Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
File:                     E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa (raw, json)
Hash identifier:          SemjJMdkcS92H6jZ3SjICgKMsBHDKShym9p/JCEc9ZI=
Subject key identifier:   65:D9:3A:99:F0:A1:E2:74:5A:23:90:8B:7E:D7:54:53:3A:FF:1D:EC
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       014E
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
Signing time:             Tue 27 Feb 2024 11:18:05 +0000
ROA not before:           Tue 27 Feb 2024 11:18:05 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150803
IP address blocks:        202.179.153.0/24 maxlen: 24
                          202.179.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
        Validity
            Not Before: Feb 27 11:18:05 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65ddc4ed-9881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:08:8a:36:e5:44:e3:41:e3:c3:af:13:a4:
                    15:d8:b8:b4:42:11:d8:51:ed:29:5b:7b:a9:2d:f9:
                    48:17:b8:05:27:a9:a9:ae:c7:b3:a0:2f:bc:9e:e2:
                    5c:d3:3b:26:cb:45:8e:88:c6:bd:28:ce:99:aa:bd:
                    56:cb:27:33:8b:23:4b:2a:51:bd:cb:0b:ef:8e:30:
                    5a:b6:2b:c7:dc:78:02:91:47:ab:ab:55:eb:4b:0e:
                    bf:8e:32:71:85:95:ea:e7:86:4a:da:5f:21:b0:08:
                    5d:a4:99:d2:6d:6e:71:2d:02:e6:65:aa:70:f0:e8:
                    40:8b:fc:3b:f6:5a:75:29:27:c7:0b:bd:91:86:b0:
                    1f:4e:96:09:83:be:b2:d6:fa:5c:0d:c3:4b:11:25:
                    41:6b:a5:68:3f:7f:ac:71:98:63:2b:89:b1:a6:f0:
                    d1:0e:cd:e5:5f:38:df:ab:b2:d9:56:cf:9c:54:12:
                    90:b1:fc:0e:e3:f1:98:a0:ad:b2:5e:09:5b:36:86:
                    6d:b3:f6:7e:0a:45:00:57:84:fd:b2:dd:9c:d1:36:
                    e3:e3:0d:4f:19:60:17:da:27:13:a7:18:d1:14:62:
                    57:65:36:5f:5f:47:ce:0f:ce:20:54:4f:3f:ad:e2:
                    a6:92:73:7f:54:44:87:35:d7:23:4f:39:0c:fe:f5:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D9:3A:99:F0:A1:E2:74:5A:23:90:8B:7E:D7:54:53:3A:FF:1D:EC
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/E0B81ED0D56111EE9E1D7E5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.153.0-202.179.154.255

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:c4:bb:e8:5d:6e:e1:4d:2f:41:d6:a1:c0:43:60:d5:3b:
         7a:3c:9e:04:6c:34:71:08:28:9c:23:39:38:37:b2:b8:4a:27:
         1a:76:81:71:06:f2:02:a8:81:0f:aa:a5:a2:5f:25:b3:16:d6:
         59:c0:2e:39:d4:4f:12:72:6e:84:35:09:3f:0f:4d:d2:99:47:
         51:6d:1d:5f:6a:65:6e:d0:89:bd:d5:a6:6f:3d:8b:80:26:f0:
         19:b8:9d:b3:65:90:49:2d:f3:4b:58:c1:95:35:78:60:0f:fa:
         1b:9c:01:90:b8:15:d8:ef:27:34:59:46:3d:a3:a2:56:61:f7:
         66:be:b7:66:b3:9d:00:4b:68:d9:4f:ee:8d:b8:6c:d6:df:70:
         42:f1:c1:0f:a3:7d:d7:78:40:10:77:1e:52:6c:4b:58:37:d3:
         6d:57:48:6f:b7:3b:3d:2b:12:76:ad:53:67:7b:fe:0f:ce:ee:
         cd:7d:04:57:d9:7f:7f:1c:2e:3f:87:55:29:93:d1:2a:41:93:
         c6:3c:75:ad:88:e5:c8:db:95:29:93:0c:81:80:b0:c1:db:20:
         14:11:f7:5e:12:0d:50:c8:36:34:2d:7c:34:2d:2e:9e:6a:46:
         c8:94:c4:ae:4d:2e:5c:c4:d7:35:71:89:e0:16:18:c9:4a:6e:
         0d:eb:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:03:42 2024 by rpki-client on console-fra.rpki-client.org