Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
File:                     5E8E08E8C26211ECBFC22B20C4F9AE02.roa (raw, json)
Hash identifier:          BPc2ul74OB2iZzZj4zYG4tzM+HpQpkLBKywQ3Rl7cOw=
Subject key identifier:   47:B3:B7:C9:C4:73:8E:D0:0B:F6:62:58:6A:3D:DF:FA:36:67:70:00
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       0242
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 03:54:38 +0000
ROA not before:           Thu 01 Feb 2024 03:54:38 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149431
IP address blocks:        103.179.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 00:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Feb  1 03:54:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bb15fe-2005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:f2:55:5f:57:d6:04:54:93:32:45:66:fb:
                    43:ea:fb:77:ba:ad:3c:40:3c:dc:94:51:ba:ca:9f:
                    eb:f7:5b:6c:21:6b:c6:e4:1a:15:ae:1a:71:90:3a:
                    c4:35:6a:eb:80:65:a7:b6:ab:b2:73:09:9f:8e:14:
                    82:75:80:e5:ee:78:8c:c8:ed:20:03:d3:8b:57:6e:
                    b0:6d:a0:a1:91:1c:7a:76:6a:c9:61:b5:0d:ef:be:
                    84:09:67:a7:2f:b4:62:11:65:69:a0:5d:20:fe:50:
                    54:a7:d0:39:86:79:7e:e5:a2:ef:5e:00:40:10:b9:
                    74:92:48:70:20:be:51:d9:86:44:c9:ff:5f:23:31:
                    99:6d:a3:b7:b3:d4:0f:e3:73:9b:34:99:68:45:18:
                    50:be:a9:4c:13:6e:16:29:56:71:f2:03:c6:48:9b:
                    e2:67:ba:0b:cf:81:50:4a:c2:36:13:da:8b:16:48:
                    4f:e6:58:0e:2e:19:32:11:9c:15:5b:00:9f:33:e4:
                    81:66:71:cf:90:57:56:14:30:f8:f5:d2:fe:9c:1d:
                    80:09:84:d9:d5:e0:08:c3:65:40:5b:8a:80:e4:9e:
                    58:c6:df:84:cc:29:ea:ce:64:4c:51:27:93:58:9a:
                    8a:f1:91:9d:08:4e:14:f4:ff:04:20:89:db:ba:5d:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:B7:C9:C4:73:8E:D0:0B:F6:62:58:6A:3D:DF:FA:36:67:70:00
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:b2:36:1e:8c:58:9a:6d:fd:0c:ee:68:ae:20:2a:b0:bb:
         fd:1d:d5:3e:c3:3d:08:2e:c0:37:b8:3f:a8:3c:ce:06:1e:e2:
         c8:71:16:06:03:36:af:72:0a:9f:65:29:94:3c:8f:f0:31:f6:
         5f:0d:fb:82:18:fe:d3:b9:cd:44:63:e2:53:31:ca:f2:a3:5e:
         ec:d5:4d:5b:a5:71:75:94:ea:a1:9a:cc:6c:d1:e8:cd:fa:7f:
         ca:53:82:cb:52:e4:93:5d:dc:60:a2:a3:5e:ad:f9:4f:3c:55:
         8e:dd:94:b2:ca:c6:ab:06:41:66:71:6f:7f:17:c7:ad:d3:15:
         3f:85:ca:f8:7c:0d:54:65:3a:a7:d1:c7:f4:b7:1c:92:36:35:
         da:39:79:fb:20:e2:72:5e:76:14:33:70:82:66:44:e0:b3:e7:
         ae:1a:85:93:cf:f4:b4:2e:cf:67:c7:64:6d:63:c7:74:43:0c:
         fa:12:b5:c7:8b:89:a7:4a:ff:ad:58:6b:4f:3e:ae:d8:91:c9:
         e5:a3:98:e7:94:59:0c:d2:86:29:1c:92:e4:f7:53:f2:70:dd:
         89:e5:e2:e3:1c:24:c4:5b:8c:70:27:13:37:28:93:02:cf:28:
         cd:fd:2f:90:e1:36:5b:6e:65:96:f7:79:88:12:d6:ba:10:24:
         fe:ea:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:21:04 2024 by rpki-client on console-fra.rpki-client.org