Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/96CBB6F021DD11EBBEEF997DC4F9AE02.roa
File:                     96CBB6F021DD11EBBEEF997DC4F9AE02.roa (raw, json)
Hash identifier:          H+5nWgNCVmwRvz71gZoRnMWgnFyAQ3RypJPob0rRVdY=
Subject key identifier:   CF:D0:B2:71:9D:AD:DD:12:2C:B7:94:CF:57:72:73:B7:84:5C:A6:16
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0860
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/96CBB6F021DD11EBBEEF997DC4F9AE02.roa
Signing time:             Thu 22 Jun 2023 21:52:19 +0000
ROA not before:           Thu 22 Jun 2023 21:52:19 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     135386
IP address blocks:        103.150.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 21:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 22 21:52:19 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6494c292-8da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:ad:3a:89:38:4e:5f:9f:73:a1:44:a6:f1:
                    25:4f:74:cf:18:09:5f:06:e1:81:a6:b2:93:f7:c9:
                    82:10:43:e9:4c:6f:0e:01:4c:c0:8e:8b:e6:26:3c:
                    39:99:cb:99:7a:8e:2e:81:72:9f:f9:f8:f3:3b:2c:
                    7f:54:e0:73:61:6c:89:30:a6:11:e2:5b:70:aa:2d:
                    f3:33:dd:17:22:8c:60:2c:c2:45:81:88:2e:ce:a0:
                    f8:5a:cd:6c:8c:54:de:76:2c:f2:4e:f5:6a:97:27:
                    a4:88:1a:e7:ee:1b:e4:65:94:15:de:ad:d8:4a:18:
                    f5:5d:c6:8a:95:5d:95:34:86:2b:0a:af:d4:30:0d:
                    35:94:3f:86:b2:2c:d2:d2:da:14:93:34:68:ba:a4:
                    75:56:71:56:8f:52:9b:c7:cd:77:dd:36:98:44:7d:
                    3d:0d:18:66:5e:6c:4a:a4:c6:bf:5d:b7:95:8a:5a:
                    7d:02:35:e0:be:46:c9:56:e6:23:57:86:d5:db:03:
                    e4:b7:72:2e:f8:83:93:87:18:32:d3:be:a8:bc:cc:
                    c0:0f:f1:34:90:c3:6b:36:97:21:bc:89:0b:ca:33:
                    36:3f:92:82:6f:30:6e:18:ff:8e:ab:ef:02:84:17:
                    df:9a:2b:71:3e:7b:57:d7:cf:83:99:64:69:a7:6e:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:B2:71:9D:AD:DD:12:2C:B7:94:CF:57:72:73:B7:84:5C:A6:16
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/96CBB6F021DD11EBBEEF997DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:40:3c:c5:fb:58:9a:53:30:e3:ef:08:64:1a:ac:2e:c9:a2:
         cd:7b:6d:b8:7d:df:f9:7d:0a:d7:4e:17:67:3f:9f:2b:e1:39:
         52:19:3f:75:81:8d:b4:a1:44:d6:9e:46:24:5b:e9:e8:be:6e:
         e3:34:ae:a5:dc:e2:40:4a:d4:13:33:1b:49:c5:ae:d9:67:9d:
         f5:c8:ce:11:fd:f0:2e:ce:7a:36:4d:fb:b7:9b:78:ae:fb:c9:
         85:7b:44:40:ea:2f:8e:4f:5d:68:d7:95:93:c5:63:cb:d7:1e:
         b2:d5:27:82:03:df:6c:21:dc:b4:2d:42:31:fe:da:ea:17:d8:
         fe:3d:b2:bb:b9:f5:97:66:20:3d:d7:37:d6:d1:0d:66:b9:8e:
         1a:c2:fa:f1:95:af:a4:c7:a1:56:53:ad:2f:c7:bb:1c:2b:3b:
         d7:4d:5e:78:3a:ee:09:b4:c3:ca:ee:c1:fd:be:a4:32:d4:7c:
         b7:d3:57:3d:ba:18:e3:0a:10:97:7f:1b:1f:7a:d9:b1:3b:e1:
         86:d4:24:39:08:a9:29:35:44:1a:cf:9a:62:41:a7:6b:d0:57:
         d5:cc:6f:06:84:e6:39:26:0e:1a:a0:b7:77:03:26:3d:0a:9e:
         5a:12:f0:21:95:e0:4e:7a:5a:0e:24:10:80:a7:d8:4e:da:51:
         12:e7:72:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:10:14 2024 by rpki-client on console-ams.rpki-client.org