc:3f:1c:6f:7b:f0:3b:64:55:52:5f:ba:f0:95:
         a0:dc:d7:e1:7a:a3:45:33:b1:eb:e3:1b:cb:1b:f9:10:9d:4d:
         e9:95:e6:f6:27:c6:89:38:97:a5:61:53:72:f2:1a:70:e5:fb:
         ca:4f:38:bd:4d:44:e7:1f:91:cc:77:e8:1a:35:99:fc:26:6c:
         70:d5:48:17:e5:ca:85:43:00:6b:07:be:1f:1c:af:31:65:fa:
         6d:ed:e8:fa:e4:d7:2d:aa:29:52:b0:2c:81:17:43:8f:d8:00:
         34:85:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 05:40:19 2024 by rpki-client on console-ams.rpki-client.org