Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/C7B69FE2287911ED93621A30C4F9AE02.roa
File:                     C7B69FE2287911ED93621A30C4F9AE02.roa (raw, json)
Hash identifier:          UoGq+ZpO/6nx5x+XTY9D8Dy7/iyHFGpVYfq1cLpAn/4=
Subject key identifier:   A2:EF:67:5D:D8:07:86:46:80:11:2B:D9:E3:62:B9:19:22:51:81:12
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       0867
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/C7B69FE2287911ED93621A30C4F9AE02.roa
Signing time:             Sat 06 Jul 2024 21:28:55 +0000
ROA not before:           Sat 06 Jul 2024 21:28:55 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     149994
IP address blocks:        103.151.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: Jul  6 21:28:55 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6689b716-3a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:7c:ad:0a:66:6b:fa:de:e0:92:14:5a:0a:
                    44:ad:f2:ae:77:3c:f6:ab:41:34:79:77:a5:01:0a:
                    44:cd:f2:a2:b8:12:ce:e6:9f:af:db:b9:10:c9:4d:
                    18:e1:43:c9:25:5f:50:ae:13:b8:69:c4:2a:f4:cc:
                    ca:57:61:27:28:60:17:9f:83:ec:46:6e:c7:9f:8f:
                    4c:a4:f2:c8:b7:bc:39:40:e7:95:69:6f:26:9d:b4:
                    a4:c2:90:e6:49:0e:86:b7:7b:aa:f7:0b:fb:72:14:
                    58:1b:39:2a:55:27:98:f7:98:47:34:2c:a1:06:f6:
                    1e:fd:18:8f:92:62:81:fd:de:f8:5f:d3:96:02:e3:
                    f3:34:bb:cf:77:27:8f:76:66:0b:88:d4:05:73:39:
                    4f:3a:be:95:ec:d1:ca:6a:1b:46:3c:a6:ef:ea:e7:
                    ec:7b:d7:8f:b0:fc:a0:b2:b1:be:b8:8d:83:6a:a5:
                    04:19:49:d5:db:eb:af:92:fb:81:bd:0f:4a:0c:08:
                    a6:a4:6f:c1:2f:83:ed:94:45:f2:91:c5:d4:d3:cb:
                    a3:04:7a:7e:fe:a0:32:bc:38:f3:f6:4a:cd:84:53:
                    5d:a8:ea:65:35:7e:51:49:f2:ee:83:0d:f5:a2:2d:
                    3d:79:77:20:a2:39:7c:41:23:cd:0a:ac:4d:c5:85:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EF:67:5D:D8:07:86:46:80:11:2B:D9:E3:62:B9:19:22:51:81:12
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/C7B69FE2287911ED93621A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:81:c5:b0:40:0c:3e:0b:6a:5d:53:55:cd:73:8b:ed:51:
         ae:7a:18:50:d1:ad:24:f6:02:51:bc:20:88:53:96:81:64:87:
         ae:48:62:61:04:d6:fd:c2:c8:d3:5e:29:d1:4d:b7:32:a9:cf:
         a2:3e:7c:ea:3a:ce:ea:fe:94:75:d4:49:8a:70:fc:c5:8c:3c:
         ab:b4:d6:00:a5:c5:c2:dd:36:e9:75:65:81:a4:02:ea:8f:2e:
         af:ad:99:96:6e:43:cb:02:5e:79:f0:f7:08:15:54:71:1e:d1:
         7f:17:4c:63:e8:0b:ad:b3:54:90:85:8b:fb:ef:88:0e:03:6e:
         ba:ff:96:33:7c:60:c3:7f:0b:41:66:49:40:c3:5d:ba:c7:0e:
         fb:ad:94:c1:35:33:1c:4f:95:70:59:2a:f7:b9:8b:1a:4d:a3:
         cb:df:20:69:1a:a0:d7:4e:bc:85:58:00:2d:5a:b2:e2:86:73:
         79:1d:0d:24:80:eb:2a:72:7e:40:11:3c:c1:b4:fd:96:b5:b2:
         6a:e4:94:58:f0:a1:5d:f5:10:af:11:23:29:7f:9b:7a:d2:0c:
         1c:dd:75:fe:8c:8a:91:5d:c3:67:77:b1:f2:35:d3:d9:88:39:
         e3:ad:55:e1:36:36:39:04:d1:63:f9:67:1d:15:1e:4e:5a:96:
         73:95:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:35:03 2024 by rpki-client on console-ams.rpki-client.org