Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
File:                     746D55EAC51911EE8C160640C4F9AE02.roa (raw, json)
Hash identifier:          C7WiojBMyjzUqbt+nYfQDnjpXlvmjFMh4IIYxSxNxeg=
Subject key identifier:   92:B6:4D:5B:F4:55:12:7B:78:2B:72:90:ED:7B:95:18:D2:25:23:72
Certificate issuer:       /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
Certificate serial:       08A1
Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
Signing time:             Tue 05 Mar 2024 18:03:38 +0000
ROA not before:           Tue 05 Mar 2024 18:03:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135019
IP address blocks:        103.151.58.0/24 maxlen: 24
                          103.151.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl
                          rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE
        Validity
            Not Before: Mar  5 18:03:38 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65e75e79-c590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:d3:43:67:fa:29:4f:4c:27:53:cb:67:f9:
                    e8:a6:e3:60:3d:11:d7:f2:a5:ad:ce:7d:3e:e8:37:
                    99:a3:54:42:4f:72:85:a1:5c:20:d4:af:4a:56:f7:
                    e5:bf:26:d1:96:5b:fe:0d:e0:65:da:e0:e8:d2:15:
                    cb:a2:48:cc:3a:39:bf:0a:5c:94:5b:12:3a:6d:c2:
                    65:a4:92:06:5c:f8:57:ee:4c:d6:90:f8:4b:20:90:
                    2f:b2:2a:68:49:db:c0:49:6d:a3:ea:27:9c:a2:1d:
                    f2:47:23:0d:2d:f7:0a:c9:6a:3d:f1:cf:16:77:4b:
                    e8:1f:54:5b:56:48:71:42:ab:1a:4d:0a:07:38:3b:
                    3a:76:12:47:68:dd:b5:0e:b8:02:98:6c:c0:94:a7:
                    0a:99:ed:79:91:a7:83:43:fc:69:c8:54:27:de:8f:
                    c3:3e:58:de:95:53:26:8a:5e:96:00:ef:4e:98:de:
                    bc:b5:9c:f1:55:34:d6:88:ef:83:97:91:12:b4:35:
                    06:7a:e5:bc:90:31:2c:ab:e1:a6:ce:b4:0e:cf:dc:
                    13:9d:1d:db:a9:2a:2f:71:7d:1f:0c:f2:93:bf:f0:
                    37:cb:f7:88:68:5c:8b:d9:63:23:42:ad:39:77:7c:
                    ea:c5:5d:ed:60:32:be:cc:7a:96:a5:27:78:43:8a:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B6:4D:5B:F4:55:12:7B:78:2B:72:90:ED:7B:95:18:D2:25:23:72
            X509v3 Authority Key Identifier:
                keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/746D55EAC51911EE8C160640C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:06:06:f4:51:4f:c7:67:a2:0b:bd:ff:4c:2a:82:01:3a:28:
         64:f9:58:62:71:42:13:a6:9c:89:64:76:a4:15:fb:74:8c:8d:
         1c:a8:8e:0e:c7:b4:48:95:45:07:7d:05:a9:4b:48:6d:05:4f:
         2f:87:83:c0:64:48:87:8f:27:25:c8:9c:3e:06:5d:09:48:5a:
         64:88:88:ef:ae:ac:01:c0:1d:f5:a7:df:e0:94:f7:e7:a7:d7:
         4f:e3:21:4f:65:63:0d:eb:90:e1:5c:e3:eb:1f:73:73:d7:12:
         84:4d:fb:8d:38:18:4e:b3:3e:d7:ae:db:50:15:36:6d:be:bc:
         cf:f5:89:a7:67:9f:dc:59:16:9f:be:b7:e7:df:b7:32:68:ec:
         a4:88:82:07:01:c5:06:49:a7:48:47:62:f5:27:0d:a3:9c:be:
         24:47:16:c8:42:0b:26:fa:85:4a:ec:61:0c:b8:c1:15:16:9e:
         81:e8:65:5d:55:2b:c3:b4:62:96:2b:24:f1:14:ec:53:1d:7b:
         49:9b:43:77:46:ae:2f:71:58:1b:d4:8f:ae:e9:7a:a8:bf:b8:
         42:88:43:bb:58:a3:d4:5f:22:74:e9:51:8a:28:f9:15:8f:29:
         66:c2:83:9e:a3:b7:ea:f8:96:fc:f6:06:9c:7e:7f:75:4d:f0:
         70:d1:a9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:53 2024 by rpki-client on console-ams.rpki-client.org