Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
File:                     1F820766D66F11EAB2766134C4F9AE02.roa (raw, json)
Hash identifier:          h0dn50b7QuXZQH9z/TlYGwvvwAVteTyA+MUQUvW3Ikc=
Subject key identifier:   F2:1B:2E:FD:38:BB:E4:91:69:D0:7C:7E:F6:2E:93:56:70:1B:5F:21
Certificate issuer:       /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial:       078F
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
Signing time:             Sat 24 Aug 2024 21:29:54 +0000
ROA not before:           Sat 24 Aug 2024 21:29:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     58456
IP address blocks:        103.5.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
                          rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
        Validity
            Not Before: Aug 24 21:29:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66ca50d1-e3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:97:4f:66:eb:59:ee:bd:f3:7f:eb:1a:87:
                    4e:a0:99:65:d3:f6:2a:61:f0:a8:0b:3c:19:fd:ed:
                    13:81:cb:aa:87:9f:3c:32:b2:a0:75:01:31:51:fc:
                    f7:bc:8d:bf:e9:12:29:af:a3:cd:a1:1e:8f:87:94:
                    88:6a:dc:95:1b:e9:e6:76:cc:df:af:98:34:13:56:
                    3c:91:ae:5d:95:68:02:e4:36:f4:16:7c:22:2a:9f:
                    96:7b:74:31:70:27:42:52:a9:bb:6c:6b:c0:9b:52:
                    0a:d2:35:35:1c:04:0f:c5:81:4c:b9:c5:3d:06:4c:
                    0c:84:ab:9e:93:0e:7b:7f:fb:2a:c8:e0:93:f6:fa:
                    f4:a9:c7:54:af:90:78:0a:e9:79:3d:0d:ce:3f:56:
                    37:52:86:93:8b:7a:10:16:f5:5a:f3:18:87:85:b5:
                    a5:52:7f:aa:e5:66:d6:48:08:74:a0:48:6a:95:29:
                    20:41:d4:63:86:ad:cc:dd:64:ab:98:9f:49:b0:4b:
                    32:8a:4d:ba:fd:1c:cc:fc:b4:6d:8a:1d:e8:64:fe:
                    95:7f:38:7b:df:91:fe:13:0d:44:a2:17:76:eb:4c:
                    57:fa:37:44:ad:ff:ee:a0:76:45:b9:17:66:52:fe:
                    28:a5:21:b9:ea:65:31:40:28:31:d1:d0:e6:72:51:
                    66:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:2E:FD:38:BB:E4:91:69:D0:7C:7E:F6:2E:93:56:70:1B:5F:21
            X509v3 Authority Key Identifier:
                keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:6f:9d:93:5c:b7:74:f2:34:a2:5d:b4:a4:d7:0d:dd:0d:
         01:69:21:b6:f6:1f:63:d7:9e:7b:6d:1c:dd:f0:ac:23:58:ee:
         7c:93:d2:27:b8:07:03:6f:17:6a:13:12:31:66:18:10:85:85:
         02:45:40:3e:1b:21:34:b0:3e:b6:29:2c:98:0f:e1:44:c3:55:
         48:b1:ff:e3:04:b1:31:2f:a2:a8:a7:cf:c6:50:f2:f1:da:f3:
         9e:46:9a:2e:48:b1:38:cb:41:ea:78:1a:3c:f8:30:6b:07:bb:
         1b:eb:04:a3:d1:e1:2a:29:8d:80:7b:ea:66:0c:64:bf:e1:e6:
         b6:9a:54:a5:6d:82:e8:96:11:e5:bc:ae:a4:38:87:73:c0:43:
         33:7f:33:c6:dd:5f:05:6d:0b:a6:71:d5:2d:dd:f0:a4:fb:f6:
         aa:37:2e:76:76:dd:73:7b:61:43:18:c9:af:de:9a:12:0c:d5:
         b0:c4:14:e5:b0:a4:83:3d:99:cc:b1:cf:ca:8d:30:9e:fe:12:
         2b:2a:04:63:93:85:8c:bc:d3:fd:93:15:21:e1:b8:4a:bf:36:
         7d:1c:54:65:7b:c5:4b:2a:f0:44:e2:d8:d0:c4:4e:1b:83:da:
         23:15:9c:3a:06:bc:e7:45:34:ba:ec:62:28:eb:24:12:c4:b7:
         67:90:d3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org