Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa
File:                     3EAA12E2396811ED8AF52966C4F9AE02.roa (raw, json)
Hash identifier:          VBG1+8YHN1/tahN8bBEosQsH1gRLIMgivs7uGKrPeZY=
Subject key identifier:   0E:0D:DE:7B:5E:0C:26:B7:7F:D7:4F:19:35:5C:43:4B:8C:26:52:F7
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       F6
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa
Signing time:             Tue 03 Oct 2023 03:44:17 +0000
ROA not before:           Tue 03 Oct 2023 03:44:16 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150318
IP address blocks:        103.1.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Oct  3 03:44:16 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=651b8e10-679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:66:92:73:c3:87:f6:95:a2:19:4e:81:1f:
                    0a:e7:10:ad:5c:1c:a7:52:9b:99:3a:f0:d1:70:d7:
                    84:05:1f:2c:e7:3f:4d:96:4e:f4:11:5e:83:b2:87:
                    b8:07:17:3d:cc:a8:59:07:12:1d:d1:ac:81:2b:8f:
                    bd:35:8d:41:b8:dc:e5:c5:d0:cd:fd:9e:08:fc:41:
                    76:d0:bd:f8:f1:03:fa:ed:d9:9a:cc:b6:ae:4a:57:
                    36:f6:9b:fb:2d:ac:f0:b7:24:94:f1:f4:92:1e:4c:
                    da:83:95:1e:87:16:ce:f1:61:a6:c8:9e:bb:65:a5:
                    cc:b4:24:da:07:2c:74:a9:dc:75:c7:26:39:50:bf:
                    d0:2d:b4:35:98:81:6c:c3:e4:c9:04:0b:88:d0:39:
                    29:dc:b7:3f:a5:d1:49:ad:31:30:57:59:51:84:54:
                    31:ae:a7:06:b5:df:d6:2d:df:ed:5c:fd:fa:3d:92:
                    a3:e1:6c:e6:3c:06:cb:8a:ed:95:3b:27:55:04:43:
                    b0:95:2b:a9:51:74:84:0d:fc:96:75:ed:a7:c8:d0:
                    cc:d6:9e:b4:a5:9e:c0:ee:86:98:3b:b1:fd:f6:7a:
                    33:4b:84:56:80:a7:9a:8e:d2:35:c8:b0:26:6d:ca:
                    85:a8:3b:35:a3:9d:94:22:20:0e:9e:18:21:f4:3a:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:DE:7B:5E:0C:26:B7:7F:D7:4F:19:35:5C:43:4B:8C:26:52:F7
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/3EAA12E2396811ED8AF52966C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f3:dd:2d:4b:df:7d:ba:c4:e6:e8:da:b9:29:81:cc:7e:d5:
         78:2f:69:e1:de:ca:92:bc:61:c0:16:6b:85:04:71:1b:58:2b:
         c7:2c:f7:36:c9:b0:00:9e:02:35:89:3e:2f:e1:c7:7d:1b:e8:
         b6:19:f7:78:54:7d:54:fb:1b:ff:e6:73:3b:b6:ce:5c:08:6f:
         47:95:68:2d:a6:9b:db:73:57:b9:a1:bb:bc:26:06:89:99:bd:
         3e:53:80:7e:ea:56:6a:5e:64:e4:d6:5f:e0:22:99:a5:27:27:
         bb:2a:8a:74:99:78:48:0b:47:8c:21:90:70:c0:af:5a:c7:6f:
         9b:38:e1:da:31:33:7e:4d:5d:18:83:d7:a3:c8:86:24:82:23:
         95:9d:fc:05:ab:8f:31:96:4e:6d:16:33:c8:aa:d9:67:43:69:
         2d:5b:a8:68:3e:8d:98:e9:f9:e8:5c:7f:17:59:5c:7b:91:91:
         67:7c:79:85:f0:b2:ef:7b:8c:e7:28:67:e5:3f:a9:8c:21:e4:
         7b:9a:59:59:3f:6e:bd:bb:92:6a:f4:b2:13:91:fa:c1:8a:18:
         f6:3f:0c:e9:0b:26:ef:a6:be:57:19:b0:d9:a6:38:81:56:6c:
         62:06:5a:b2:0a:29:58:b7:a2:42:6e:51:ae:58:98:42:10:70:
         9e:71:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org