Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
File:                     BDE72518479C11EC8861323FC4F9AE02.roa (raw, json)
Hash identifier:          sAFMTFyJIZM6MEEbLrt5lAiVfSjBDwaFqSK5fEH+Odw=
Subject key identifier:   B8:5F:C6:A4:9A:18:28:8C:49:08:0F:5B:EF:0F:6E:E5:64:08:27:5C
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       035C
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
Signing time:             Wed 29 Nov 2023 02:14:00 +0000
ROA not before:           Wed 29 Nov 2023 02:14:00 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     135615
IP address blocks:        103.174.150.0/24 maxlen: 24
                          103.174.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Nov 29 02:14:00 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65669e68-52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:80:01:6e:1d:c4:42:f8:e6:74:a9:86:b6:
                    29:8d:b0:98:0a:0b:42:79:32:aa:c3:e5:06:41:11:
                    6b:64:e1:a2:db:48:b7:a0:25:00:da:79:3b:55:04:
                    8b:8f:56:1e:1d:4c:ae:98:3f:22:9c:46:8c:5f:a6:
                    3a:4a:bf:e4:1c:13:df:e7:80:f8:66:b5:cb:e2:80:
                    d6:e9:72:26:0a:cb:f6:20:0f:8b:ae:5f:d3:b9:36:
                    28:2d:75:eb:3a:f1:10:fe:72:84:e3:c9:73:79:2e:
                    65:53:ae:4c:7c:93:ac:cc:2b:fa:d9:be:53:3e:67:
                    9a:02:5f:ec:b5:55:e9:74:7b:84:1f:6d:af:08:61:
                    3c:40:d4:b7:54:df:48:b8:ef:d5:d7:f4:63:eb:8e:
                    d5:61:8f:94:12:40:d2:4f:c5:30:83:85:fb:ad:b9:
                    41:8e:fc:38:6e:2b:59:67:98:be:7f:98:5c:ce:d8:
                    c0:3c:bf:a9:63:bd:1e:f2:72:c2:82:f7:8d:24:ec:
                    d5:b2:ff:c7:54:2a:31:51:09:43:5b:01:47:19:c8:
                    b9:ca:65:ed:e7:d8:61:bf:d2:ce:b7:0e:65:cb:3d:
                    16:56:e6:87:c5:ba:d1:c3:56:e1:14:51:02:37:b1:
                    0f:96:a9:cd:a9:52:58:cc:d0:8e:0e:36:08:33:9a:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5F:C6:A4:9A:18:28:8C:49:08:0F:5B:EF:0F:6E:E5:64:08:27:5C
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:6c:4d:c6:94:6d:2a:78:61:f3:44:98:f5:f4:eb:4f:c4:
         57:a1:f7:5a:3e:e9:38:f7:73:f9:e7:87:b9:df:39:ea:2c:b7:
         d5:90:33:a1:0f:01:fb:41:e2:c4:85:32:e6:af:77:ff:ac:94:
         a1:35:b2:e6:38:46:2a:79:ec:32:87:62:a7:ee:c6:31:c5:49:
         8c:f2:20:cf:5f:5d:80:58:30:f8:68:b4:31:0c:b3:71:0a:b4:
         7f:a6:02:62:97:ee:d4:1d:98:ea:15:d9:98:0b:99:99:b6:9d:
         70:5b:f1:18:25:8e:bd:f5:0e:80:d0:3c:36:60:ae:18:f0:8b:
         a3:00:7c:1d:0b:29:98:9b:0a:f4:89:da:4f:2b:63:51:4d:af:
         2b:da:62:8b:c3:af:62:c9:db:02:c7:2e:27:86:85:54:0f:c1:
         60:3e:39:c1:07:fa:22:60:fb:04:96:f7:29:95:61:c7:2b:0d:
         83:ab:21:f0:28:22:31:61:c7:a0:7a:35:b1:98:ce:4a:e3:49:
         8f:1f:b7:e3:f5:24:6e:11:84:cc:86:81:95:84:8b:04:37:9c:
         a0:b1:52:6d:7a:dc:b1:a8:2a:f8:be:79:d4:66:45:6e:d6:26:
         a9:61:8a:7b:e4:80:ba:f7:07:58:df:37:43:9f:f6:bc:54:83:
         9e:d6:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:14 2024 by rpki-client on console-ams.rpki-client.org