Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa
File:                     7AD47B2234EE11EE927E9F6AC4F9AE02.roa (raw, json)
Hash identifier:          QChP7wZDX3OK2X+vnot3Rv1St2Y6Cc+E+ff1NZZ5nZo=
Subject key identifier:   5B:A0:90:3F:B5:AB:2C:FC:E4:D1:E4:E3:5E:E3:6E:05:3E:7E:DD:47
Certificate issuer:       /CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
Certificate serial:       0659
Authority key identifier: D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa
Signing time:             Fri 19 Apr 2024 00:02:23 +0000
ROA not before:           Fri 19 Apr 2024 00:02:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     151638
IP address blocks:        103.150.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl
                          rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 23:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128077/serialNumber=D049F15C5B0041983E8B35C517B65171F7165CDC
        Validity
            Not Before: Apr 19 00:02:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6621b48f-3276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:e4:a5:6d:c0:64:42:a3:dd:c5:aa:4c:94:
                    b2:20:93:7e:59:35:6a:4e:18:90:ce:8f:0b:82:89:
                    a8:da:81:20:71:bc:89:4b:6e:e5:6d:23:99:94:84:
                    68:92:53:4d:5a:89:60:6a:86:d4:cd:9b:b9:95:c0:
                    4e:7e:1d:bf:38:10:40:f3:2f:f0:f8:1e:ae:48:d9:
                    bc:57:c1:93:b5:5d:c7:a2:e3:9c:1f:3d:47:a0:32:
                    03:d4:b6:86:3d:30:fe:aa:1e:28:6c:fa:89:2b:8c:
                    65:7d:16:2b:74:04:ee:b7:7b:1d:ae:57:49:6c:ca:
                    92:f7:12:33:55:43:b2:4b:36:ec:41:9e:da:cf:c4:
                    1f:95:13:b2:6b:5c:c3:dc:b5:d9:a2:cd:e5:6b:aa:
                    25:4e:6e:7a:74:f5:fc:9b:67:11:a1:b8:ba:bf:c8:
                    ef:fa:3f:c5:e5:f9:bd:1b:10:1d:6f:cf:14:96:ef:
                    68:43:f3:bb:67:a1:95:09:ca:67:2c:ac:c5:a4:43:
                    e1:29:83:22:cd:ab:dd:8d:63:b2:02:da:6e:b1:a7:
                    29:2c:62:c0:ad:23:21:72:db:f6:d2:03:aa:3e:49:
                    8b:f0:2e:ff:59:a1:5d:85:1f:7b:02:91:78:e4:ac:
                    71:03:19:1f:9b:a3:da:91:51:ca:35:a9:58:d1:78:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:90:3F:B5:AB:2C:FC:E4:D1:E4:E3:5E:E3:6E:05:3E:7E:DD:47
            X509v3 Authority Key Identifier:
                keyid:D0:49:F1:5C:5B:00:41:98:3E:8B:35:C5:17:B6:51:71:F7:16:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/0EnxXFsAQZg-izXFF7ZRcfcWXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0EnxXFsAQZg-izXFF7ZRcfcWXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128077/980CA8FE3AD711EBA2921A4AC4F9AE02/7AD47B2234EE11EE927E9F6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:43:d1:3f:41:d5:e3:a8:52:31:fb:9e:d8:40:e8:06:06:62:
         a9:87:34:67:7f:3f:c9:f6:82:74:89:74:a6:46:d5:0c:31:10:
         83:3f:69:b5:b6:9c:0b:b9:b7:a3:c7:dd:5e:58:2b:8b:5f:d1:
         00:21:60:ba:ac:ac:7b:90:5b:c1:11:49:0c:a5:d8:43:ad:e6:
         60:66:ed:2d:97:85:30:f1:a9:24:b4:ab:b1:87:66:59:fb:d5:
         2e:5a:fc:a3:59:12:30:cc:ca:57:86:4e:32:b2:6d:fa:ac:ef:
         d7:b3:e7:8c:19:01:4f:01:a7:90:f3:30:ac:fc:ef:52:a1:38:
         48:6f:54:a2:d9:cc:2e:f1:ab:60:05:ef:39:eb:81:97:62:19:
         b5:3f:d9:22:ac:fb:43:b2:a6:7f:e5:53:90:b3:b9:33:61:93:
         ea:d1:2b:66:e9:01:9b:d4:0c:66:d9:77:0b:f8:c2:9f:ba:58:
         b5:8f:f6:33:66:e4:eb:f8:e8:57:cf:2f:fb:a5:b5:d9:9e:11:
         6d:0a:f7:a0:1a:25:f3:b0:2f:d5:8c:45:94:0c:32:b3:5a:6f:
         2c:8f:2b:37:ce:de:e9:60:84:29:cb:9a:b7:b7:06:a1:e7:cb:
         35:7e:f2:62:8d:e2:55:0f:bd:96:e2:99:fc:6c:18:fe:dc:05:
         32:cc:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:29:29 2024 by rpki-client on console-ams.rpki-client.org