Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa
File:                     F1930FBAEFE011ED81AE706DC4F9AE02.roa (raw, json)
Hash identifier:          51wV8ILWAn25yFNKdCFqhCqeklwdHo2+p2NIS5g/3DY=
Subject key identifier:   49:4D:B3:92:DB:17:3C:22:98:1C:CF:5A:99:0F:5E:8D:F7:33:76:DF
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       025A
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa
Signing time:             Thu 07 Dec 2023 03:14:14 +0000
ROA not before:           Thu 07 Dec 2023 03:14:14 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     140630
IP address blocks:        150.129.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec  7 03:14:14 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65713885-091b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:67:e2:1d:fb:a0:b3:f9:40:49:2f:46:a0:
                    ff:eb:92:45:08:89:33:80:79:5e:dc:48:43:ba:54:
                    bb:26:51:82:1b:9f:6b:d4:99:1e:5c:12:9a:41:ab:
                    dc:0b:99:c7:1d:24:a3:5e:bf:a2:53:4f:23:e2:2a:
                    3a:33:21:ff:4c:42:00:ec:3a:cb:0e:29:28:b7:63:
                    e8:4f:5c:c7:2b:51:67:e3:e7:c8:af:6d:c5:fc:2d:
                    c8:66:2f:2d:b3:f0:4a:bb:a9:42:22:54:12:9f:38:
                    f2:ad:13:31:4b:06:a5:61:98:ff:86:01:08:dd:d5:
                    48:06:99:3f:1e:21:a9:92:8d:55:83:bd:0b:a9:d0:
                    ec:2f:49:bd:79:d6:f0:63:fd:3d:19:f3:2a:13:7f:
                    1a:e4:1d:c0:9e:24:45:73:31:4f:f3:4c:36:1e:a5:
                    e8:1f:65:8e:88:71:52:e4:91:49:43:c4:01:4c:d8:
                    be:dc:17:a4:a0:34:5a:ff:e0:59:fe:10:ea:e6:1b:
                    a2:bb:a9:3f:6a:ca:13:4c:1c:ff:e2:9e:8f:7b:10:
                    cd:d1:af:8d:2d:52:3a:ba:7e:98:41:ac:39:45:85:
                    0e:6a:cc:d8:81:af:6c:80:f9:8b:b1:5d:5b:43:2e:
                    49:6b:0d:9d:c5:dc:c0:72:6d:26:92:f6:71:9e:01:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:B3:92:DB:17:3C:22:98:1C:CF:5A:99:0F:5E:8D:F7:33:76:DF
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:45:63:4f:42:33:99:eb:37:5f:aa:55:02:2f:4c:86:75:b2:
         cb:99:d7:bb:78:a3:1a:99:7c:0a:d0:ed:ba:99:14:ce:61:da:
         c3:6c:a5:6a:44:89:08:0a:98:a5:4b:2c:fd:7a:9c:08:65:17:
         cd:0b:d8:13:16:00:4b:86:0b:06:8d:c0:c0:3a:24:22:fd:e4:
         cf:f7:d8:ce:0e:63:c8:90:fd:75:b9:a0:5a:bb:d2:9e:45:df:
         49:f2:0e:31:6b:79:0a:ad:07:0a:de:a9:ba:81:ae:ca:83:a8:
         ee:ec:56:48:29:36:43:e7:8b:06:6b:10:63:34:60:9b:f4:94:
         4b:25:14:d5:10:38:fd:8d:79:43:2f:16:74:12:7e:e9:11:cb:
         ae:a7:8c:d8:a2:b7:1d:5b:39:35:bb:68:1d:66:5e:ad:64:b6:
         ea:92:c9:52:bf:97:cb:1b:e5:ae:e3:03:12:1d:7d:32:88:02:
         ed:91:c9:9d:25:b3:7f:e2:b5:01:11:c9:78:66:9a:29:dd:5d:
         66:bb:7c:5a:d7:56:34:eb:6c:60:54:9d:19:63:85:58:e1:aa:
         cf:09:0d:79:f8:83:e7:93:60:85:18:cd:c1:84:68:8f:ff:5b:
         0f:ad:51:4e:3a:91:e7:f7:f0:d6:50:6f:81:de:3b:79:cf:2a:
         f8:7d:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:34:49 2024 by rpki-client on console-fra.rpki-client.org