Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
File:                     DA6E4B50845A11EA928C8E1EC4F9AE02.roa (raw, json)
Hash identifier:          zgCKDUQwRFNSS9dG6AvSnJwfse8HzzbOw09zYQ2hf0k=
Subject key identifier:   B7:13:01:0E:18:98:91:69:69:4F:54:96:45:EA:CB:29:76:E4:40:BA
Certificate issuer:       /CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
Certificate serial:       0865
Authority key identifier: 7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
Signing time:             Thu 22 Jun 2023 21:52:24 +0000
ROA not before:           Thu 22 Jun 2023 21:52:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     23338
IP address blocks:        103.150.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl
                          rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91841D2/serialNumber=7EE71AD847E9D56810CD49E27785C6385CCCF96B
        Validity
            Not Before: Jun 22 21:52:24 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6494c298-d716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:a4:9a:a3:d2:f4:84:3e:7f:65:d3:a2:ea:
                    b2:27:f7:74:f2:6b:d0:fe:32:30:81:a9:e5:7f:7b:
                    19:b4:62:e4:a5:9f:ff:c7:fa:7b:8f:f9:db:9f:a2:
                    25:e0:5d:dc:bf:8a:48:29:1f:31:61:2f:6d:e8:1d:
                    2c:1c:f6:94:77:a0:91:23:4d:58:d0:76:c6:f8:21:
                    e2:15:21:ff:a0:66:be:17:14:62:92:1e:08:67:0f:
                    6f:82:4c:11:91:2f:63:6f:e8:09:f2:f8:71:5d:5d:
                    61:a8:99:77:10:1a:87:bc:a8:27:fa:a3:43:4d:1a:
                    ac:50:fc:17:44:f9:2f:ff:83:f3:20:1e:17:80:b3:
                    f0:ba:e5:e3:8e:3e:08:32:83:56:40:dd:e5:64:b6:
                    9b:5a:ea:7d:8f:13:a8:c5:f5:6c:d2:57:54:55:87:
                    3f:0c:85:05:bd:e0:8c:cc:aa:8f:42:2a:c8:d8:a6:
                    3d:40:08:d6:2a:f8:67:6a:15:85:de:02:fa:f7:48:
                    96:f9:de:95:2e:d5:f7:09:39:e0:8d:ec:39:2f:44:
                    f9:76:dd:1e:8f:a6:72:67:a2:27:45:1b:14:cb:af:
                    0b:7d:6c:c4:81:81:50:6a:57:73:23:c4:38:af:c2:
                    a8:ba:1a:2b:c1:92:0d:ee:04:d6:ca:02:bf:72:52:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:01:0E:18:98:91:69:69:4F:54:96:45:EA:CB:29:76:E4:40:BA
            X509v3 Authority Key Identifier:
                keyid:7E:E7:1A:D8:47:E9:D5:68:10:CD:49:E2:77:85:C6:38:5C:CC:F9:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/fuca2Efp1WgQzUnid4XGOFzM-Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuca2Efp1WgQzUnid4XGOFzM-Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91841D2/F7223FB4845411EA8D6E350EC4F9AE02/DA6E4B50845A11EA928C8E1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:fa:fc:17:c9:44:06:a7:68:39:db:44:57:04:2e:93:39:b8:
         62:92:7d:41:fd:be:a0:89:04:6e:52:6f:bf:3a:de:85:45:b1:
         69:4f:a2:1b:c5:48:be:99:93:80:c0:de:a0:83:b0:5e:0e:4a:
         3c:06:96:29:93:9b:ba:63:b1:0b:b8:0c:95:86:eb:f9:99:ad:
         47:d6:29:64:02:39:34:e5:a8:b3:4a:f1:d3:f2:dd:eb:06:f6:
         33:5f:a7:cc:45:b5:be:54:50:6e:bf:7a:03:59:03:b9:84:a8:
         15:6b:2c:1b:07:8d:59:00:a6:e2:a5:e8:f5:9d:f5:14:db:74:
         58:e7:84:0f:95:8e:d1:f4:0f:c5:66:64:1c:8b:4c:fd:9e:f2:
         0d:a0:1a:ce:4c:a3:8e:ae:dd:b0:9e:f3:41:38:e7:54:f7:c4:
         c6:ae:93:fe:a6:60:84:d1:77:f6:97:0c:7c:a3:eb:36:d6:f2:
         38:63:fd:56:1d:12:9b:10:98:8e:c0:9e:36:56:b5:3f:48:6d:
         d7:ac:3b:d8:d8:db:d7:47:67:f0:4a:d0:82:80:49:cf:ad:02:
         55:fa:88:bf:5b:fc:b3:2f:3b:ab:be:bf:a1:07:90:8e:8e:04:
         d2:2a:7e:7e:69:02:d0:be:07:3f:e1:6a:af:61:04:2c:33:12:
         4a:44:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:27:56 2024 by rpki-client on console-ams.rpki-client.org