Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3E7FF0520E0511EF88871974C4F9AE02.roa
File:                     3E7FF0520E0511EF88871974C4F9AE02.roa (raw, json)
Hash identifier:          Ojlx2+zwTINlC3fSKFrFUbNQkbEEX4wo+WZU+k6EAnM=
Subject key identifier:   E1:5B:F6:0E:F7:79:69:9B:C7:03:F7:36:85:E6:4D:D0:4D:AB:36:03
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       054F
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3E7FF0520E0511EF88871974C4F9AE02.roa
Signing time:             Thu 09 May 2024 13:08:36 +0000
ROA not before:           Thu 09 May 2024 13:08:36 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     58895
IP address blocks:        103.79.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 01:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: May  9 13:08:36 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=663ccad4-f1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:32:2f:32:25:1a:13:b3:0e:9c:49:58:41:
                    fc:6e:39:c6:07:6f:70:5b:b6:6b:f7:e7:63:63:ae:
                    7a:26:e6:1c:98:f5:27:5f:6d:46:9b:73:04:f5:48:
                    74:5b:8f:ff:ba:17:e7:12:a1:aa:34:60:41:ad:13:
                    c6:f0:5d:ca:51:dd:88:bc:93:c7:3f:2d:5e:d0:a2:
                    df:80:32:c2:9d:ef:f4:2d:e9:e5:b3:49:50:e7:c5:
                    38:8c:ec:43:6d:dd:4f:fb:1f:e3:57:cf:7a:68:2c:
                    28:9c:23:9e:e1:03:63:71:2c:e3:cd:cd:41:83:33:
                    ab:7d:b5:18:c5:11:2a:eb:62:06:e3:21:2a:44:cd:
                    e3:0b:da:78:2f:c6:51:71:00:d9:3f:01:d5:f4:3f:
                    3f:ef:4d:7d:4f:74:fc:fb:d5:d0:e3:fe:cd:a5:b6:
                    a9:47:2b:3e:68:65:48:c8:15:f8:8f:90:61:d1:d5:
                    e8:6c:25:6c:75:77:e3:27:be:56:fa:72:ae:32:e9:
                    0a:e6:db:aa:54:f3:32:38:db:cf:c7:1b:35:26:96:
                    20:ae:a6:1a:07:23:07:93:18:99:e2:c3:84:5f:bb:
                    0f:87:18:0a:eb:a7:ee:63:7d:ee:4b:26:c0:21:be:
                    64:96:95:e4:d1:0b:32:28:ca:b3:7d:cc:4c:8a:8f:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5B:F6:0E:F7:79:69:9B:C7:03:F7:36:85:E6:4D:D0:4D:AB:36:03
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/3E7FF0520E0511EF88871974C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:11:43:5e:05:9a:d0:88:61:ff:f8:64:82:1b:70:d3:b7:3e:
         27:12:cf:5a:f4:79:35:b0:71:30:2a:6a:7d:f8:6a:8e:2b:19:
         0b:c0:3e:d9:11:1e:cb:a1:ec:43:7c:37:63:87:83:05:29:c8:
         cf:d5:65:e3:4c:d6:69:c0:38:8b:8a:34:61:3d:33:48:2a:f6:
         27:f6:0b:6e:65:ae:c1:e8:cb:89:df:37:1b:69:c9:bb:47:06:
         03:8c:8e:56:8f:2c:ea:a9:f1:d0:33:09:5b:e1:04:a4:52:8c:
         26:75:55:37:80:b0:d6:33:a9:25:56:29:c3:09:8b:7c:59:7e:
         2f:56:1c:ba:e1:5f:f1:db:89:30:16:0f:29:37:ca:1e:06:85:
         9d:89:05:ff:35:68:8d:82:39:ee:a1:8f:61:60:3d:6c:9e:fe:
         a6:da:cf:27:8e:5a:d8:a3:b2:d7:11:4f:46:cb:36:08:cb:ec:
         2f:1b:18:9a:ba:64:f1:6a:e6:ad:1e:01:42:22:49:7e:db:62:
         1c:39:56:8e:da:4d:19:04:37:58:54:b3:1f:55:1c:10:99:d7:
         7d:60:6b:45:5f:a1:3f:ba:3c:cd:f1:5b:d7:cf:02:97:33:41:
         eb:64:c9:eb:43:e6:98:a7:c0:01:92:32:20:fb:34:5c:62:77:
         31:86:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 03:18:19 2024 by rpki-client on console-ams.rpki-client.org