Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
File:                     EAD89080BA8B11EDB9005884C4F9AE02.roa (raw, json)
Hash identifier:          +obX0qWZNG8FeSq+iw5IZsGXZMUxgERMUoIjCnYAp2w=
Subject key identifier:   8C:8D:C9:D0:F5:88:8B:44:5C:9A:83:08:E8:7D:2A:9E:95:BC:4B:85
Certificate issuer:       /CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
Certificate serial:       D0
Authority key identifier: C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
Signing time:             Sun 31 Mar 2024 06:08:36 +0000
ROA not before:           Sun 31 Mar 2024 06:08:35 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150782
IP address blocks:        103.197.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl
                          rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 05:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180882/serialNumber=C2B81C9A935BB2B33BD69FB79B34EE3267399DB6
        Validity
            Not Before: Mar 31 06:08:35 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6608fde3-a6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:7c:14:b0:86:b6:00:80:6e:da:fa:6d:48:
                    57:89:07:32:93:96:b6:c5:9e:3e:76:71:a3:41:77:
                    33:fc:be:1b:b6:50:17:4e:6e:00:e4:10:89:81:97:
                    9c:d1:4b:ed:f9:50:04:c4:66:c3:9c:d4:67:2b:ea:
                    94:23:d7:71:2f:e7:b8:ac:ae:b7:be:c7:5e:67:90:
                    a2:f7:98:a2:0a:e7:94:fb:ac:04:0d:f2:ea:e8:46:
                    5c:6f:04:1c:1f:8f:52:c9:e4:b0:11:2e:ed:78:a4:
                    4f:98:0e:97:52:ec:79:c3:da:16:ce:e1:3a:18:99:
                    5a:f6:5a:3c:0f:a1:fe:e8:c9:72:b6:4b:1d:b1:17:
                    90:6a:1b:d0:9c:60:c0:03:2b:13:80:3e:e5:73:fe:
                    1e:86:5d:ac:30:12:a3:fc:2a:06:92:cb:cd:02:01:
                    f8:5a:69:42:05:77:1c:02:49:c8:e4:6d:a5:7f:b2:
                    76:97:22:f7:cd:6e:01:d7:ec:ad:7e:62:6d:cc:5e:
                    09:31:fc:e8:92:32:b9:35:b1:46:0d:22:29:23:06:
                    5c:03:50:c3:a9:0f:fb:7d:00:c0:05:67:c0:d8:bd:
                    f6:b3:6f:45:e5:3e:63:77:6a:ef:a4:4e:f9:2c:ed:
                    9d:91:b2:45:4f:00:c5:a7:7f:db:46:00:fd:04:26:
                    c1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:C9:D0:F5:88:8B:44:5C:9A:83:08:E8:7D:2A:9E:95:BC:4B:85
            X509v3 Authority Key Identifier:
                keyid:C2:B8:1C:9A:93:5B:B2:B3:3B:D6:9F:B7:9B:34:EE:32:67:39:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/wrgcmpNbsrM71p-3mzTuMmc5nbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrgcmpNbsrM71p-3mzTuMmc5nbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180882/DF3AB46CB72D11ED85DD3017C4F9AE02/EAD89080BA8B11EDB9005884C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:08:68:1e:67:f0:d8:51:c4:48:c8:dc:28:e4:7a:a5:30:d4:
         c6:5d:af:15:f8:4a:2e:b7:66:6d:43:94:b7:28:46:55:1f:06:
         e3:f2:b4:eb:83:be:a3:56:a5:a4:34:e8:01:f3:46:0c:e4:94:
         28:fc:d2:09:d1:d4:45:b4:fd:fc:1a:58:3c:0b:c8:51:85:13:
         e1:64:d6:b1:99:e4:2b:1b:94:10:86:35:ef:33:0a:b1:79:5c:
         08:ad:f8:12:be:85:13:cb:c1:7c:2f:81:28:ce:d5:8a:48:d2:
         b9:e3:73:67:26:3e:6d:52:7e:83:2d:1c:c0:a4:7e:6b:32:71:
         bc:2a:eb:e4:6b:a1:9f:57:20:7a:de:85:15:0d:37:ca:d6:46:
         29:83:58:26:ad:95:4b:a4:1e:d3:58:5f:0c:7f:37:f4:24:dc:
         d1:1c:58:3b:02:a2:cb:60:c0:f8:0d:97:95:62:fe:ca:86:88:
         dd:15:3a:56:0c:94:2d:f9:78:e5:10:a5:04:9b:41:bb:5e:4f:
         a1:50:50:fe:05:da:4d:db:07:aa:7e:66:af:db:b0:61:b1:69:
         cf:77:18:36:20:97:dc:37:80:4a:ed:35:83:83:d9:b2:13:73:
         8e:2d:d8:63:22:80:6a:21:23:8f:1a:dc:36:cb:9e:a6:4d:02:
         4a:28:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:01:21 2024 by rpki-client on console-fra.rpki-client.org