Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
File:                     A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (raw, json)
Hash identifier:          j0OYbP016uqCUyPAzhyPYu4cMFhnnpV0imO0FVFr9xQ=
Subject key identifier:   5E:65:55:E6:18:C0:01:9A:EB:C3:D3:08:BE:4B:1F:BB:DF:FB:AC:1F
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       03AB
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
Signing time:             Wed 03 Apr 2024 03:04:55 +0000
ROA not before:           Wed 03 Apr 2024 03:04:55 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     141757
IP address blocks:        103.163.152.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Apr  3 03:04:55 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=660cc756-60f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:47:0c:80:4e:ad:a1:8c:d4:e2:31:47:3f:
                    63:fd:e4:5e:56:58:b8:87:cf:dd:cd:94:bd:61:fd:
                    bf:54:29:e9:29:12:87:a7:7f:b3:84:d7:91:7d:b9:
                    f0:18:50:b1:ab:78:88:76:cc:a8:89:b7:08:70:bb:
                    7d:4e:95:40:a2:b9:b3:65:d8:6a:f1:d3:4f:44:a4:
                    c1:4b:4d:15:2f:17:da:42:e3:b9:03:9a:4e:2c:66:
                    a9:61:fb:1d:64:fd:32:40:96:4e:96:15:c9:6c:72:
                    2c:86:10:85:6d:08:b5:83:6a:c4:6e:1e:6b:76:12:
                    61:bd:d6:8f:03:e7:57:7e:60:a3:0c:f9:58:70:66:
                    c4:e8:e2:d5:40:50:b1:6b:81:4b:1d:06:ca:2e:de:
                    56:4f:78:3d:8b:f1:1e:15:4b:b4:f7:f0:97:fa:22:
                    d7:85:53:a7:11:78:3e:f8:8c:fc:24:41:0e:6f:f7:
                    5b:49:57:c9:f2:09:58:fd:aa:a3:1d:28:48:69:67:
                    49:1c:c4:8b:6d:b0:8a:36:80:9a:d3:59:fd:62:8f:
                    5f:5c:7c:09:88:8b:2c:c6:66:d7:26:0d:aa:53:f9:
                    5d:0e:91:ab:ae:26:5c:f8:b4:e5:1f:06:9a:05:c6:
                    67:43:06:37:a4:ff:00:e1:34:9c:3d:d8:6e:a7:e9:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:65:55:E6:18:C0:01:9A:EB:C3:D3:08:BE:4B:1F:BB:DF:FB:AC:1F
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/A29B8E5A46A911EC8F95FC6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:09:26:75:b8:f6:81:4b:7a:5e:ee:57:c8:0e:b0:0a:35:
         1d:20:ef:d5:1a:67:7e:5e:ce:68:10:c9:0b:d4:13:e6:c0:82:
         97:2a:c0:d7:70:6e:93:ba:85:a8:f8:1d:d7:fe:fb:e5:7e:0f:
         00:29:3a:0b:55:5f:8c:bd:89:55:da:0e:ca:00:73:5d:4c:da:
         e6:9d:b6:e5:95:8c:5e:73:25:db:1a:72:29:9e:2d:58:33:2f:
         77:2e:a1:7a:6f:e5:6b:60:63:c9:d7:3c:3e:54:fc:ea:fe:e5:
         c9:7a:a0:e6:c4:01:ff:ae:a4:a0:87:ee:f4:61:a0:7b:8d:4c:
         cb:17:04:84:fc:95:1e:2f:f2:a3:dd:1d:32:bb:19:fb:b0:b7:
         7d:b7:bc:8e:10:58:7f:07:79:56:97:ae:b7:fc:fb:32:a0:9c:
         8a:d6:65:a3:d2:6e:2c:13:6d:ce:9c:5e:52:48:78:9f:3b:ea:
         7e:7f:9d:13:de:a2:d5:55:49:c0:67:7e:8c:14:17:5b:bc:44:
         3f:52:01:f7:73:c8:56:5e:3e:ed:26:12:5b:b2:c1:27:91:a9:
         73:fa:a7:3f:c6:29:10:97:2b:7d:00:9f:59:8e:ae:af:95:18:
         9b:c5:13:2d:e2:74:90:92:b1:52:a5:f3:5b:87:0c:81:4a:79:
         2b:b4:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org