Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
File:                     679A3A06D1F211ED8C598E75C4F9AE02.roa (raw, json)
Hash identifier:          yXeTd3LofZEbYRyq6HDqqZp0lw0EpRyYy35PR0fMfhI=
Subject key identifier:   AD:77:92:FF:5F:9A:BD:C0:B9:D5:B8:56:05:65:C6:EF:F7:24:36:87
Certificate issuer:       /CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
Certificate serial:       BC
Authority key identifier: C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
Signing time:             Sun 03 Dec 2023 04:55:06 +0000
ROA not before:           Sun 03 Dec 2023 04:55:06 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150381
IP address blocks:        103.24.18.0/23 maxlen: 23
                          103.24.18.0/24 maxlen: 24
                          103.24.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl
                          rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 02:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91843C6/serialNumber=C2E1F76743D5EF7A346A3732EAF90DAD582877DD
        Validity
            Not Before: Dec  3 04:55:06 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656c0a2a-1ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e3:04:ba:15:d4:82:4e:86:d3:de:c0:15:40:
                    87:75:3f:ad:73:0d:fa:f4:17:63:e5:18:57:d0:bc:
                    a7:03:89:38:e7:84:6e:37:6c:e6:c0:3b:d4:fd:a9:
                    80:09:25:46:b0:0c:98:18:c5:df:c6:04:99:a1:25:
                    59:94:b4:03:d4:8b:07:b1:54:98:5c:46:86:90:2b:
                    60:29:71:48:1a:cf:b5:42:c4:96:1a:c7:c1:fc:0c:
                    7d:b4:df:ff:dd:73:49:17:02:64:6f:ba:08:82:d1:
                    30:6b:aa:0b:d9:69:31:74:22:db:2a:23:f9:12:6d:
                    8f:93:71:13:c1:e5:fc:2d:7b:c7:34:29:bd:16:15:
                    5a:d9:b3:75:24:92:78:c6:53:d1:f7:84:b2:cf:d6:
                    13:20:8c:f1:36:ba:cc:ab:e6:31:c1:a0:bd:f6:60:
                    d4:59:43:19:07:e8:7a:08:fe:6f:5d:83:c6:4a:a6:
                    f4:a2:af:da:22:58:d0:7d:28:9c:c4:fc:c6:6a:fa:
                    c8:15:6d:be:98:38:e9:a6:e7:55:a4:ff:ec:50:34:
                    ee:01:ca:aa:69:98:32:6c:3c:e9:ec:b9:a4:58:7d:
                    25:24:ed:40:5e:09:c3:ff:e9:9f:99:de:41:05:db:
                    67:a5:83:75:5f:de:75:41:56:f0:63:98:86:8b:cd:
                    34:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:77:92:FF:5F:9A:BD:C0:B9:D5:B8:56:05:65:C6:EF:F7:24:36:87
            X509v3 Authority Key Identifier:
                keyid:C2:E1:F7:67:43:D5:EF:7A:34:6A:37:32:EA:F9:0D:AD:58:28:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/wuH3Z0PV73o0ajcy6vkNrVgod90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuH3Z0PV73o0ajcy6vkNrVgod90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91843C6/0236164A7B8911ED9DE15283C4F9AE02/679A3A06D1F211ED8C598E75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:1a:59:15:70:74:11:d7:7c:96:05:af:e4:73:32:2e:6f:
         dd:b4:23:d2:dc:46:2c:2e:da:db:4e:8a:0a:e0:b8:72:b9:2c:
         ea:9a:1d:35:0d:c3:0f:0b:f9:29:d3:32:e9:61:67:fb:49:37:
         26:59:c7:6e:35:f6:bf:18:53:81:76:09:f0:51:8c:6f:b3:8e:
         19:39:8f:97:82:2d:4a:be:78:1c:a6:7f:0f:b9:4c:28:5c:f4:
         57:af:a2:4c:67:ec:64:2e:d8:c8:37:fe:78:dd:0a:82:fc:c7:
         f7:32:22:da:17:c4:ad:f5:63:6a:2c:6e:62:1c:0d:29:1d:00:
         ec:47:3f:ba:f1:ec:24:2a:0e:ba:b0:2d:d5:c3:3d:c4:02:23:
         28:34:c0:8b:af:d6:df:31:31:06:96:fb:4b:09:cd:b9:f0:19:
         43:38:b8:ec:c5:44:b7:57:2f:d1:6c:5e:a1:d1:0d:e2:8b:09:
         be:3c:c6:0b:63:15:18:ff:04:43:fc:20:06:e2:1b:87:02:79:
         ac:ce:9e:2c:b2:c4:c1:a5:81:59:71:72:df:ab:af:60:b1:98:
         89:3f:56:3f:6c:04:d5:7d:77:60:06:8f:26:07:89:fd:0f:c8:
         0d:e6:21:f3:5a:db:eb:6e:94:08:24:a3:04:cd:31:cd:02:7a:
         cf:ab:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:03:00 2024 by rpki-client on console-fra.rpki-client.org