Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/F2BB36DC790E11EC8EA0F77FC4F9AE02.roa
File:                     F2BB36DC790E11EC8EA0F77FC4F9AE02.roa (raw, json)
Hash identifier:          KW8CZ9txs3YwrvV7wO0SOgdBrRNOn4AvsdkMNqvWRYo=
Subject key identifier:   AB:0B:ED:81:0D:00:68:C4:7E:7F:44:17:F1:1E:18:A1:CB:C4:97:61
Certificate issuer:       /CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
Certificate serial:       030E
Authority key identifier: 3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/F2BB36DC790E11EC8EA0F77FC4F9AE02.roa
Signing time:             Mon 19 Feb 2024 02:45:02 +0000
ROA not before:           Mon 19 Feb 2024 02:45:02 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137015
IP address blocks:        103.179.156.0/23 maxlen: 24
                          2001:df0:4fc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl
                          rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B32D/serialNumber=3A68A222C2C0CF41430C0968D2309AA893C74A3B
        Validity
            Not Before: Feb 19 02:45:02 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65d2c0ae-a359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:f7:d0:53:d1:cf:a1:35:7e:a4:06:28:1a:
                    c7:56:3a:c4:30:52:2c:60:59:6b:6c:e7:fb:e9:36:
                    de:c0:8d:92:72:31:32:c5:36:e6:a5:e8:1a:2c:11:
                    ea:dd:37:81:40:0e:29:44:19:1e:a9:34:1b:23:2e:
                    b2:5b:42:2c:71:43:76:95:c6:4d:b5:db:2d:c3:cd:
                    b5:7d:eb:ca:f7:7e:23:39:43:09:44:09:4d:7d:17:
                    74:b5:d8:ad:f5:53:c3:20:3c:59:25:cb:85:4d:ef:
                    dd:cc:73:19:5f:77:8f:b4:9f:db:81:ee:c9:ca:cf:
                    0f:a8:1e:21:8c:3b:6d:61:c6:31:ba:83:a1:b8:e3:
                    b1:c7:8a:9a:35:a5:bc:bb:6e:a5:52:1f:26:9d:c8:
                    22:1a:74:23:28:50:88:60:61:15:8a:d6:1d:d9:08:
                    26:10:98:e1:ac:d6:ca:54:dc:55:5b:e9:de:44:a6:
                    1f:51:60:d9:5f:93:95:bb:e4:d7:3b:a7:6f:5a:d8:
                    ec:f6:a7:5a:97:e1:98:a1:3f:30:94:1d:6a:61:f9:
                    49:4a:f9:2e:00:3a:26:5b:13:ec:6a:a8:bb:0a:01:
                    b7:ed:0e:e8:8c:77:4c:2a:5f:25:50:23:dc:d2:0f:
                    39:20:86:87:16:57:56:9a:37:9c:38:f3:90:a8:d5:
                    77:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:ED:81:0D:00:68:C4:7E:7F:44:17:F1:1E:18:A1:CB:C4:97:61
            X509v3 Authority Key Identifier:
                keyid:3A:68:A2:22:C2:C0:CF:41:43:0C:09:68:D2:30:9A:A8:93:C7:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/OmiiIsLAz0FDDAlo0jCaqJPHSjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OmiiIsLAz0FDDAlo0jCaqJPHSjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B32D/86FD1388790A11EC8D0A2979C4F9AE02/F2BB36DC790E11EC8EA0F77FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.156.0/23
                IPv6:
                  2001:df0:4fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:6c:eb:da:1d:72:e2:78:34:49:ea:e0:50:b6:d3:b3:10:
         10:ef:a2:13:c4:fc:f6:74:cd:b5:b6:45:08:a5:5c:ee:0d:26:
         dd:dd:ba:82:dd:4a:9d:67:3b:14:81:96:f5:a9:30:16:18:6b:
         7d:5d:61:3f:9f:2c:32:0f:5f:e9:29:0e:9d:d5:b9:65:81:74:
         59:4b:42:89:10:76:26:ac:5a:22:73:0d:46:74:e6:77:d6:09:
         56:24:d9:ca:fa:a3:1f:1d:a7:91:8c:45:3d:a0:5a:d5:6f:95:
         c8:3a:4e:05:3e:55:3b:c3:63:d5:1c:5a:2c:cb:1c:28:cb:6d:
         bd:12:8c:b7:03:72:9c:64:45:e0:7a:9a:80:6c:00:1b:c1:1d:
         e9:c0:0a:5d:26:d8:1c:81:e0:ce:ef:cf:e7:df:df:25:21:6e:
         ee:1f:24:52:f6:e0:cf:c8:9b:6b:a3:ba:7a:ee:96:f3:c0:ef:
         f1:f2:ec:26:c6:4d:a4:d2:24:0a:f1:20:94:9d:2f:90:69:e5:
         dd:c4:dc:df:df:14:3f:22:6c:15:41:d5:2f:5d:06:15:2c:42:
         98:7a:39:30:be:09:db:f8:c3:ea:00:68:3c:ad:fa:a0:a9:50:
         a9:75:99:b7:b7:ef:7f:8f:c7:af:5a:2c:db:a6:8d:ed:b4:86:
         51:da:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org