Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa
File:                     458D9132027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier:          yyOa9qz2Dgiu3gqe2eGxvnA2Ngdvk1mfPpR1RzH8q1M=
Subject key identifier:   18:11:72:2C:6A:95:A3:94:D9:56:00:D9:5B:02:5E:F1:01:C5:97:8A
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0927
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa
Signing time:             Sat 22 Jun 2024 21:13:44 +0000
ROA not before:           Sat 22 Jun 2024 21:13:44 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137443
IP address blocks:        103.150.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:55:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 22 21:13:44 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66773e88-d9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:e7:9f:df:71:2c:c8:ae:ac:63:b4:89:b2:
                    2a:37:d1:b4:d7:2d:bf:99:73:1e:37:32:f8:35:50:
                    00:a5:7c:e1:f1:06:d3:7d:0c:30:4e:0d:85:1e:e7:
                    eb:6c:1d:54:a6:3c:2b:4c:bb:cf:de:07:ae:d3:11:
                    97:a9:dd:ed:54:b5:ec:96:f9:7b:23:59:ce:a8:66:
                    33:68:a1:28:68:3c:47:ae:22:0b:53:82:89:39:91:
                    c2:f0:a8:b4:e2:57:c9:8c:b7:98:68:ce:69:ae:70:
                    fe:eb:68:5b:6b:e6:9e:55:7f:44:6a:ff:bd:90:bd:
                    cd:c2:32:67:58:99:c9:b7:36:7b:64:e9:57:d8:92:
                    d4:ee:f6:fb:4e:79:27:44:72:a4:01:df:68:82:f8:
                    0f:28:de:84:b9:95:a5:8a:28:fe:bd:c4:eb:b1:d9:
                    9b:13:4c:18:19:3d:69:e1:c4:86:7f:5a:f7:65:1e:
                    aa:d6:ab:54:74:e1:e7:40:9b:f8:fa:b5:96:3a:6b:
                    c0:e7:f5:aa:07:f8:06:9b:eb:a9:8f:7c:34:45:3a:
                    1b:c2:fc:d8:d6:3f:5a:6e:38:f4:de:7f:1c:bd:3b:
                    95:69:43:1c:2b:c7:bd:37:4e:3b:10:ea:b3:c7:00:
                    5b:fb:ba:d3:2f:73:01:48:2d:40:f0:3a:5a:cb:22:
                    38:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:72:2C:6A:95:A3:94:D9:56:00:D9:5B:02:5E:F1:01:C5:97:8A
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/458D9132027011EB98FEC44BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:5d:b9:23:2b:43:10:8f:d3:f8:fb:f1:c9:b5:6c:d2:ee:7f:
         8a:09:8c:c2:ca:0f:ea:7b:bc:ac:b8:2b:7b:18:94:c4:b7:8f:
         cd:ae:f7:31:17:61:80:01:26:c3:61:21:76:fb:30:43:85:db:
         97:f1:76:d5:cc:e3:ce:ad:77:32:7a:c5:0c:10:e1:10:6a:ca:
         fb:aa:ab:fc:93:bf:c3:9a:20:61:2b:4c:f2:8d:6c:52:87:9c:
         6d:7c:76:27:63:c7:ca:40:84:ac:1c:a9:ba:62:68:b2:c9:fb:
         f0:e7:d4:9b:67:3e:a2:25:9b:db:1e:05:a8:99:f1:f4:75:c2:
         35:f9:e1:61:f8:43:db:43:79:bd:fa:30:64:ce:51:5a:fe:ce:
         3b:6b:9a:95:d6:ef:f0:b8:bc:92:c1:6e:cd:b5:48:94:30:8a:
         f8:6c:6a:6e:60:87:27:b9:25:b9:4e:9b:b3:06:8c:b4:2f:0f:
         b8:83:2d:75:e2:60:09:8f:27:c3:81:ee:be:37:c3:58:bb:bc:
         8c:c7:d2:97:92:8a:d9:e8:af:3a:9d:9a:11:ad:ff:4d:95:1c:
         65:23:f6:96:8e:ff:b4:49:58:05:22:2d:68:67:15:82:9f:f1:
         56:a8:19:e2:28:38:55:37:f9:f7:53:c8:fd:36:e6:5f:55:28:
         92:92:eb:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQxRDIxMTAvBgNVBAUTKDdFRTcxQUQ4NDdFOUQ1NjgxMENENDlFMjc3ODVDNjM4
NUNDQ0Y5NkIwHhcNMjQwNjIyMjExMzQ0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc3M2U4OC1kOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwjnn99xLMiurGO0ibIqN9G01y2/mXMeNzL4NVAApXzh8QbTfQwwTg2FHufr
bB1UpjwrTLvP3geu0xGXqd3tVLXslvl7I1nOqGYzaKEoaDxHriILU4KJOZHC8Ki0
4lfJjLeYaM5prnD+62hba+aeVX9Eav+9kL3NwjJnWJnJtzZ7ZOlX2JLU7vb7Tnkn
RHKkAd9ogvgPKN6EuZWliij+vcTrsdmbE0wYGT1p4cSGf1r3ZR6q1qtUdOHnQJv4
+rWWOmvA5/WqB/gGm+upj3w0RTobwvzY1j9abjj03n8cvTuVaUMcK8e9N047EOqz
xwBb+7rTL3MBSC1A8DpayyI4jwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBgRcixq
laOU2VYA2VsCXvEBxZeKMB8GA1UdIwQYMBaAFH7nGthH6dVoEM1J4neFxjhczPlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDFEMi9GNzIyM0ZCNDg0
NTQxMUVBOEQ2RTM1MEVDNEY5QUUwMi9mdWNhMkVmcDFXZ1F6VW5pZDRYR09Gek0t
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1Y2EyRWZwMVdnUXpVbmlkNFhHT0Z6TS1Xcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQxRDIvRjcyMjNGQjQ4NDU0MTFFQThENkUzNTBFQzRGOUFFMDIvNDU4RDkxMzIw
MjcwMTFFQjk4RkVDNDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlrUwDQYJKoZIhvcNAQELBQADggEBAEtduSMrQxCP0/j7
8cm1bNLuf4oJjMLKD+p7vKy4K3sYlMS3j82u9zEXYYABJsNhIXb7MEOF25fxdtXM
486tdzJ6xQwQ4RBqyvuqq/yTv8OaIGErTPKNbFKHnG18didjx8pAhKwcqbpiaLLJ
+/Dn1JtnPqIlm9seBaiZ8fR1wjX54WH4Q9tDeb36MGTOUVr+zjtrmpXW7/C4vJLB
bs21SJQwivhsam5ghye5JblOm7MGjLQvD7iDLXXiYAmPJ8OB7r43w1i7vIzH0peS
itnorzqdmhGt/02VHGUj9paO/7RJWAUiLWhnFYKf8VaoGeIoOFU3+fdTyP025l9V
KJKS688=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org