Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
File:                     0E677936853811EEAC9D230CC4F9AE02.roa (raw, json)
Hash identifier:          Cy/aqUvLVXbS6LlQLGlYgkVgduuimzJaPt1A+n4CwlU=
Subject key identifier:   90:E6:49:5E:38:80:8B:55:5C:1F:74:4E:F3:E9:2D:E3:72:DB:0F:C9
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0433
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
Signing time:             Thu 11 Jan 2024 01:43:19 +0000
ROA not before:           Thu 11 Jan 2024 01:43:19 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        103.46.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jan 11 01:43:19 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659f47b6-00c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:51:08:11:96:4d:e6:62:86:92:80:fe:dc:
                    87:7d:3f:dd:22:7b:fc:41:a1:46:ae:82:49:74:2b:
                    98:f3:53:06:0e:c6:ff:07:22:c2:63:76:9e:d1:f2:
                    9e:47:6c:15:35:14:a4:35:fb:76:0b:8a:e8:54:f9:
                    21:9d:bf:cd:45:bc:ad:f6:39:f3:ce:a7:a4:94:12:
                    26:d6:87:75:70:35:3d:16:45:a7:58:20:09:87:96:
                    68:80:05:b2:e6:db:6f:de:43:82:55:29:81:39:b9:
                    46:3e:61:b4:76:85:9e:81:25:0c:67:ba:bf:85:54:
                    8f:0c:00:8f:b6:92:2c:48:9f:27:80:ef:3d:e1:95:
                    f3:9c:fc:5d:59:75:6c:bc:13:24:9e:40:90:0d:25:
                    89:ae:ff:81:51:4f:9f:db:56:d2:51:5c:7a:f5:85:
                    af:1d:ef:23:53:e6:a0:55:73:40:93:eb:d9:05:dc:
                    df:0f:c8:33:be:8d:55:85:2a:53:ad:66:8c:31:87:
                    ae:ca:b1:f1:96:22:39:86:c0:2e:0a:0a:14:62:19:
                    28:6b:a9:32:b0:8b:7f:2d:1e:8b:43:c8:80:dc:27:
                    08:c7:1b:f4:be:8d:14:19:28:a1:59:a0:7f:9a:a0:
                    7b:8f:11:28:d2:93:17:85:62:6d:4c:c5:ea:d5:1a:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E6:49:5E:38:80:8B:55:5C:1F:74:4E:F3:E9:2D:E3:72:DB:0F:C9
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:21:9b:3d:7e:c8:82:93:c7:4a:b1:29:d2:03:b8:d8:7f:b5:
         95:bf:6f:e4:de:f7:1e:79:0b:eb:8b:92:fd:ec:3e:8f:3c:35:
         87:1b:01:10:4f:67:23:c9:42:98:54:24:e4:e3:6b:b8:a0:6f:
         ca:1e:ea:23:37:55:4c:4a:06:4c:84:1b:22:10:2b:52:b0:8b:
         96:d3:03:f9:f1:9e:de:b2:63:b6:1f:fc:89:6f:92:79:f7:cb:
         57:14:f2:3b:1b:61:08:e6:83:7c:b4:2d:01:23:35:67:82:f7:
         f7:15:31:bd:3b:81:62:94:2f:e0:7d:6c:93:90:0b:46:75:f6:
         25:73:00:43:28:77:c3:a4:c1:4a:15:35:2b:fa:bf:91:f3:de:
         61:e2:18:8a:37:0e:53:d5:37:96:de:fb:b9:58:d1:c1:fa:a2:
         45:51:0e:1a:f7:d5:47:34:fd:22:c1:eb:bf:91:33:3e:1c:b5:
         2b:78:de:2d:68:d8:05:37:01:59:89:4b:47:ff:fc:4c:f1:de:
         25:4a:19:a1:02:4b:82:58:42:9d:37:22:01:8d:af:37:e4:f1:
         b2:21:12:fb:b4:39:f1:e8:a6:2b:7c:70:bc:cb:0c:db:90:cf:
         8b:52:26:b9:96:ed:19:78:34:43:83:02:b2:c1:d6:f6:4f:fc:
         3c:a6:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:18:49 2024 by rpki-client on console-ams.rpki-client.org