Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File:                     F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier:          ULCueRyEl12HIqfQw1ItT8YtfiIW/0cLTQe4frhEXrc=
Subject key identifier:   78:CE:B4:F8:E2:B4:C8:68:E7:DF:83:12:00:50:F3:9B:F6:A5:69:6E
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       02EF
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time:             Sat 29 Jul 2023 01:42:40 +0000
ROA not before:           Sat 29 Jul 2023 01:42:40 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     139466
IP address blocks:        103.141.199.0/24 maxlen: 24
                          2001:df1:b80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jul 29 01:42:40 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64c46e90-40e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a0:14:b5:e1:7d:57:5c:83:cb:c5:12:5b:2b:
                    f8:e6:71:9b:85:eb:c8:1d:e6:3e:49:9e:e7:11:18:
                    e2:d6:a8:ee:16:80:bc:2a:1c:42:2f:50:c6:e4:e9:
                    b3:d7:37:54:4c:bf:95:e9:d3:b5:70:e7:07:05:06:
                    db:8a:3d:b4:bf:a8:08:58:b2:97:24:dd:96:d6:af:
                    dc:e8:9c:86:89:a5:4f:46:3d:78:71:76:30:c5:bc:
                    a7:cb:e1:65:c5:0f:26:40:2a:03:45:68:2a:81:65:
                    c1:6c:f1:78:3d:c1:fc:62:0d:b7:d1:8b:94:e1:6c:
                    7b:3e:87:13:4a:86:d3:0b:61:a4:29:70:03:cb:0c:
                    5b:a5:9a:87:f9:1a:7e:61:fa:d0:90:1b:a7:f0:35:
                    1d:6c:d4:cb:12:07:2a:04:f1:10:e8:a6:3a:a9:df:
                    5e:6c:6c:4f:a4:ba:a3:cb:2d:44:7c:fe:09:01:9d:
                    c7:ab:9d:65:b4:d9:12:a6:13:6a:69:19:d1:5d:f4:
                    be:91:0d:16:78:1c:ca:8e:48:32:8e:9e:67:50:98:
                    1d:9d:78:c1:e4:6e:1a:d9:9c:db:75:10:1a:f6:5d:
                    74:69:40:53:d8:91:fa:03:e8:43:21:ea:a6:79:76:
                    43:2a:4d:21:f1:dd:e1:f2:d2:5f:d6:ec:8c:32:5e:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:B4:F8:E2:B4:C8:68:E7:DF:83:12:00:50:F3:9B:F6:A5:69:6E
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.199.0/24
                IPv6:
                  2001:df1:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:92:67:88:25:71:48:5f:eb:ea:ac:12:00:3c:09:47:40:
         67:0f:db:d6:c9:47:f3:ce:e9:1e:3d:8e:21:ac:db:36:03:3b:
         b0:31:f3:fc:1e:d9:3f:f1:75:3c:1f:0f:22:d5:c0:8c:2c:ed:
         5a:34:15:10:a8:6d:a1:1b:a9:b5:b0:13:98:ea:f2:89:b3:65:
         76:4b:da:92:35:f7:94:86:34:14:88:82:19:b5:c8:12:0e:5f:
         2b:3c:ba:b4:38:f5:cc:ef:46:cc:c5:8f:09:f4:87:c0:ad:e2:
         2e:43:f6:cc:52:31:1f:b7:4c:35:76:d4:c8:e9:f8:ba:0e:f4:
         ad:80:1f:52:8c:ce:f6:89:8e:32:3d:7f:ef:d8:fe:f0:8c:f4:
         d1:87:e1:4b:75:d0:d4:5c:c3:f0:fd:2e:80:46:ae:f9:a5:2a:
         13:07:5c:62:a3:84:9a:c5:fb:90:1c:7a:65:a6:e1:42:18:a6:
         53:9e:5d:74:e6:3a:74:aa:e6:c8:a1:fb:e6:3e:9f:fa:3b:fb:
         d7:ff:4a:92:9b:a8:60:ee:d2:71:e8:fc:a1:be:6a:1d:8e:f1:
         6c:0f:52:a3:08:b9:80:02:16:74:e3:01:d6:ed:c1:bb:de:c0:
         67:b7:2f:fc:3b:78:05:4a:26:95:c8:7e:0a:85:29:29:ca:c0:
         21:94:8f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:20 2024 by rpki-client on console-ams.rpki-client.org