Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/E19CEE7A295311EF9F79E84BC4F9AE02.roa
File:                     E19CEE7A295311EF9F79E84BC4F9AE02.roa (raw, json)
Hash identifier:          FWqWHrgU8YR9QtN3gRWbhhD2XMh1wD0ChEDjXePWjyc=
Subject key identifier:   4C:A3:1C:04:16:87:AF:51:1F:45:60:8D:F9:70:7D:76:BF:E9:EA:D5
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       08
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/E19CEE7A295311EF9F79E84BC4F9AE02.roa
Signing time:             Thu 13 Jun 2024 07:09:44 +0000
ROA not before:           Thu 13 Jun 2024 07:09:44 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     140077
IP address blocks:        103.148.50.0/24 maxlen: 24
                          103.148.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 20:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Jun 13 07:09:44 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=666a9b38-5868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:9d:07:86:06:c7:04:57:c5:4c:7e:20:b3:
                    97:92:d8:8e:76:92:fe:76:51:2e:a5:12:25:a9:e9:
                    b8:a4:f5:5f:2c:d6:d2:f0:84:9e:da:47:b5:0e:e5:
                    4e:6a:b6:76:98:34:97:d8:74:e4:22:16:c6:ec:d0:
                    81:58:a6:20:59:62:e7:ea:a1:f2:0b:8f:e6:6a:fb:
                    68:32:5f:cb:62:16:7d:93:16:87:7f:69:1e:39:00:
                    d4:3e:25:2e:cf:14:31:ba:63:e0:c0:b7:d5:8f:c4:
                    5e:d5:06:57:75:8e:71:30:16:df:e2:58:8a:c2:a0:
                    88:51:98:ce:f8:99:7e:a9:f7:ae:ee:82:8a:d9:f8:
                    87:7d:45:16:85:83:56:96:52:e5:52:9b:89:15:b5:
                    40:59:3a:3c:be:b6:16:5a:85:82:bd:a2:06:09:68:
                    3e:a7:2a:e5:6f:7a:27:8e:27:c2:ab:73:d6:c2:9b:
                    92:41:e2:fb:32:87:93:d2:4a:9e:c3:f4:e5:1c:11:
                    14:3e:f7:b7:cb:4b:6a:25:86:cd:bf:db:2f:22:79:
                    e7:e7:8b:99:93:6b:fb:cc:4a:06:e7:8a:ab:9e:8a:
                    a4:38:ce:cb:05:10:de:6a:d5:45:ea:44:02:d5:67:
                    40:23:db:ce:3b:d1:f3:80:26:f0:e8:48:fb:44:04:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A3:1C:04:16:87:AF:51:1F:45:60:8D:F9:70:7D:76:BF:E9:EA:D5
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/E19CEE7A295311EF9F79E84BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:28:8c:b9:36:90:d9:1a:10:9c:76:3a:04:df:0d:65:25:b1:
         76:a4:92:e0:be:1a:8d:e8:a9:1e:67:a9:96:c7:d0:4b:5e:9b:
         a6:6f:f9:ed:8e:b1:2d:e3:6f:0d:19:9f:fe:bb:85:48:1f:ca:
         53:d0:6f:70:39:2b:c4:62:f0:7c:58:34:48:16:d2:a8:66:f5:
         e7:ed:a8:b2:64:6c:df:11:26:37:35:44:74:18:49:16:98:64:
         2d:87:64:40:ba:f2:cd:53:1e:61:fc:f4:db:6e:10:6c:59:3f:
         f6:e2:51:ff:a2:d5:dd:57:6c:99:6f:fa:da:bd:14:3c:69:a4:
         8e:35:b8:05:62:13:8b:95:55:0a:0c:ec:d5:6f:e3:d4:90:7f:
         3b:41:6c:11:ca:22:ec:b8:94:13:9f:dd:c4:11:ae:f5:17:90:
         d5:37:58:1b:42:a4:fe:eb:96:09:94:9f:22:e9:2f:f9:22:ef:
         aa:7f:17:10:ae:12:80:e5:72:52:e7:98:1b:0b:c0:38:0e:67:
         67:61:5f:36:cc:6a:9e:d7:0d:69:af:19:c6:34:ec:db:55:ac:
         ec:de:ff:f3:a7:97:c6:1d:44:ba:f7:12:e5:34:0e:8e:fa:c3:
         2d:ab:b9:f6:11:8e:72:76:8b:35:37:e5:11:b4:e1:8d:39:0f:
         b2:5b:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 21:24:04 2024 by rpki-client on console-ams.rpki-client.org