Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
File:                     74D88B52FF6511EB95D39078C4F9AE02.roa (raw, json)
Hash identifier:          /hWvI/RGNzRFNiiVo7H5wl0U608wQrrqfT3hjh2kWqo=
Subject key identifier:   73:68:4D:53:09:35:B1:14:9E:54:41:BF:85:92:DD:66:5A:F9:93:AB
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       146E
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
Signing time:             Sat 14 Sep 2024 18:05:21 +0000
ROA not before:           Sat 14 Sep 2024 18:05:21 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     142437
IP address blocks:        203.159.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 16:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5230 (0x146e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Sep 14 18:05:21 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e5d060-1496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:27:e9:0b:c6:50:1b:04:40:8e:d4:3b:26:
                    50:e6:96:01:43:2c:54:75:5a:75:f8:6a:2d:a2:ba:
                    2b:df:e2:be:60:a8:19:78:8b:35:16:92:2f:99:35:
                    32:af:15:d3:85:43:89:5e:a1:92:b8:20:85:ec:b2:
                    7e:12:07:22:5b:94:ba:67:42:5e:4c:83:da:27:1c:
                    75:91:1d:b5:14:8b:fc:2f:72:51:f1:c4:bd:0e:c9:
                    97:03:d8:15:96:52:ee:9b:21:81:92:87:d7:de:16:
                    1a:a8:d6:2d:18:23:f9:07:1f:d2:54:be:8f:f1:af:
                    80:b8:c8:b1:b5:ec:73:8a:a9:f9:b8:cd:10:8c:22:
                    22:ad:56:4e:3b:b9:f0:38:d8:e5:0d:0a:4f:96:5b:
                    ab:9c:48:cd:33:a8:5a:35:b2:73:9a:91:1f:32:47:
                    a4:89:80:6d:27:c3:e2:a2:5e:ea:dd:ff:42:c4:d2:
                    ce:04:3c:10:bc:6c:48:a0:02:1b:92:f1:1c:ec:b4:
                    b3:10:95:38:63:32:22:95:dd:32:a6:e6:9b:f6:4f:
                    cd:aa:cf:eb:25:bb:f0:8e:59:bd:50:41:cb:4a:3c:
                    89:0b:21:aa:4b:5a:c9:c3:a1:12:9e:57:5b:f3:73:
                    9b:23:02:fe:89:23:a0:49:db:71:89:1b:6c:6b:3e:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:4D:53:09:35:B1:14:9E:54:41:BF:85:92:DD:66:5A:F9:93:AB
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:36:7c:48:29:7f:35:93:d9:c1:47:8b:37:6e:56:02:9e:
         8b:00:81:bf:11:08:42:f5:9e:c4:48:23:ce:13:b4:15:e4:c5:
         bf:7c:34:08:4f:e5:e3:bb:d9:d6:5e:a3:89:2a:b5:90:dc:a3:
         f5:74:f2:ee:c8:b2:bb:b8:c6:34:3c:fa:e0:bc:a6:62:a1:82:
         e4:69:62:45:43:42:e8:a6:6e:95:e7:13:14:23:54:13:89:cc:
         5e:ee:f7:6f:b4:9a:e8:1a:9f:6c:12:60:8d:9e:3f:79:34:7d:
         a8:61:5c:05:9e:bf:0a:8c:73:03:ba:40:8b:b3:bb:1d:b9:33:
         42:8c:7f:25:22:f7:e3:04:3e:e9:34:43:03:34:31:82:aa:b8:
         96:6e:85:2a:d7:6e:2c:b5:b2:c9:bc:1f:8d:eb:9d:34:fd:81:
         e7:1e:33:68:f9:21:06:ac:30:b3:9e:9e:33:f2:92:84:eb:69:
         dc:9e:fa:fd:f6:27:b1:4f:81:17:76:9d:8f:58:00:1b:9e:ce:
         df:3a:eb:3b:3e:9a:4b:35:f0:f3:5c:44:de:fd:fe:f3:5e:0e:
         c7:86:61:22:6b:2a:c2:64:e3:0f:86:6c:01:79:11:6f:b1:dc:
         45:eb:59:b4:8f:79:34:2b:21:53:c4:c4:92:87:40:c5:1d:85:
         0a:03:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:11 2024 by rpki-client on console-ams.rpki-client.org