Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
File:                     F7EA272C043111EDB7DA7485C4F9AE02.roa (raw, json)
Hash identifier:          mJhgsg3Wq2rzRuujkB6eG0zeP2qDmSZd91bZ6KNL7kw=
Subject key identifier:   0E:F7:D9:94:63:D3:F4:55:8F:7A:C1:69:75:05:B4:98:B3:61:8D:27
Certificate issuer:       /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial:       02B6
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:35:26 +0000
ROA not before:           Fri 01 Mar 2024 03:35:26 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.50.0/24 maxlen: 24
                          103.146.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
                          rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
        Validity
            Not Before: Mar  1 03:35:26 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e14cfd-7d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:9d:fd:98:6b:56:e2:1a:fc:c7:bb:bb:ac:
                    a3:3a:ce:5b:cd:7c:24:38:b7:a8:82:5f:a5:c9:2f:
                    89:b9:25:35:04:f2:2e:92:b7:c7:48:0f:8f:87:af:
                    ce:9f:d5:6c:fb:7b:2c:06:53:3a:de:8d:c0:24:1e:
                    86:54:f0:32:e3:db:65:b6:18:7e:d8:e9:ae:d7:23:
                    e1:2b:79:c4:2c:72:a1:9a:8b:d1:78:0d:b5:d8:37:
                    dd:5e:a6:94:08:d6:a6:84:80:73:57:16:2f:fa:98:
                    ce:c4:3a:96:66:12:30:eb:4e:97:79:9f:a5:3a:bb:
                    c7:4d:7b:72:8a:46:d9:60:f9:5d:cb:16:3e:ee:e0:
                    7f:28:69:9b:83:e0:75:9a:8f:ef:c8:f4:d3:94:aa:
                    ea:5e:f2:4f:35:ec:23:e1:fc:1c:d9:3f:39:02:b8:
                    31:7a:78:59:81:0b:69:df:3b:59:4c:2b:e7:4d:02:
                    78:f1:00:b6:12:cb:a3:6f:02:47:38:79:c0:f1:08:
                    57:17:21:38:4a:53:32:b4:26:83:75:6a:b5:19:cd:
                    98:fe:3f:58:e6:c3:cf:43:87:3f:38:da:8c:7c:d6:
                    cf:db:9d:6f:f9:7b:9d:06:f9:00:81:29:10:5e:f2:
                    79:23:92:3a:51:bd:22:1c:8e:f9:e4:2e:33:52:41:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:D9:94:63:D3:F4:55:8F:7A:C1:69:75:05:B4:98:B3:61:8D:27
            X509v3 Authority Key Identifier:
                keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/F7EA272C043111EDB7DA7485C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:06:04:68:ef:4c:b3:8c:ba:3d:1e:2a:d8:f9:fb:c7:18:
         38:4f:96:c5:60:88:f3:15:5f:99:b0:28:fb:c6:7f:8f:dd:87:
         ab:8f:a7:62:62:ad:a1:16:63:a4:77:03:4d:8f:60:31:9c:84:
         7f:bd:52:ed:df:38:bd:33:a6:5f:eb:40:7e:d9:3b:1e:7e:33:
         0e:97:4f:60:11:77:58:13:bd:28:aa:b2:22:c3:5a:9c:86:9a:
         84:31:73:f6:72:63:ba:52:7b:ac:a9:e5:3c:1c:b0:68:e8:f2:
         b2:c7:08:41:aa:11:39:03:73:77:7c:eb:e1:68:4d:ee:e3:ae:
         7f:19:0a:6d:d0:a7:c5:be:de:12:ff:05:ec:31:28:ac:e5:e6:
         74:06:80:25:2c:2e:5b:ac:46:eb:c9:44:1a:dc:9d:ff:4a:41:
         ce:a3:a4:93:48:9e:61:8c:de:20:6b:a9:1c:69:cd:31:7c:de:
         bc:65:29:ac:ae:54:b1:1e:10:2e:0d:ac:f6:21:25:f1:72:00:
         80:ba:ef:e2:09:eb:69:5f:e0:00:a6:c4:75:4f:1d:de:48:00:
         f3:c4:36:2a:0d:53:e9:56:44:f2:2a:1c:3f:87:71:fb:89:2d:
         88:ad:fd:cb:81:ae:ca:92:6b:16:cb:cc:fc:1f:f3:3e:22:de:
         8c:7b:c6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:26:39 2024 by rpki-client on console-fra.rpki-client.org