Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
File:                     F636F748DC9811EEA15ED615C4F9AE02.roa (raw, json)
Hash identifier:          NGmjzPUFcJMJisK6EuQlnshsk6rgiaDitzzS7O1VM+c=
Subject key identifier:   E3:23:82:F9:58:F9:EA:9C:5A:AA:CB:21:9E:8A:17:92:92:EC:03:D4
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       26E0
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
Signing time:             Thu 07 Mar 2024 15:40:02 +0000
ROA not before:           Thu 07 Mar 2024 15:40:02 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     150452
IP address blocks:        103.192.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9952 (0x26e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Mar  7 15:40:02 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65e9dfd2-a1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:23:2d:23:2c:21:bc:18:12:55:66:99:df:
                    e8:d2:31:b5:0f:37:fc:6e:b5:c9:df:a6:14:53:5e:
                    1f:34:4a:5d:3f:3c:bd:7a:81:57:7d:34:e6:a3:be:
                    cb:b7:91:5b:c6:df:29:91:35:8b:8e:8d:f6:c3:5e:
                    92:71:8f:cd:8f:53:0d:84:7f:aa:0a:ca:ec:6b:99:
                    b4:91:f0:16:c6:3b:48:32:42:56:5b:0f:28:4b:b3:
                    d6:a3:45:43:18:00:e6:60:4c:48:75:18:c5:8f:25:
                    bc:48:d6:31:e6:ae:73:d5:6d:70:d4:1c:25:33:6b:
                    8b:f4:fe:25:45:33:d1:bf:88:66:a8:61:90:7a:65:
                    d5:ad:d6:6a:e4:a8:22:62:c4:b2:7a:f8:3c:0a:22:
                    37:fd:fd:e5:a5:85:02:88:5e:1b:42:88:96:70:7a:
                    9e:83:da:e3:4e:34:3e:d2:d7:a8:ab:2a:b4:90:95:
                    9d:db:98:a0:8d:b3:c2:b1:fa:f3:45:fd:e3:b5:3c:
                    97:91:2c:50:95:ae:c0:ba:2f:42:4c:f0:c7:b0:8d:
                    03:15:dd:76:04:62:25:7e:b3:5d:8c:e3:6b:9c:5d:
                    cf:0b:0e:e4:6f:70:fc:dc:df:66:e8:bd:09:cf:5f:
                    21:89:1a:06:a8:0d:b0:82:b2:fa:cb:c5:f4:a6:8d:
                    04:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:82:F9:58:F9:EA:9C:5A:AA:CB:21:9E:8A:17:92:92:EC:03:D4
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F636F748DC9811EEA15ED615C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d8:02:4b:79:eb:dd:b3:46:2f:21:73:fb:5f:dc:db:43:74:
         ae:62:b7:7b:4a:43:6d:7e:51:f6:31:51:22:d5:6d:53:d8:54:
         d7:69:83:0c:0c:dc:86:c2:5a:14:43:13:2c:e3:66:a3:f4:26:
         34:19:17:62:46:5a:41:19:53:dd:72:f0:5d:ab:f2:19:c4:3b:
         af:db:b1:d2:f5:8c:ac:c1:95:f3:61:46:c7:4a:62:e2:60:f1:
         52:ba:b9:52:3a:fe:3a:ba:b7:c0:50:af:97:be:2b:28:e6:fa:
         b5:aa:07:11:00:f2:3b:85:60:35:c2:8b:b4:57:64:1b:a0:2d:
         3d:31:ed:d6:35:c3:0d:7e:f9:00:8a:a2:ba:ef:72:09:9a:ea:
         cd:37:0c:8c:92:3a:7e:ad:14:f2:44:71:17:79:ca:80:d3:be:
         cc:ec:e1:20:4d:7f:bc:ed:10:b9:ed:a1:d1:95:df:70:96:c8:
         84:ad:96:8c:a2:69:13:b0:4b:c8:3e:53:d2:5f:f7:9a:57:37:
         34:05:ac:63:43:3a:56:ce:eb:be:34:78:1a:ce:76:bd:84:4f:
         6d:e1:0c:ba:0c:d4:e9:f8:b1:b3:38:56:73:9d:d1:33:3e:bc:
         83:bd:d3:b5:9e:ae:d5:3c:fd:9b:d3:1b:79:07:58:ff:9f:10:
         80:0d:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:20:46 2024 by rpki-client on console-ams.rpki-client.org