Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
File:                     481545DEFE8211ECBAB0E13FC4F9AE02.roa (raw, json)
Hash identifier:          Qlo4+mbKJCym2bywU9/+B9nSR/lgPkj3tiR7WBd3VEs=
Subject key identifier:   5E:BB:95:3D:B0:80:4A:EF:5F:8C:8E:7C:3C:AA:AF:3A:2F:0E:1E:3E
Certificate issuer:       /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial:       0221
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
Signing time:             Tue 03 Sep 2024 03:46:34 +0000
ROA not before:           Tue 03 Sep 2024 03:46:34 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149784
IP address blocks:        103.190.206.0/24 maxlen: 24
                          202.20.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
                          rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
        Validity
            Not Before: Sep  3 03:46:34 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d68699-70d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:92:7d:02:e4:a1:e2:49:98:eb:d6:98:09:
                    d3:09:e6:17:a9:fa:5c:2a:eb:a4:b7:73:22:62:e3:
                    c7:8f:6c:5d:9e:59:4b:18:cf:7f:d6:a5:dd:e5:74:
                    b1:e2:bd:7c:40:f8:e3:99:ad:3e:e6:47:b1:8c:c9:
                    2e:d8:95:3a:8b:73:ad:43:ae:ff:13:84:7f:80:ad:
                    00:ba:37:17:94:58:0a:b6:5e:cc:36:43:6a:de:9c:
                    10:91:1b:3d:c0:a5:0a:cb:f5:fa:9c:0a:77:cd:7e:
                    16:66:ec:ea:19:bf:42:f0:65:27:70:a2:a2:ac:81:
                    a7:1b:53:44:c8:ff:20:3d:ef:7e:58:96:78:1f:0d:
                    a4:1c:97:ba:a1:09:8e:77:a8:e4:22:13:fb:d4:1f:
                    af:5f:af:0b:d5:2a:ed:f2:cf:8e:49:67:73:80:93:
                    62:a4:f4:8e:0f:c3:eb:38:54:77:a0:76:4a:ad:67:
                    11:99:71:16:b5:99:06:2e:48:ab:9c:64:eb:bd:54:
                    b6:aa:f6:ab:05:04:f2:56:53:04:c6:16:37:df:b5:
                    60:45:0c:8c:b5:4f:fa:6e:ac:65:57:dc:7c:1d:17:
                    e3:67:20:4e:76:4c:48:44:ed:15:38:ff:af:dd:31:
                    cb:76:fd:a6:4a:82:0f:a0:9b:48:21:50:a3:1a:8f:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BB:95:3D:B0:80:4A:EF:5F:8C:8E:7C:3C:AA:AF:3A:2F:0E:1E:3E
            X509v3 Authority Key Identifier:
                keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.206.0/24
                  202.20.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:10:fe:d9:36:3a:80:9e:69:fb:b1:28:78:c2:5e:6f:7f:
         9f:25:ec:a5:c6:be:45:13:45:60:4a:d3:c1:29:50:ed:23:db:
         7a:1f:d1:3e:14:06:c7:e9:8b:74:1c:82:04:1d:e8:82:fd:03:
         9b:cb:3f:a6:eb:f5:43:32:8f:0e:d0:c6:6a:64:f3:7e:a7:ee:
         bb:a7:d6:4e:03:8a:9c:a7:81:1f:72:cb:41:c8:c4:b9:75:fc:
         a9:53:0c:8d:09:2c:cb:a2:cf:96:11:9f:5d:b7:56:ef:c0:1f:
         42:fa:cb:53:8e:0b:bc:1a:78:2a:43:f4:d3:2d:cf:69:29:33:
         59:51:b0:17:94:32:6d:cb:4e:d9:7f:7b:5c:ef:fb:d0:fe:75:
         16:ff:98:7b:b8:52:90:eb:5c:99:de:d0:58:12:eb:e8:ce:15:
         5f:ea:36:7a:77:50:52:2d:7c:4b:9e:ff:81:79:31:9c:08:dc:
         00:92:50:7b:01:17:74:a3:7e:13:63:a5:e9:d8:88:b6:7f:52:
         65:1a:c2:c2:b3:f8:8d:24:c1:0c:ab:3c:a4:61:b8:4a:78:64:
         71:fb:60:04:31:38:19:ea:20:4c:66:ec:b4:48:97:72:ac:36:
         88:b7:74:6f:1f:fa:1f:60:f9:8f:c7:6c:07:72:c6:2f:01:c5:
         c4:7f:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org