Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa
File:                     275694947E2111EABA287C6DC4F9AE02.roa (raw, json)
Hash identifier:          7d4ZQMpLwZNv6c2aTJKagStC5pu82EAlUBC22iAZFbM=
Subject key identifier:   11:B9:38:EF:AC:FD:5F:46:21:79:04:57:3F:82:CC:66:4A:F2:71:3B
Certificate issuer:       /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial:       0921
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa
Signing time:             Sun 02 Jun 2024 21:47:06 +0000
ROA not before:           Sun 02 Jun 2024 21:47:06 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     136902
IP address blocks:        103.150.52.0/24 maxlen: 24
                          103.150.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
                          rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337 (0x921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
        Validity
            Not Before: Jun  2 21:47:06 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665ce859-c3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:3c:0e:1d:5a:7c:6d:6a:e0:aa:a8:d4:37:
                    2b:5a:c9:bd:cc:b0:e1:7a:8c:df:63:88:ee:f2:f0:
                    8d:cd:90:4d:af:df:a6:ec:6e:50:be:20:3a:14:49:
                    b2:85:15:94:f2:4e:e6:5f:84:8e:71:b5:ed:1f:d9:
                    5b:76:0d:e5:d7:9c:69:8b:9c:bd:7e:e9:95:73:d4:
                    3a:04:06:ef:3d:f4:f5:26:82:43:6a:a2:5d:8b:66:
                    23:10:1f:73:c2:ea:6c:90:57:a0:f5:1f:de:9f:f8:
                    74:b1:bf:cb:1f:6c:66:95:08:5d:a9:74:b5:ae:0e:
                    37:9d:ff:4e:2e:c2:1c:66:e6:ad:d1:96:25:60:3e:
                    79:6e:1c:c4:7e:4f:d4:01:91:cb:3a:0e:b2:a8:6d:
                    42:d4:4b:b4:8d:a7:ad:e5:b1:ac:0e:b4:03:86:89:
                    14:c1:c3:88:2a:bb:72:eb:c1:e1:45:00:8a:ff:13:
                    56:56:1e:71:24:5f:99:12:95:e6:c5:92:3f:a3:fd:
                    86:0c:89:6c:aa:6e:5c:ad:f9:e3:d8:6f:61:dd:05:
                    34:11:fc:d2:cf:86:44:6d:ee:2d:e3:5a:74:1b:73:
                    b8:60:ad:4f:99:eb:64:dd:d0:98:c8:f3:fa:c3:36:
                    04:6b:95:72:64:c5:c6:0c:39:02:9a:c5:22:b3:05:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B9:38:EF:AC:FD:5F:46:21:79:04:57:3F:82:CC:66:4A:F2:71:3B
            X509v3 Authority Key Identifier:
                keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/275694947E2111EABA287C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:33:8c:ea:9f:91:6f:c5:1f:1d:64:b2:ce:ae:9d:7b:37:
         4c:ab:50:91:9d:7e:5e:25:e2:7d:1d:94:aa:e3:6f:19:7c:0f:
         ba:76:05:57:52:6b:59:a9:89:85:ef:47:6e:9c:be:8f:d1:f8:
         4a:83:8f:d0:1f:cd:78:16:e5:ca:26:f8:e7:88:52:9c:c3:32:
         15:fa:44:51:2a:e9:9d:bf:20:e8:ae:10:d6:f3:90:37:d0:6e:
         b7:11:a8:9e:93:f0:aa:1e:43:ba:05:03:d2:a4:a3:78:40:01:
         b6:76:6e:42:69:20:f2:aa:2c:41:99:77:76:87:fd:85:5e:e1:
         9a:51:e3:15:28:38:86:8d:fa:0b:58:6c:87:22:80:8f:e1:43:
         1a:c6:00:25:06:95:ca:7f:1d:8a:e0:d5:7b:58:01:80:9c:1e:
         33:20:f6:bf:82:70:17:a1:a1:34:ea:7d:6b:d5:f4:8d:7a:07:
         be:43:83:65:41:8a:c8:a0:d4:42:79:1e:7a:dc:fc:76:2e:ef:
         96:f2:fa:33:88:99:24:63:d4:44:24:b2:f9:dd:30:fd:fd:e9:
         02:b7:db:a4:36:a3:fd:dc:48:e1:ca:6f:fc:80:0c:5e:26:57:
         cf:e3:01:dd:17:e9:1b:57:cf:91:44:24:e4:2d:35:38:a0:b1:
         33:2c:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org