Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa
File:                     649A355C5F0F11EBBDB7C113C4F9AE02.roa (raw, json)
Hash identifier:          bw4sMGnKDiftNLfRmiZR5SdnMpNduWFQjTQlPL6jZYY=
Subject key identifier:   5C:84:29:B9:4A:09:FC:26:8B:8C:C8:34:C1:3F:F9:84:94:65:88:42
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       087D
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa
Signing time:             Tue 04 Jun 2024 22:29:14 +0000
ROA not before:           Tue 04 Jun 2024 22:29:14 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136950
IP address blocks:        103.151.44.0/23 maxlen: 23
                          103.151.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Jun  4 22:29:14 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665f953a-b072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:40:99:7f:8d:84:14:ac:35:fe:82:3a:d1:
                    04:f0:4e:f4:68:d6:28:b9:e8:0b:b7:d1:f9:55:50:
                    b8:83:49:2c:7f:54:24:b5:32:61:86:ea:98:9d:fd:
                    6a:3a:6e:68:71:10:01:a2:d8:93:a2:89:74:c1:92:
                    36:23:3f:ed:09:a2:94:b4:6c:0c:b5:0e:9d:6b:da:
                    0c:84:42:c3:96:1a:d4:c9:74:f1:c6:7d:7d:07:0f:
                    48:8b:78:81:1e:c6:b2:15:07:70:c7:c9:08:10:5b:
                    ed:da:98:ca:1a:1a:69:f8:89:78:3e:af:15:0f:3a:
                    36:f2:ae:59:0f:11:4e:24:22:2a:5c:79:9f:51:14:
                    87:3f:c9:c0:bd:40:f6:25:68:3a:b6:cb:a8:64:f0:
                    b9:44:fa:42:04:eb:92:d1:6a:81:07:ff:23:2f:2e:
                    5c:56:2e:3f:eb:0d:d0:31:78:49:1b:b7:75:86:e7:
                    f1:57:80:b5:98:06:64:54:13:b4:b6:71:0d:9b:35:
                    cf:a0:31:2b:f0:be:87:f3:76:18:9b:43:6c:e8:4c:
                    a9:31:e6:0e:76:5b:aa:87:99:09:06:8e:3a:5a:c1:
                    d3:0b:c2:41:fb:6c:19:1c:b9:ec:27:fc:04:42:6c:
                    ac:aa:75:c7:56:bc:44:56:92:21:b5:7a:a5:6a:2e:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:29:B9:4A:09:FC:26:8B:8C:C8:34:C1:3F:F9:84:94:65:88:42
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:76:93:68:b5:85:c0:7e:36:66:c1:4f:0a:fc:56:3e:8a:c1:
         0b:ad:3c:72:24:ee:02:cc:02:4e:80:79:09:9b:3c:b0:b3:c7:
         78:63:e3:85:48:d4:18:a6:cd:f4:11:b5:6a:e7:94:a0:71:48:
         34:e9:81:37:f4:5f:ee:78:43:bd:13:97:d3:7f:4d:9d:4c:89:
         0c:b2:2c:3f:79:b9:d5:fe:9a:0f:be:91:b7:9c:a5:06:93:88:
         44:54:c1:cc:5b:63:20:4c:fb:32:8b:de:09:28:86:c2:ab:31:
         cc:bc:31:a2:e1:a6:51:17:63:3b:89:66:b2:bc:e1:01:29:60:
         d2:c7:f8:76:13:e8:90:83:07:56:7a:68:db:30:ab:81:43:c9:
         f8:3c:65:f9:6b:5f:b3:3e:23:d6:ed:25:14:1f:3b:b8:c2:eb:
         d1:ba:99:44:bc:c3:64:f7:9e:42:5d:7b:b7:90:11:30:01:55:
         ad:ae:b3:ae:35:90:90:db:4e:3f:9d:99:a0:17:61:ba:39:32:
         91:38:73:2a:be:6f:13:63:fc:e2:05:25:4b:73:d8:e8:1a:f6:
         f2:a2:39:e1:85:56:24:d0:d3:a1:ca:41:42:70:78:9b:23:1c:
         26:b6:9c:ce:02:fe:cf:2e:e2:89:83:95:1b:e5:b5:67:f0:a5:
         a9:e7:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:47 2024 by rpki-client on console-ams.rpki-client.org