Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
File:                     650A245CB5C411EEB9178E45C4F9AE02.roa (raw, json)
Hash identifier:          +i3JoA7P6e9wIGpo1zes0Gxbl9ppTTfSqS2UNJvke+M=
Subject key identifier:   E6:D6:A4:3B:E2:A7:D3:25:D1:B4:01:87:A5:F2:A2:2C:4B:F8:4B:B3
Certificate issuer:       /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial:       02
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
Signing time:             Thu 18 Jan 2024 05:42:41 +0000
ROA not before:           Thu 18 Jan 2024 05:42:41 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     10103
IP address blocks:        203.175.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jan 2024 12:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
        Validity
            Not Before: Jan 18 05:42:41 2024 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=65a8ba51-2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:64:82:26:d4:2a:3e:ab:e1:1e:4a:92:67:
                    08:e2:ee:ef:74:5d:32:0c:83:87:f9:a1:b4:9e:ee:
                    73:c7:e4:c3:ac:1a:39:47:8e:b3:f9:ee:ff:67:a7:
                    69:1f:1e:b1:ff:b5:51:6c:95:08:d1:df:d8:21:8f:
                    75:ee:16:fc:9c:af:c7:72:9d:53:32:a5:2e:90:b4:
                    b3:cc:86:4e:06:22:e5:34:78:6e:27:ff:c2:a5:08:
                    18:86:31:9a:2f:3c:20:fd:3b:3b:f9:8d:4b:a5:16:
                    a4:58:da:da:d4:2e:75:c0:47:09:c0:20:00:b0:e4:
                    e2:db:66:83:ef:49:aa:4a:7c:0e:82:59:56:8a:03:
                    d8:0c:e6:28:34:a8:e3:3f:bb:42:f0:34:86:77:f5:
                    1c:24:d6:8f:db:8d:f9:f1:93:e6:3e:4b:66:14:dd:
                    3f:43:f2:ec:9f:3e:d6:b6:94:24:e6:bb:21:84:ef:
                    63:0f:96:f0:a8:20:f4:9e:b6:d0:b0:3a:18:38:af:
                    eb:c8:00:60:13:fe:c6:c5:9d:29:29:be:60:c4:90:
                    d6:a6:7e:36:a6:a1:50:04:c8:6b:fb:10:53:d2:c6:
                    11:84:28:19:36:dc:a0:59:57:4d:09:d2:32:c4:7a:
                    55:20:d3:e6:dc:c7:5e:9b:41:d0:b5:13:4d:14:2e:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:A4:3B:E2:A7:D3:25:D1:B4:01:87:A5:F2:A2:2C:4B:F8:4B:B3
            X509v3 Authority Key Identifier:
                keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/650A245CB5C411EEB9178E45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b0:2e:29:76:49:6b:0c:bd:3e:f8:e6:92:4b:41:62:c2:9f:
         15:cf:35:3c:f3:ce:ec:14:df:f8:0d:70:d8:53:86:6a:f0:a7:
         dc:02:de:67:eb:d5:fe:b8:63:c2:d5:39:1e:13:bf:45:e5:7c:
         ef:18:f8:be:6b:ba:df:d7:64:18:da:49:23:b9:7e:1b:54:ab:
         57:6c:23:23:9d:32:b8:b5:b1:ac:09:b4:c6:83:5b:ff:1f:90:
         dd:c6:5e:9c:6a:4c:33:9a:97:9b:40:81:25:84:21:2f:d5:41:
         cc:77:ed:7d:76:78:73:7d:fe:e9:f6:6f:4c:2b:40:f1:b0:5e:
         cd:4e:a3:5a:b3:36:1e:7f:24:8d:25:f2:70:10:a0:a3:62:b4:
         e1:97:d9:59:e9:3b:a8:6c:0f:f3:77:80:61:db:e9:ea:bc:37:
         7c:b7:8d:17:01:80:76:11:20:6d:76:d5:05:59:c0:35:40:51:
         63:19:ee:b2:76:ab:ec:f9:d5:e0:11:74:e3:e3:c1:02:77:86:
         3d:1c:77:ec:d3:cb:0f:a1:d2:e3:2b:5a:3d:70:38:71:15:03:
         8d:6f:ce:8a:13:5d:7b:a7:df:c3:fd:f8:be:8c:78:bc:23:31:
         44:26:1a:0d:3e:3d:3c:1b:56:f1:fb:df:4b:e1:cb:cf:0e:bc:
         fb:3a:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 15:30:18 2024 by rpki-client on console-ams.rpki-client.org