Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
File:                     0B237586453311ED9A3F7844C4F9AE02.roa (raw, json)
Hash identifier:          mEyvOlDX3kJHouKS9DLhCAJ43welizBv5m5kUTWRzII=
Subject key identifier:   58:B5:47:A9:76:BB:EC:2C:31:EE:1B:1A:A2:83:A5:D4:CA:3D:16:C0
Certificate issuer:       /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Certificate serial:       0181
Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
Signing time:             Fri 11 Oct 2024 02:36:16 +0000
ROA not before:           Fri 11 Oct 2024 02:36:16 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150336
IP address blocks:        103.15.212.0/23 maxlen: 23
                          103.15.212.0/24 maxlen: 24
                          103.15.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl
                          rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
        Validity
            Not Before: Oct 11 02:36:16 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67088f1f-003c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:52:82:b8:1c:fb:a0:47:f1:37:4a:58:12:
                    2c:ca:3d:cd:a5:ac:15:8a:31:2c:1a:9e:e9:07:87:
                    cd:de:37:f8:cc:89:66:ff:6b:e9:53:87:c2:4c:f9:
                    26:14:e4:66:c7:37:5b:3f:56:40:2d:22:d0:16:2a:
                    3e:60:e2:c9:b9:64:d6:9c:ae:c8:86:39:52:da:28:
                    cc:09:1e:d8:59:08:01:18:57:5c:bd:55:b2:39:04:
                    86:6c:c9:06:ad:cb:90:30:d9:45:ca:ae:38:c3:29:
                    69:1d:82:80:74:04:ac:66:ac:cf:96:3c:f5:d0:95:
                    69:a9:8f:76:28:ef:9e:76:af:d9:eb:c6:4b:be:ed:
                    bb:aa:e3:c7:c1:89:0f:d3:da:9b:82:5a:c1:ac:07:
                    c9:09:70:e0:bd:e2:41:92:ae:00:71:cc:aa:1d:18:
                    56:84:68:f9:75:d7:56:37:46:b9:43:2f:99:26:5f:
                    a4:a9:66:de:cb:a6:ed:dc:87:82:c3:1a:ed:97:a5:
                    c5:da:82:f2:f1:3a:1d:d1:51:b8:bd:c0:1d:62:d3:
                    2e:ea:45:45:32:be:2b:ba:25:9e:c9:5f:e4:44:5a:
                    d4:ca:c6:ad:f9:fa:f1:29:c4:86:56:ea:3a:5c:93:
                    f5:f9:43:0b:f8:67:8d:41:0b:1a:95:c9:88:47:0b:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B5:47:A9:76:BB:EC:2C:31:EE:1B:1A:A2:83:A5:D4:CA:3D:16:C0
            X509v3 Authority Key Identifier:
                keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/0B237586453311ED9A3F7844C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:a6:8d:5c:56:4c:02:34:bc:6e:f3:3c:cb:70:1b:a2:51:
         59:38:8e:e6:c7:ba:4e:db:1f:3d:3b:f2:f8:24:d9:9e:2e:3d:
         f0:12:95:26:e7:d8:3c:4e:d0:95:a6:24:a4:64:24:d5:0e:67:
         32:0d:cc:ba:15:1c:a9:aa:60:e7:fc:87:8c:ab:37:fc:6e:18:
         25:f5:1b:f5:81:2c:4f:91:f9:bd:5c:38:65:4e:da:0b:d4:28:
         77:39:91:e8:a4:20:fd:c9:59:c6:df:82:f4:b9:54:3d:c4:4b:
         a6:b0:bc:04:4c:0b:19:ba:91:5e:ea:13:ba:7f:87:8a:c5:c6:
         14:2c:6f:dd:96:b5:e5:5a:13:3d:ad:02:7d:a8:19:71:ef:1d:
         12:fb:43:db:4e:f9:02:33:07:b1:62:fc:00:91:56:a8:7f:47:
         34:98:68:f1:d3:80:de:aa:66:d9:7b:21:41:cd:77:20:41:d0:
         de:e7:2e:69:f1:c9:96:71:32:50:8f:20:b4:10:bb:36:3c:cb:
         6e:2f:45:fa:60:bb:a8:35:ea:ef:01:75:bc:4f:3b:af:ac:6f:
         68:e2:ee:b7:6c:20:52:86:1e:1c:e0:36:6b:ce:02:d1:59:7b:
         9e:b1:75:08:25:97:df:56:bd:a1:aa:26:90:c6:36:fa:b9:76:
         f4:62:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org