Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
File:                     9837349AB41E11ECAFDA1F1AC4F9AE02.roa (raw, json)
Hash identifier:          7Oc4l/ja0E02zMqJLQgSwY4btjYC0BXYK3WYalX2Llg=
Subject key identifier:   6F:BE:5B:13:0F:57:87:D3:24:4B:7E:10:0E:9A:00:EB:81:91:55:15
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       02A8
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
Signing time:             Wed 15 May 2024 04:08:48 +0000
ROA not before:           Wed 15 May 2024 04:08:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     137995
IP address blocks:        103.150.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: May 15 04:08:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66443550-dd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:f6:1b:46:b1:87:50:7c:48:71:3c:00:f8:
                    c8:9d:20:59:b4:9e:e1:cc:c1:83:fb:da:01:d0:d9:
                    92:a3:8d:24:bc:4d:62:44:e1:8d:68:3c:c6:aa:63:
                    46:2d:14:9f:1e:be:23:d8:02:04:7a:2b:73:c6:fb:
                    e9:7f:84:8b:ad:57:d7:f3:36:86:c8:d3:c1:c5:8a:
                    2f:de:39:66:48:66:ae:61:6e:f1:5f:6f:8a:9f:6d:
                    85:bd:20:ed:89:a3:27:a6:a2:15:65:3f:39:e8:0b:
                    4f:6c:43:7b:8e:0c:0a:eb:6d:b8:9a:b3:91:a9:15:
                    aa:bf:bd:d2:74:5c:52:4a:f4:27:22:e1:ba:62:46:
                    2e:f3:b0:d8:31:df:2f:44:41:21:b8:05:62:49:fe:
                    97:4d:15:20:48:1b:89:bb:85:bd:92:21:54:70:67:
                    2b:49:e6:8d:ac:52:63:1a:41:d5:b6:fd:a9:ed:fd:
                    1d:fd:25:d4:1f:47:cf:74:ad:82:d7:f5:ff:5a:f2:
                    dc:05:cb:71:33:cc:fa:09:de:19:24:8d:27:ba:1a:
                    ce:59:47:36:5a:55:79:34:0b:c6:98:ff:91:84:5b:
                    9a:91:c1:ce:d0:3e:79:ea:eb:8d:8e:52:67:80:15:
                    a8:08:17:9d:54:ba:45:82:c4:0e:52:27:1a:03:12:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:5B:13:0F:57:87:D3:24:4B:7E:10:0E:9A:00:EB:81:91:55:15
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/9837349AB41E11ECAFDA1F1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:03:bb:33:42:21:db:86:3d:31:7f:47:5c:5b:a7:7d:2c:
         5c:76:6b:c4:5b:17:4f:d8:4e:0e:82:fa:b4:88:87:6e:86:76:
         1c:4d:9c:ff:85:59:d7:95:b3:79:a7:59:b8:bd:21:ac:8c:37:
         9f:f4:6a:8b:e5:a3:cc:26:f5:98:f2:98:a5:47:4d:e3:3a:da:
         81:22:36:ed:90:18:19:1a:a2:14:27:33:26:0a:45:a6:8d:68:
         04:2e:02:2e:7a:55:d4:d2:16:a2:b2:20:20:e6:34:a3:b4:c6:
         e7:8e:ff:5a:f6:cb:7a:0f:21:27:f2:52:af:4a:af:47:55:81:
         64:16:eb:e5:4d:e5:46:d3:ce:2c:7c:40:bc:b4:8d:19:00:a2:
         a7:f7:3b:a8:26:ab:10:85:72:88:b0:ba:72:dd:3d:17:b5:67:
         2b:f5:ae:d5:fa:62:dd:bc:a8:59:df:09:a6:ec:9f:95:1d:1f:
         a8:0d:9f:64:43:4c:67:6f:6f:1d:d6:e9:d3:e7:c6:f9:32:bb:
         49:e4:fe:ec:23:f7:47:34:d4:2a:0b:88:7a:24:db:38:33:bb:
         0f:0c:28:7e:09:96:0d:b4:76:3f:2c:11:22:cb:cf:10:7a:e8:
         8b:f1:01:37:0b:c2:13:38:0d:b3:c8:0e:45:df:9d:a2:67:ec:
         e2:fe:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:43 2024 by rpki-client on console-fra.rpki-client.org