Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa
File:                     D1E5207E623E11EEB730FC4FC4F9AE02.roa (raw, json)
Hash identifier:          6e1fT52wxl//Nm17I3C3FvnnbEoqH7Q5JnYOOWEkMTM=
Subject key identifier:   84:E9:FE:55:F3:6A:61:D6:B3:DB:7C:8C:2F:CF:CE:2B:B1:45:22:2C
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       089C
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa
Signing time:             Tue 03 Oct 2023 22:47:24 +0000
ROA not before:           Tue 03 Oct 2023 22:47:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     149042
IP address blocks:        103.150.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Oct  3 22:47:24 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=651c99fc-d17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:a3:b5:26:2d:0e:44:49:ed:30:9e:b0:56:
                    6f:d0:2c:1d:98:e2:33:a6:83:0c:07:23:3a:ad:96:
                    d7:57:96:3b:6c:31:1f:2e:a7:fd:1a:2c:cb:93:19:
                    7f:32:bb:d1:e8:89:09:e2:b0:10:95:4f:77:6b:bc:
                    33:97:d8:59:21:be:30:75:fd:66:07:ea:bd:ad:7d:
                    69:ea:92:42:db:82:5a:c2:cd:e5:3e:80:25:bf:40:
                    18:47:b6:0b:7b:df:79:70:9b:51:a4:c7:9c:30:d7:
                    0e:a2:af:73:d7:50:3a:a3:ae:cf:94:e0:d6:f7:f3:
                    59:b7:ba:ec:03:78:4f:d8:41:09:8a:df:f6:4b:1c:
                    57:49:e1:34:6a:c3:05:04:0a:76:d3:bf:f2:47:ee:
                    77:3c:42:61:c3:0c:97:77:7f:fb:9e:72:20:22:f2:
                    9b:83:d1:d2:a5:10:a1:16:29:7d:a7:27:88:25:af:
                    6b:bc:8d:15:55:4c:43:73:82:a5:4c:73:9a:93:47:
                    95:42:1c:75:b4:4a:56:03:2d:b6:96:ef:71:d9:e6:
                    8d:b0:26:47:d7:c1:16:16:c7:7a:7f:83:ba:ca:db:
                    50:af:ea:10:c6:12:93:29:1d:8a:cd:a2:9c:1e:c4:
                    d3:c2:9c:a6:c6:dd:cb:f3:69:24:86:6d:48:d7:1e:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:FE:55:F3:6A:61:D6:B3:DB:7C:8C:2F:CF:CE:2B:B1:45:22:2C
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/D1E5207E623E11EEB730FC4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:eb:64:d6:8d:1d:56:d8:a1:8e:6f:2c:af:6e:14:27:29:bf:
         b0:a1:27:74:bf:1e:79:db:47:29:9b:69:d2:0b:51:fa:31:4e:
         4e:3f:fc:91:73:84:ab:c2:a2:7e:93:9c:df:b3:4f:89:3a:92:
         54:f8:a4:fb:53:7e:29:2a:f9:0e:7e:52:47:e8:e9:60:53:bc:
         b2:77:eb:3e:02:a3:1f:fa:61:81:d0:89:a8:f7:9e:9a:81:18:
         85:d9:91:e2:44:4f:21:ad:3a:34:e8:c3:70:d7:b3:34:3f:c3:
         fa:38:cc:0a:75:38:7a:3d:91:69:aa:6f:ac:59:92:db:5e:6a:
         6c:43:ec:50:a6:7e:8a:7e:54:68:0e:81:4f:d0:ec:eb:74:e8:
         50:4b:1a:df:f2:e3:0f:55:5c:4d:c3:79:3a:34:0b:66:82:2d:
         54:e2:03:69:45:4b:5e:0b:42:5d:39:7b:92:f2:c3:ec:0a:51:
         40:00:c4:30:19:b1:c0:9e:69:53:6b:de:9c:91:9a:8a:af:4f:
         b0:fc:d8:86:fc:18:1f:9c:10:74:a9:e2:af:4b:81:89:4a:de:
         e3:7e:0f:87:a4:78:9c:7f:73:5c:21:b2:4b:70:b2:60:9e:15:
         8d:87:5d:18:42:76:6e:c6:dc:58:22:41:05:9d:25:a8:bf:23:
         ec:27:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org