Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
File:                     481545DEFE8211ECBAB0E13FC4F9AE02.roa (raw, json)
Hash identifier:          tvWsS0d2O6pntl3gqI/M1RaSnNFIpi2meNwpVtabI24=
Subject key identifier:   A0:13:2C:C6:88:DA:50:F2:80:89:A0:5F:81:DD:AB:CE:CA:F5:F3:70
Certificate issuer:       /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
Certificate serial:       0158
Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
Signing time:             Fri 25 Aug 2023 03:23:11 +0000
ROA not before:           Fri 25 Aug 2023 03:23:11 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149784
IP address blocks:        103.190.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl
                          rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B
        Validity
            Not Before: Aug 25 03:23:11 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64e81e9e-9968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:a7:74:d0:f9:63:ea:a3:bb:fa:1f:ce:bc:
                    c1:65:fc:4b:ab:b6:cf:3f:fa:6f:fe:07:5a:d3:94:
                    66:54:b4:b6:2b:e8:95:f4:86:b9:03:79:e7:4b:59:
                    f1:f4:2c:00:3c:22:8c:f7:97:8d:a6:f5:24:5a:11:
                    4d:c9:28:4b:ea:3f:f0:c2:c7:a1:81:34:82:dd:e6:
                    ff:8e:61:2b:00:3a:46:ad:a5:11:77:6b:32:01:1c:
                    5c:b1:8e:ea:b8:f1:b2:bf:e6:30:e3:c5:79:d3:74:
                    80:23:ab:85:b1:61:29:ff:ae:53:e3:14:e5:3b:b2:
                    3e:dc:a1:99:f5:71:b4:0b:bf:c2:85:fe:48:17:39:
                    61:d1:1a:53:b3:1d:ba:d5:90:f4:5f:4a:2f:26:9c:
                    a4:1c:56:72:c9:14:6b:72:3b:7c:43:ed:72:17:7a:
                    34:7e:11:0f:ba:b3:1f:e6:cb:0c:6d:10:cd:e0:26:
                    ba:d9:b2:89:ba:f1:51:0c:9d:b7:4e:f7:4e:43:0f:
                    fb:c7:7f:18:d8:b7:2e:b5:52:f1:d2:aa:b4:ce:e8:
                    78:66:97:84:ef:89:5d:01:bf:f5:4e:94:12:30:17:
                    67:bc:53:08:83:0b:a4:f9:be:33:95:f4:dc:b2:e6:
                    dc:0f:72:97:98:48:66:ca:b8:93:6d:68:e8:9c:17:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:13:2C:C6:88:DA:50:F2:80:89:A0:5F:81:DD:AB:CE:CA:F5:F3:70
            X509v3 Authority Key Identifier:
                keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/481545DEFE8211ECBAB0E13FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:99:a6:70:4b:e3:3d:53:5d:e0:c9:a8:fc:a3:b2:09:cf:
         9f:ac:0a:08:08:0f:00:ff:f8:1a:6f:c5:31:4d:a8:29:ba:9c:
         21:24:89:75:e1:2e:b2:5c:6d:44:3b:6f:cc:ef:5f:ac:68:f8:
         23:a4:4b:20:85:b0:ae:9b:7c:79:36:c5:8f:a4:8e:68:f2:11:
         14:5d:90:8d:62:63:54:aa:e6:05:4d:78:68:dc:62:45:77:59:
         c4:8c:45:55:db:6c:b4:5f:09:ca:66:85:82:cd:8d:94:22:e2:
         90:01:f0:7b:ac:8e:aa:44:c7:d6:d2:ca:48:6c:d0:21:13:0f:
         58:37:f2:3d:cc:49:ee:3b:03:77:47:d2:94:b2:9f:2d:80:7b:
         a4:42:42:7b:f0:0d:32:fd:05:ba:1c:ae:3e:82:5b:c2:72:16:
         b1:d6:02:98:9b:60:85:e1:f1:6f:9b:a2:8c:88:53:94:a5:9a:
         8e:5e:f4:b3:40:be:48:a1:b3:12:7b:a8:34:46:aa:9c:0c:a7:
         62:63:9b:be:e1:8a:b4:22:17:e2:3f:be:6a:24:18:3c:15:42:
         6c:94:ad:70:7f:9f:3b:bc:1c:6f:37:57:bf:eb:99:43:e7:e2:
         b2:c4:56:a4:c3:5d:9f:bb:41:81:96:82:3c:c3:e4:38:a1:79:
         9b:55:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:37 2024 by rpki-client on console-fra.rpki-client.org