Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/F259393A9CC211EEA3A14563C4F9AE02.roa
File:                     F259393A9CC211EEA3A14563C4F9AE02.roa (raw, json)
Hash identifier:          rw3mF1kHVwPA57QAQF/xTH8uLt+cmuP9Gixunh3VrxQ=
Subject key identifier:   99:39:A0:A5:60:F6:EA:63:9E:F9:23:3B:69:62:5F:D1:BF:AB:90:A0
Certificate issuer:       /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial:       48
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/F259393A9CC211EEA3A14563C4F9AE02.roa
Signing time:             Sun 21 Apr 2024 08:10:21 +0000
ROA not before:           Sun 21 Apr 2024 08:10:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59361
IP address blocks:        103.150.38.0/24 maxlen: 24
                          103.231.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
                          rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
        Validity
            Not Before: Apr 21 08:10:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6624c9ed-b166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:55:e2:3d:64:8e:c3:98:36:e3:eb:25:15:
                    69:78:73:f9:c5:2f:de:82:c1:01:fc:f0:bd:32:cf:
                    a9:7d:c7:97:89:25:0c:10:76:b2:9d:f5:42:44:b5:
                    89:18:23:63:c1:4f:be:10:a7:df:7e:31:66:45:b5:
                    cc:a0:41:01:f9:8a:71:25:27:02:fe:13:28:ae:8b:
                    2b:87:11:92:a5:40:76:69:f2:44:41:44:ce:9e:4e:
                    e0:13:ab:69:8f:2c:de:3c:12:87:10:90:ae:13:76:
                    d4:db:5b:bf:eb:2e:47:5e:bc:ad:2d:72:bf:60:16:
                    fa:c3:6e:be:d4:5e:63:87:82:7f:50:bc:e9:bb:62:
                    a7:be:64:7e:8e:66:c6:a2:61:53:e5:9c:f6:b2:73:
                    74:f5:f1:38:b8:4e:52:50:54:2e:f3:0b:70:e0:a8:
                    1a:09:b0:af:8e:0c:79:2e:dd:e9:af:21:ec:5a:00:
                    c1:18:2c:64:f4:89:c3:34:05:a6:a7:60:ae:13:63:
                    77:e5:3b:39:4f:16:73:0c:d5:e4:ee:6c:05:e3:f5:
                    ed:fd:94:a6:8d:33:4e:05:27:47:04:c8:11:87:03:
                    6a:36:bb:35:ad:9c:f2:21:8a:39:12:df:f3:35:24:
                    a0:c0:1f:bb:70:09:63:11:94:4e:f8:2c:39:ca:1e:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:39:A0:A5:60:F6:EA:63:9E:F9:23:3B:69:62:5F:D1:BF:AB:90:A0
            X509v3 Authority Key Identifier:
                keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/F259393A9CC211EEA3A14563C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.38.0/24
                  103.231.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1a:78:eb:81:9f:f5:30:71:98:15:7d:c0:7e:bb:34:20:64:
         1f:12:05:5d:65:58:fc:1f:a5:3c:4d:58:5a:f2:d9:10:60:a6:
         6e:a0:c7:ff:4a:96:fc:fb:d3:2d:f2:13:47:c0:e1:c2:65:f4:
         b4:9a:8b:08:f0:6b:09:8f:3a:5d:91:74:9b:15:b8:ca:ed:3f:
         1f:3c:eb:13:a3:36:31:e0:14:a7:55:1b:80:37:98:7e:6f:ca:
         85:7a:b0:12:e2:2d:81:aa:b0:49:3b:3f:81:60:f4:61:d6:0e:
         c6:2d:23:66:ce:08:70:66:26:b3:c1:77:f7:2a:4c:1a:6f:11:
         f8:a8:7c:3b:76:50:d3:6e:70:0d:b1:81:fa:47:60:36:f0:de:
         41:43:55:26:33:53:2a:c5:04:8b:e9:5f:1b:21:2a:61:68:43:
         73:5b:3d:d4:1a:2e:8d:2d:b5:1a:1d:d3:ff:9d:9d:d1:25:ee:
         f6:82:ca:63:44:da:a1:a4:2d:f6:1c:f1:1a:37:28:34:9b:be:
         86:fe:7b:c8:cf:13:3a:c3:46:fa:8e:fc:e7:13:83:d6:d7:b8:
         05:18:a8:8b:44:29:d0:61:56:eb:b5:21:0a:5a:49:05:82:31:
         2c:d3:e2:49:3e:ec:5b:fa:4b:77:20:50:9a:04:99:97:9a:d1:
         91:c4:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org