Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/579616F29E5811EDA8C7767AC4F9AE02.roa
File:                     579616F29E5811EDA8C7767AC4F9AE02.roa (raw, json)
Hash identifier:          fhPglPN99BcJ4iiDYWfFN3cB62mj0DrLuUkOyWWzqXY=
Subject key identifier:   09:2F:45:6F:B3:6D:C5:4F:EC:A3:C0:BF:67:51:B9:8E:FD:54:55:1F
Certificate issuer:       /CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
Certificate serial:       C1
Authority key identifier: 4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/579616F29E5811EDA8C7767AC4F9AE02.roa
Signing time:             Sat 03 Feb 2024 05:16:55 +0000
ROA not before:           Sat 03 Feb 2024 05:16:55 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     150737
IP address blocks:        103.77.116.0/23 maxlen: 23
                          103.77.116.0/24 maxlen: 24
                          103.77.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl
                          rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916548C/serialNumber=4FA368A62ED25C6278E23B1BFFA251A149AA2F58
        Validity
            Not Before: Feb  3 05:16:55 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bdcc46-ec64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:79:dc:89:55:42:5e:9f:9e:68:0d:d6:46:
                    c4:00:c5:14:51:93:4a:05:ba:8f:c8:5e:6a:f1:94:
                    be:91:5e:1c:d7:17:87:fe:ec:d4:2b:82:9c:9e:6a:
                    60:02:d7:b1:46:e7:a4:8b:a3:ae:d3:bd:74:16:5f:
                    54:8f:72:c1:69:27:ee:ec:e8:ef:c5:65:3d:e6:2e:
                    33:3a:b2:f2:51:9c:1d:b2:3d:de:83:98:18:92:83:
                    98:e1:89:67:8f:c3:bf:c7:32:ba:04:f2:b1:5d:38:
                    2e:a9:32:0f:b9:ec:69:bc:1e:75:4e:74:b0:37:99:
                    e3:91:00:63:f7:f4:ff:8d:b5:db:f3:30:cb:fe:22:
                    18:3f:75:ec:de:ec:0b:83:ba:c6:5f:73:bc:18:fb:
                    24:88:7f:27:20:55:a0:e4:28:8e:19:fd:57:23:cd:
                    7c:a6:55:ca:e2:a5:87:24:96:a2:87:e0:dc:d8:bd:
                    77:43:67:1c:40:7c:9e:ae:c4:85:24:9e:0f:a7:ad:
                    59:35:01:17:a8:07:e3:dc:07:6b:cb:6f:a0:9f:5a:
                    91:89:f5:9a:bc:05:7e:3e:86:a5:86:d9:3b:7b:77:
                    4e:6e:5c:7f:f3:46:10:75:bc:43:f0:54:35:28:94:
                    9c:0c:b9:4d:a6:9f:93:ec:eb:1b:10:d1:ce:fc:2b:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:45:6F:B3:6D:C5:4F:EC:A3:C0:BF:67:51:B9:8E:FD:54:55:1F
            X509v3 Authority Key Identifier:
                keyid:4F:A3:68:A6:2E:D2:5C:62:78:E2:3B:1B:FF:A2:51:A1:49:AA:2F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/T6Nopi7SXGJ44jsb_6JRoUmqL1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T6Nopi7SXGJ44jsb_6JRoUmqL1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916548C/C7731D249E5511ED8D92BD79C4F9AE02/579616F29E5811EDA8C7767AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:52:4e:4f:aa:d2:41:95:53:30:92:a8:d5:d6:41:05:cd:
         c1:8a:50:1a:3d:21:3a:6b:34:e4:d0:d2:ed:2a:29:d2:ec:0b:
         d4:06:24:13:5f:bf:99:73:db:e0:43:94:89:19:61:fb:50:fe:
         c7:2d:1b:16:56:e9:ff:67:f6:4e:8e:59:47:75:ad:da:d1:53:
         d5:9c:59:41:e5:9d:f9:1e:c3:02:71:9f:d2:da:76:fe:83:95:
         e5:60:60:80:8a:b5:3e:cc:58:35:46:09:60:91:a6:68:89:d5:
         34:f1:d3:aa:5c:7a:06:2f:d6:9d:4a:a1:bf:0c:31:92:58:fa:
         f2:47:3a:c8:f2:a1:cd:da:10:39:1d:57:01:a0:a7:de:3b:3f:
         be:c3:bd:e3:2a:38:e1:93:29:8e:28:d6:b7:9a:f5:12:c5:cb:
         e4:1e:4c:44:df:c5:5c:43:63:f0:a0:de:50:b7:3e:10:04:39:
         ef:a0:e7:39:3d:b0:7a:9d:22:5b:b3:36:3f:6d:0c:a3:fd:5b:
         d1:6b:ad:31:5b:0a:ef:1a:4e:8e:99:e4:ad:84:d8:e7:f2:31:
         e1:65:e8:f4:01:b7:1e:64:7f:41:2d:54:0c:c0:de:e1:33:82:
         40:2c:57:6a:17:78:2e:0b:5b:ee:f5:28:bf:7c:df:4c:56:6e:
         47:71:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org