Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
File:                     C98E616802E511EF8ED1355CC4F9AE02.roa (raw, json)
Hash identifier:          g/vYt2sJquMykKKd8bZeSSOgmSqzVFIJK4b4vgQp8Zs=
Subject key identifier:   A0:2D:28:40:E0:51:D0:D0:A4:80:34:DF:2E:63:22:BB:41:7A:26:E7
Certificate issuer:       /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial:       0940
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
Signing time:             Thu 02 May 2024 21:39:55 +0000
ROA not before:           Thu 02 May 2024 21:39:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152479
IP address blocks:        103.150.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
                          rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2368 (0x940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
        Validity
            Not Before: May  2 21:39:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6634082a-048f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2a:af:b5:b8:35:13:96:f0:d2:37:df:a9:3c:
                    25:b3:f1:52:e4:43:fb:f8:86:5b:63:ac:ba:b6:0a:
                    74:5d:0a:71:e4:be:8c:4f:3a:3a:e8:9d:62:32:88:
                    d5:a9:51:68:83:43:c2:2f:fe:73:22:e6:32:c9:2c:
                    8a:3b:fa:93:b7:97:5a:b7:62:c2:09:57:65:54:59:
                    89:78:7a:57:dd:0e:39:3c:f4:eb:d3:58:aa:c9:13:
                    f3:f7:47:d2:ad:01:0a:a6:dd:f6:45:f4:37:e3:50:
                    77:ab:51:14:48:6d:27:c8:a2:48:74:f7:d2:3f:1d:
                    30:2b:c3:a9:26:80:94:21:f7:00:f8:67:b4:d4:8d:
                    c4:af:52:7f:fb:20:0f:4e:72:b7:75:12:fe:91:7b:
                    a2:52:ae:b2:da:45:94:39:65:b8:3d:d3:c2:cb:84:
                    89:6f:4e:ac:c2:a8:e4:0a:72:1c:a9:c6:5c:a7:e5:
                    b0:56:7e:38:2c:17:d6:08:24:98:d9:19:22:11:a3:
                    a1:82:55:1d:40:77:f3:40:9a:49:7e:4c:23:cf:12:
                    30:7b:e3:41:9f:6e:71:2e:c5:11:b7:ad:9c:47:d9:
                    d0:bc:74:5c:fa:8c:35:4d:1d:2a:ec:07:34:f2:7a:
                    a0:15:86:6c:ed:85:88:d1:87:8a:7c:52:10:35:49:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2D:28:40:E0:51:D0:D0:A4:80:34:DF:2E:63:22:BB:41:7A:26:E7
            X509v3 Authority Key Identifier:
                keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:dc:78:50:74:26:ef:5a:89:cb:b9:7d:7b:a0:b1:e7:d8:ce:
         71:69:ad:05:99:4e:69:12:b6:de:a8:7c:63:7e:70:d7:c9:06:
         22:6e:66:0a:49:3e:1e:4e:45:8f:dc:df:b0:ae:c2:a0:94:4c:
         03:96:7a:c6:a4:81:6b:66:24:58:83:b2:d2:14:3c:6b:dc:44:
         cb:98:05:9e:e1:ca:88:b1:a2:9f:d2:75:74:2d:e0:3a:16:12:
         35:63:b9:c0:41:c6:45:d5:7e:98:54:30:93:10:f1:36:fb:cd:
         fe:be:e7:0b:4d:49:31:c6:b0:f1:6e:12:c7:e1:72:16:0c:f2:
         8d:c7:75:4e:09:50:ca:69:04:18:d7:f9:f8:5f:a8:b3:bf:c2:
         36:bb:f6:8a:6d:e5:77:b2:75:47:4b:d0:a5:e2:f6:12:51:84:
         6e:9f:f8:62:b4:f8:95:27:38:fa:d3:ac:91:b6:87:57:11:a8:
         a4:15:f9:29:79:08:85:26:18:ab:fe:7e:ed:00:7d:18:4e:47:
         ac:cc:79:44:78:c5:dd:95:17:db:0f:c9:d1:1f:aa:58:76:6b:
         c2:c9:be:1c:d1:ab:83:e5:0b:b4:ae:e1:bf:59:bc:7a:ea:a7:
         5f:07:11:e6:a4:84:12:d2:8f:e0:d0:da:18:ad:b3:e2:d5:2b:
         f8:84:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org