Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa
File:                     5B5A8050DDBC11EC8378E737C4F9AE02.roa (raw, json)
Hash identifier:          d4HdQqOcQnMoKX1uLg6xWYRlkht764D7eO356NA5rck=
Subject key identifier:   26:E7:01:FE:7E:53:64:E6:CB:7A:84:4A:79:2C:B7:BF:38:A5:48:2E
Certificate issuer:       /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial:       085B
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa
Signing time:             Thu 06 Apr 2023 21:58:58 +0000
ROA not before:           Thu 06 Apr 2023 21:58:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138471
IP address blocks:        103.150.65.0/24 maxlen: 24
                          2001:df3:5c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 20:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
        Validity
            Not Before: Apr  6 21:58:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642f40a2-a8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:ba:cd:a0:14:11:d2:8d:5a:ea:63:c0:7f:
                    02:8a:46:4a:59:8e:0a:bc:12:b0:a9:9b:d2:9a:c5:
                    d5:b5:1f:13:d2:fc:52:56:9f:91:2c:0a:71:13:d5:
                    c8:3d:89:9b:63:89:46:7a:9d:15:ac:d9:03:01:3e:
                    51:56:df:d8:c5:01:f2:20:fe:78:3a:81:d0:8d:6d:
                    64:2d:93:d4:61:11:5a:c8:0d:ea:3d:bc:01:75:b7:
                    56:c7:d5:f2:2e:53:a3:bd:cf:4f:e6:c9:66:30:a0:
                    47:4d:14:91:26:0f:07:aa:d3:6c:d9:09:f2:d5:08:
                    ba:f3:8b:46:9e:7d:fa:21:e0:e1:bc:11:99:a7:54:
                    89:52:a6:40:e5:46:a7:6c:3a:d8:4f:96:b2:87:e3:
                    dc:20:7e:27:1a:40:c3:fc:fa:a2:f3:0f:1a:5d:59:
                    1d:52:17:ff:32:84:07:40:ef:7a:ca:e0:57:9b:c4:
                    2c:1f:e5:9a:0f:38:75:b7:10:6c:03:fc:50:71:fd:
                    3b:93:8a:d9:96:e0:ae:cb:ef:f8:45:a7:c7:8c:c2:
                    6b:84:7d:89:a5:8e:f8:36:dd:65:15:24:5b:f4:35:
                    95:91:a8:d6:af:01:86:eb:9f:8f:44:ba:96:49:ae:
                    e2:6b:e7:b8:06:88:d1:f2:ad:d5:99:33:85:b7:68:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:01:FE:7E:53:64:E6:CB:7A:84:4A:79:2C:B7:BF:38:A5:48:2E
            X509v3 Authority Key Identifier:
                keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5B5A8050DDBC11EC8378E737C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.65.0/24
                IPv6:
                  2001:df3:5c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:8d:24:83:c1:13:93:3e:e8:a2:fd:19:d5:b9:37:8b:ef:
         99:a5:56:ea:56:6a:2d:34:4e:46:2f:dc:82:fd:ce:61:1f:d7:
         9b:54:65:6a:c5:5e:d3:ac:1d:94:7d:c8:2b:fc:74:41:a6:dd:
         ba:43:22:c2:94:f1:b2:6b:fd:d1:9f:ee:4c:29:61:c8:b4:a4:
         ff:72:2a:a8:3f:90:80:65:78:34:0b:30:c5:0f:ad:e1:af:94:
         1e:e0:47:22:33:60:58:c6:f8:e6:22:df:7e:b1:69:63:22:9b:
         8d:43:a8:f7:31:4b:82:e6:45:26:e2:f2:a8:0c:5f:4c:26:db:
         8f:ba:a0:e8:e5:80:00:33:04:26:ee:af:5c:b3:7c:ca:1a:a1:
         a8:d1:da:ad:63:86:35:03:65:16:32:50:f3:a0:e3:1f:55:6f:
         43:28:1d:13:63:a1:8a:42:f9:e4:68:d4:f4:aa:08:3f:65:80:
         06:af:80:d8:eb:08:30:5d:40:f5:d6:a0:e0:c4:92:3e:3f:e8:
         26:8e:63:87:3d:d3:01:3f:ce:21:87:53:cf:42:99:8c:63:36:
         ac:2f:a6:bc:39:56:43:09:49:22:27:06:49:ba:03:18:94:90:
         43:4d:49:6e:13:30:14:f4:ab:3c:f5:a0:d8:12:c0:f5:ca:4d:
         ce:77:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 21:49:45 2024 by rpki-client on console-fra.rpki-client.org