Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
File:                     1EC631B2FFB211ECA2EBD652C4F9AE02.roa (raw, json)
Hash identifier:          60Yp+lMUoIhBshIDeToO24NmKvWSdMqkdEQgOkXf8BQ=
Subject key identifier:   B3:CA:D1:A6:BE:B5:8E:42:2D:F5:1E:8A:E1:9A:E4:78:6E:93:6C:AB
Certificate issuer:       /CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
Certificate serial:       08C0
Authority key identifier: D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
Signing time:             Sat 18 May 2024 21:30:45 +0000
ROA not before:           Sat 18 May 2024 21:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147282
IP address blocks:        103.150.50.0/23 maxlen: 23
                          103.150.50.0/24 maxlen: 24
                          103.150.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl
                          rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181C75/serialNumber=D797E91E1B274091F7DFDEDFA5B0012FE9B5AE87
        Validity
            Not Before: May 18 21:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66491e05-3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:8e:a7:fa:f4:f5:71:59:ba:ea:f5:bc:4c:
                    cf:1b:71:43:8b:90:ec:ec:45:96:47:70:b5:ce:fe:
                    d8:5c:27:2d:d2:80:1f:e4:ff:df:30:44:df:b0:02:
                    c9:06:6d:a2:d2:8c:04:ee:a4:17:af:d1:69:15:37:
                    ab:6e:75:88:af:62:09:48:2b:72:6e:e9:f3:95:d5:
                    df:51:8a:1c:ca:e6:e4:8a:a7:77:ed:c0:3b:3f:48:
                    38:a8:36:5c:e3:7e:db:a1:ec:76:6f:c3:77:5f:fa:
                    d5:8c:e1:cf:db:10:91:89:da:db:73:70:ab:2f:ce:
                    cc:8b:04:82:7d:da:cc:b4:ee:5e:88:91:ac:30:db:
                    63:56:74:1f:6d:8a:f6:38:61:09:85:c8:ac:a5:ac:
                    af:50:79:57:25:89:c6:7a:80:06:85:d0:e7:07:79:
                    61:c0:11:4c:16:c3:53:4b:90:31:f3:a5:b3:7d:c5:
                    b0:94:1d:44:61:60:01:7e:cd:fc:1f:bc:d8:2d:93:
                    4b:7b:2e:c1:d9:40:6d:d6:da:21:d5:79:8d:b2:cd:
                    2a:c4:ba:3f:f6:08:b9:58:e0:be:2d:6a:55:cd:28:
                    62:c9:fd:f7:22:20:fd:d6:9b:49:18:9a:53:9c:1e:
                    75:40:0d:d9:09:16:51:36:b4:cb:d2:3c:76:06:57:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CA:D1:A6:BE:B5:8E:42:2D:F5:1E:8A:E1:9A:E4:78:6E:93:6C:AB
            X509v3 Authority Key Identifier:
                keyid:D7:97:E9:1E:1B:27:40:91:F7:DF:DE:DF:A5:B0:01:2F:E9:B5:AE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/15fpHhsnQJH3397fpbABL-m1roc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15fpHhsnQJH3397fpbABL-m1roc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C75/903CE126909511EA8292085FC4F9AE02/1EC631B2FFB211ECA2EBD652C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:72:6a:37:fa:7c:01:f4:aa:85:f5:3f:27:d2:cb:df:29:ff:
         fb:39:94:14:25:39:d8:d3:60:1e:97:67:ce:1a:72:7a:27:5e:
         c0:a4:f6:de:e0:bd:4a:9f:37:9e:3c:c9:83:dd:f6:6b:41:d8:
         55:f5:44:eb:dd:9b:dd:3b:05:b3:df:99:8a:5b:a4:6a:f8:0b:
         76:e1:94:58:20:41:e3:ca:71:c3:2f:27:7f:ee:36:7d:e5:95:
         cb:a8:89:b6:92:72:79:7d:3f:5d:ef:db:39:1d:8f:48:68:b7:
         b7:79:c5:d3:37:64:20:bd:d2:bf:59:f2:3a:90:49:19:9c:16:
         94:ef:58:e8:8c:b7:3f:84:aa:bd:47:5f:a2:b4:f9:77:4b:38:
         47:a5:88:51:13:11:4f:b6:e5:60:ae:22:67:cb:de:e3:5d:10:
         d0:d3:57:5a:9c:d2:de:01:5d:89:c5:cd:8c:51:54:0c:b6:89:
         40:5c:e4:31:10:f5:9d:6b:41:7f:98:14:30:5a:cc:96:01:d8:
         e6:1e:dd:02:9e:96:eb:20:d5:75:74:f0:14:ac:af:66:00:b5:
         4b:5e:3e:c5:a3:1d:12:da:34:dd:83:b7:55:f8:7a:bc:83:23:
         2a:8c:55:e4:d7:2d:bb:c2:ae:6c:9d:36:9f:9e:38:95:b0:6f:
         5c:c4:db:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:20 2024 by rpki-client on console-ams.rpki-client.org