Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
File:                     BDE72518479C11EC8861323FC4F9AE02.roa (raw, json)
Hash identifier:          QChsCdLxNdJADtEotr2ALhheVziebQBBztLPRul6Vhs=
Subject key identifier:   EB:45:7E:C0:03:BC:DE:2A:29:64:EC:BF:68:2F:0E:37:5D:5B:21:85
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       0415
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 00:03:18 +0000
ROA not before:           Fri 15 Nov 2024 00:03:18 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     135615
IP address blocks:        103.174.150.0/23 maxlen: 23
                          103.174.150.0/24 maxlen: 24
                          103.174.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Nov 15 00:03:18 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67368fc6-928b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1d:90:5c:34:f2:c0:5a:2a:46:52:b7:2f:2a:
                    64:72:2a:cb:aa:c9:21:cb:5f:d8:e9:7c:9d:ca:de:
                    c7:28:36:ac:e5:6c:c7:53:08:e5:8d:54:e5:c6:75:
                    60:e4:49:f9:d6:c8:45:a3:ba:57:4b:4e:c9:cd:bd:
                    13:bf:08:82:ad:d6:81:4a:54:3a:ce:4e:b5:a3:6b:
                    92:d2:1f:aa:66:a5:b0:eb:5e:37:24:69:cd:83:f1:
                    36:1d:02:4c:12:ce:f6:7b:e8:4c:9b:8a:f5:98:4f:
                    3e:6f:94:d2:db:9b:84:af:3f:49:77:f8:73:6f:07:
                    e6:eb:b5:94:9a:79:f7:2a:4a:1c:4c:17:42:ed:6e:
                    1f:6d:16:7e:19:91:7b:f8:0d:0a:67:3e:a3:f7:d7:
                    35:62:c3:37:5b:bb:a4:b7:3f:c9:17:70:82:d1:54:
                    bd:41:bc:53:79:d2:44:7a:08:d5:1c:a9:c0:a4:6b:
                    f2:49:f5:5e:0e:3f:b3:37:fa:16:83:d5:1b:36:03:
                    55:c4:74:45:fc:3e:4d:af:c3:2e:7d:30:b3:85:e3:
                    c8:97:1c:50:69:8e:78:d0:e3:13:a1:6b:89:0a:dc:
                    86:2d:18:0d:ac:bc:d7:33:37:14:dc:2b:62:90:67:
                    21:f8:3a:af:86:60:ea:e9:e0:37:1d:df:b5:b9:eb:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:7E:C0:03:BC:DE:2A:29:64:EC:BF:68:2F:0E:37:5D:5B:21:85
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/BDE72518479C11EC8861323FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:98:88:4a:58:0b:94:ce:86:ef:65:60:6b:94:50:61:b5:
         8b:99:94:91:24:5a:4e:c0:64:ca:e6:8f:13:a7:db:2f:e1:a2:
         32:82:55:98:68:2d:5a:5b:f6:f9:a0:c8:91:7a:ac:f2:c9:40:
         a5:85:4a:9b:d3:cd:b9:e2:f3:ca:9b:23:26:7f:e9:4d:d0:3f:
         62:d1:bb:fc:46:9a:e7:86:ee:95:4f:d3:f9:2d:c5:10:a5:65:
         09:22:60:0b:b1:f6:0b:14:be:cc:18:83:96:28:95:da:92:65:
         d1:01:a3:b1:41:e1:52:ea:2e:06:ea:f7:1f:df:84:9b:01:ea:
         69:7c:55:9a:c3:27:9b:0f:77:fc:e7:70:2e:9e:9c:1d:b0:e1:
         e9:ad:c7:11:c9:03:57:16:e6:95:a8:76:cf:7c:78:1e:cd:67:
         ec:c2:16:70:b5:6e:eb:9b:01:19:97:e5:02:01:85:a8:e7:c5:
         6b:af:4d:ae:80:c6:79:d2:f9:ae:78:dd:da:5b:d6:51:c7:d3:
         21:4d:a6:91:4b:d7:59:77:df:a9:63:8a:74:4e:78:2b:04:fb:
         99:4b:42:96:b2:a6:71:eb:b0:61:93:b8:09:fe:8f:db:12:9e:
         7b:11:35:05:4e:15:4c:c6:f0:ee:e3:5f:55:09:0c:a7:1c:0d:
         b3:e5:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org