Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
File:                     92F8EAF428F511EDA8D1655FC4F9AE02.roa (raw, json)
Hash identifier:          LEV4EZIm43xxE/2f5O6HWw16W/PzOp/2ab86HPo88d0=
Subject key identifier:   DE:8D:AF:A1:8C:62:8D:73:8D:E7:49:1C:60:BB:37:73:91:15:C1:92
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       0129
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
Signing time:             Fri 29 Sep 2023 03:24:44 +0000
ROA not before:           Fri 29 Sep 2023 03:24:44 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150132
IP address blocks:        103.191.178.0/23 maxlen: 23
                          103.191.178.0/24 maxlen: 24
                          103.191.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Sep 29 03:24:44 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6516437b-5cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:84:d8:c8:23:6f:2f:f0:72:d0:a4:a3:90:
                    e2:4c:9a:b1:7d:77:37:8b:48:cf:6d:55:2b:74:2e:
                    aa:d5:4a:13:8c:5c:f8:32:0b:df:c5:dd:90:f5:72:
                    3f:04:45:fa:e4:e9:d9:ac:2b:5d:ee:d4:9f:82:a3:
                    20:4e:ee:9f:d1:c7:bc:31:44:e5:a9:81:9b:9b:ac:
                    54:67:2a:14:85:80:65:d9:c0:fe:29:d2:fa:d5:6e:
                    c5:e8:07:5c:5a:1e:4d:29:7e:20:09:62:5c:01:b4:
                    00:43:e8:c1:bb:ed:35:92:8e:f1:e6:a5:72:b8:de:
                    fb:c8:a4:e4:3e:b9:ca:3e:6d:dd:8d:14:18:99:b0:
                    52:8e:28:5b:5a:b5:2f:df:1b:03:9e:fd:89:f5:b4:
                    a7:ed:95:a5:d3:f7:4a:12:d4:b7:55:eb:6e:4e:df:
                    a9:ee:41:6c:1b:29:9e:cd:49:62:df:45:45:1f:ea:
                    46:e8:21:d9:ac:f5:ac:57:06:c3:a2:1f:fc:b0:f9:
                    df:8d:56:67:4c:52:c4:a3:f6:b8:fb:6f:4c:09:69:
                    fe:b0:9f:c7:03:96:10:bc:db:32:45:bb:a2:e5:6c:
                    5f:02:c7:8c:cc:09:cd:db:6f:ad:a1:ff:cb:58:ca:
                    cf:e0:35:56:7e:ad:de:0f:b9:94:0b:85:0d:ac:c3:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:AF:A1:8C:62:8D:73:8D:E7:49:1C:60:BB:37:73:91:15:C1:92
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/92F8EAF428F511EDA8D1655FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:6f:18:b1:a9:7a:54:e4:14:1c:47:50:2a:e0:96:ed:08:6e:
         66:93:8c:76:8c:37:cf:10:18:32:e2:7e:b2:54:2b:5e:c2:24:
         68:37:3a:ee:8e:2d:6c:f6:46:e7:ba:a0:d7:56:aa:a4:6d:7c:
         61:60:86:63:21:82:d4:af:62:3d:ed:99:a8:eb:f1:d4:64:63:
         c1:72:d2:d8:d6:3e:b7:7c:08:3b:b6:2b:94:c2:a9:ac:05:e8:
         de:21:03:c0:a7:9f:b5:8f:89:43:bc:62:45:7e:c4:c2:7e:22:
         d1:f8:a2:68:90:90:c1:58:3a:3a:bf:e5:a6:12:1f:c6:ec:bd:
         f3:97:df:c4:c5:e7:cf:c8:aa:ae:40:40:f3:85:f2:e7:a2:57:
         e7:c6:b2:87:4b:e0:98:ae:74:89:f4:13:b9:41:3e:47:3e:31:
         2b:89:24:e6:a5:1b:33:b8:5f:29:22:66:07:cb:21:fe:56:cc:
         63:ca:3c:7d:5b:28:b4:81:c4:08:13:eb:98:67:0c:15:5f:36:
         51:8f:8d:4f:70:7d:aa:5e:e1:8d:d0:d4:ab:fd:a5:ea:ad:e5:
         82:2b:ec:70:b2:fb:5c:d4:5f:37:75:6b:ed:94:f3:bb:a6:0f:
         7e:a4:00:8b:29:17:ad:49:00:16:83:5f:4f:b6:f0:a9:2f:88:
         a1:79:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org