Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
File:                     74D88B52FF6511EB95D39078C4F9AE02.roa (raw, json)
Hash identifier:          KifjVQtEmH7c/UkjSBfS4v9ezjwJzs4yUPe2080+twU=
Subject key identifier:   4A:E7:0E:2F:BE:CE:74:CD:E7:38:C3:1B:87:FF:F2:B4:87:8E:C8:D0
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       13A8
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
Signing time:             Thu 14 Sep 2023 17:14:48 +0000
ROA not before:           Thu 14 Sep 2023 17:14:48 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     142437
IP address blocks:        203.159.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 17:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5032 (0x13a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Sep 14 17:14:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65033f88-7c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:5a:5c:78:0e:cf:88:63:7e:cb:b5:26:34:
                    c6:58:38:a6:e5:67:3f:af:66:d0:a4:c0:68:98:18:
                    30:32:3b:71:d4:c8:91:b7:f5:10:9d:7e:1c:1f:9b:
                    e0:74:33:87:1c:ae:0f:48:ce:c2:2f:59:5b:51:0b:
                    9c:95:b4:27:6e:3f:d4:1c:09:9a:65:3c:ac:9c:88:
                    8a:3b:c7:9e:18:16:0f:f7:53:bf:03:05:1b:82:36:
                    84:c5:14:89:60:ab:3a:4a:29:34:23:94:07:7f:6c:
                    5e:62:85:bd:79:71:cf:9f:38:e1:84:7f:23:31:74:
                    16:db:18:d3:4e:f0:0c:8f:d1:24:5e:ff:45:bc:42:
                    12:da:26:ff:63:d9:64:d0:d3:35:0f:2c:ee:e9:a3:
                    55:d3:96:8e:b2:2d:73:ef:c7:99:63:a9:fe:18:60:
                    a5:92:d2:40:c7:5a:cb:a0:e3:2b:89:ab:38:c6:f3:
                    f9:3f:6a:29:48:69:10:af:7c:25:e5:eb:56:0e:bb:
                    cb:10:90:ab:04:61:24:03:27:44:f5:95:b1:cd:e3:
                    1e:08:7b:88:59:f2:1d:e5:9f:c8:7f:46:37:08:ce:
                    bd:a5:5e:9f:cc:44:ef:00:cb:33:10:92:7f:33:7a:
                    ce:9b:8c:f9:78:b7:3c:14:e3:53:91:05:78:ee:96:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E7:0E:2F:BE:CE:74:CD:E7:38:C3:1B:87:FF:F2:B4:87:8E:C8:D0
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/74D88B52FF6511EB95D39078C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:d2:76:1d:3c:5e:16:b6:0f:72:c1:e9:98:6f:78:a6:d8:
         c9:7b:e2:c2:2a:fe:8f:c4:3a:4e:fb:e9:39:f8:fd:3e:3d:b4:
         a6:a6:88:7a:9d:09:03:f0:33:92:d5:5e:c0:8f:e1:ce:9d:de:
         bb:17:60:ce:86:04:79:f1:4c:47:60:5e:6c:dd:9d:f4:10:8a:
         34:82:a8:c6:fc:a1:13:25:03:ea:da:f4:0a:fb:fc:98:ab:eb:
         2d:b7:e7:ea:0a:50:39:05:44:78:fb:d7:95:26:d2:d3:bb:62:
         21:dd:d6:c5:4d:96:ec:d4:fa:64:20:e3:61:29:ac:1d:be:5b:
         53:8c:d8:3a:e4:85:5a:3e:c5:2a:eb:ae:fa:91:61:19:08:c2:
         a5:5e:00:cf:ab:ae:06:ae:1e:0e:fd:54:a6:a0:d8:17:c9:99:
         0d:6f:08:d2:99:d3:84:66:0b:6b:11:1a:93:3e:d9:16:e2:71:
         5d:4d:10:94:8b:97:6d:2a:4c:ee:fb:a0:20:2c:0f:84:d0:2a:
         7d:b6:5b:bf:bb:90:c2:06:2e:0f:97:04:bb:34:19:c3:94:12:
         3d:ca:b1:c7:f0:0b:75:ea:62:41:ce:5a:d4:73:2c:f1:71:ba:
         c0:0a:ac:fe:70:e9:ed:cf:e4:19:12:77:eb:85:89:cf:07:c7:
         63:51:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:51:20 2024 by rpki-client on console-fra.rpki-client.org