Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
File:                     F4E06C32804911EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          WAsxR3gUGPm7QfrlwKZUh4UAYIGFdHFlPZC5ufPYCVY=
Subject key identifier:   D2:BA:1F:A2:D7:7C:18:FE:16:46:6A:6A:90:45:04:94:DF:17:8B:77
Certificate issuer:       /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial:       09DB
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
Signing time:             Sat 02 Mar 2024 20:59:03 +0000
ROA not before:           Sat 02 Mar 2024 20:59:03 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     140224
IP address blocks:        103.148.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
                          rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2523 (0x9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
        Validity
            Not Before: Mar  2 20:59:03 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e39317-8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1a:0a:99:00:5c:70:9f:d7:e8:d2:c7:1e:4e:
                    82:8e:f1:b7:3e:5b:0d:0e:70:7e:3e:0b:a8:21:30:
                    e4:c7:cd:ca:06:db:bf:ff:b3:60:ff:ab:bb:e4:31:
                    56:1e:a4:ed:40:69:e9:dd:8e:96:2f:bc:28:37:49:
                    89:25:74:ba:ac:af:a8:b2:8a:5a:dd:57:38:03:db:
                    70:e9:b9:d0:52:f7:0f:eb:31:b0:f1:77:7b:f4:5c:
                    dc:58:ab:f5:bf:85:8c:de:b7:4b:49:12:98:92:a2:
                    5c:28:ca:e0:b4:c5:e1:d1:86:9c:66:a3:5f:9d:a7:
                    d6:ac:b7:71:f0:45:6b:15:68:9c:b3:fa:fa:d9:7d:
                    32:d4:47:3b:bd:02:e0:75:5d:d3:d9:2e:81:89:ab:
                    bb:88:29:dd:7c:48:18:c7:3a:b4:8a:81:ba:58:0a:
                    77:2e:3a:78:ed:6f:90:80:39:c7:26:d4:e2:ee:a7:
                    a8:0d:5f:e7:2c:c1:fb:45:5a:f0:52:8c:45:f9:fc:
                    ce:87:90:83:d1:65:9c:18:64:30:2f:4e:04:1e:ad:
                    93:4c:77:7e:9a:bc:0e:c8:f8:d8:6b:9d:44:58:9f:
                    88:fe:5a:68:be:9e:d1:de:0a:ac:81:16:e0:8a:09:
                    05:9d:59:1b:bc:90:d7:7d:84:e6:03:e1:99:d5:94:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BA:1F:A2:D7:7C:18:FE:16:46:6A:6A:90:45:04:94:DF:17:8B:77
            X509v3 Authority Key Identifier:
                keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/F4E06C32804911EDABB05C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:cb:ab:ff:0d:cf:b6:1b:77:bc:2b:ec:7f:ba:e9:64:ab:
         54:83:e3:94:22:f2:86:56:a9:05:7a:5c:5a:30:94:55:6e:13:
         29:0b:e5:60:45:9f:29:d7:ad:e7:f0:5d:fd:1d:8b:b3:9b:6f:
         e1:c2:32:8e:e1:c5:4f:b3:9e:bc:45:df:11:60:a9:ab:b1:7b:
         ed:59:f7:72:7b:a5:7e:c8:69:96:01:7d:a4:ff:b0:ad:d2:0d:
         47:74:86:29:aa:9f:14:f1:42:27:20:da:2d:f1:94:87:74:4a:
         6a:f8:94:b4:83:14:9e:01:18:0e:6d:8c:63:6a:e9:82:d0:ac:
         e5:32:57:a1:d4:26:ed:ec:b6:a3:4b:43:c3:80:6e:bd:a5:1a:
         51:33:1f:0a:23:34:47:e2:d0:ef:d6:22:bf:22:6f:ec:6a:e8:
         b5:dd:fa:d4:26:3f:31:dc:d4:02:93:e2:cf:23:dd:08:9f:33:
         70:47:4d:17:4e:da:75:a6:50:bd:1d:75:05:82:55:e7:61:8b:
         3c:46:2b:a2:70:2e:60:1f:6d:86:d9:45:7f:74:48:ad:cd:55:
         c5:49:25:ad:40:6e:d0:88:35:ed:93:92:1d:07:a5:18:81:c6:
         e6:ea:43:ef:06:26:88:c6:68:1c:82:eb:e0:f3:ec:35:07:37:
         90:19:0c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org