Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
File:                     6A9D79ECD6E311EE94842842C4F9AE02.roa (raw, json)
Hash identifier:          jN9QXGMMYv/Zcq29BNSVq+lenvl5pgWeupVmCs5KQSM=
Subject key identifier:   91:80:C9:B7:B6:C2:84:34:1D:62:97:EC:70:D2:7D:DD:8D:55:A1:BA
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       CF
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 09:17:53 +0000
ROA not before:           Thu 29 Feb 2024 09:17:53 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     142295
IP address blocks:        103.12.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 06:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Feb 29 09:17:53 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65e04bc1-1218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:ac:b3:cb:4a:03:ed:16:e9:50:9f:ac:c0:
                    4b:e9:09:42:5f:a4:c4:76:9f:b5:da:4e:62:e2:e8:
                    ae:ea:1f:9e:d1:23:3e:c7:24:09:5b:ff:c7:98:ec:
                    09:42:b7:9b:ae:40:44:48:7c:9b:b1:91:08:80:b5:
                    fc:55:d2:22:3d:af:51:13:5d:4b:f9:3a:2c:2c:7c:
                    5f:fe:bb:47:df:53:21:78:fd:f3:ed:41:d1:ca:8a:
                    c7:4b:83:97:f3:09:21:1b:c3:28:83:29:ca:ec:dc:
                    f6:c8:24:6f:58:b9:16:0b:69:8e:42:57:55:28:fc:
                    e1:0f:9e:9e:66:88:f7:41:36:cc:26:b8:22:9b:22:
                    24:ff:0a:58:6c:24:a4:60:9f:58:65:cf:d6:1e:8b:
                    e7:26:07:a6:81:0f:18:d2:8b:c8:e0:19:84:ff:4f:
                    d8:b2:d9:66:43:4c:b7:58:4d:0d:e7:00:da:cb:dc:
                    04:37:8e:e4:7c:fd:3f:7e:6e:53:05:98:5d:5d:e1:
                    d3:86:49:cb:1c:e2:31:10:5d:f8:78:2a:fe:5c:5f:
                    fd:c7:f8:b9:f5:cf:2b:fd:ce:8f:4f:c1:21:9d:12:
                    b0:35:d4:a1:4d:a5:6b:b7:6d:4a:24:16:69:fb:e1:
                    28:db:34:03:1a:95:2a:0f:37:4c:e1:c4:9a:88:11:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:80:C9:B7:B6:C2:84:34:1D:62:97:EC:70:D2:7D:DD:8D:55:A1:BA
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:15:d5:21:b3:70:1c:4d:38:c0:c9:03:30:b0:87:10:50:
         a2:12:68:d8:b5:89:57:09:d2:5e:b9:25:7a:c9:3e:2f:b9:25:
         21:70:b1:97:44:be:fb:16:6e:d0:2b:64:29:22:35:0b:48:2c:
         39:06:f4:3e:c3:db:c8:f0:06:09:9b:d1:ce:40:c4:6b:f4:6a:
         75:a0:7d:e4:c7:3c:08:78:43:ac:eb:a1:80:17:c5:74:97:3b:
         f0:2b:d0:52:13:6b:2d:c1:fc:94:6f:03:21:fe:4a:3a:57:9e:
         fc:ce:01:ec:1b:eb:9b:10:57:15:aa:d6:9f:6d:48:cf:0b:d2:
         34:85:75:f6:c7:27:8c:69:f6:4e:73:19:c4:34:8a:62:f7:b1:
         8a:f8:a5:21:ff:81:86:25:24:14:ce:29:04:6f:aa:8f:30:9c:
         c1:f4:ac:09:92:db:f7:7a:87:88:07:84:3d:3f:4d:ce:87:0f:
         d2:95:e9:81:77:d1:71:ba:03:dd:13:5e:3d:ba:f4:05:d4:75:
         49:ea:ba:a0:e1:d8:e7:d5:e6:d3:f6:44:34:9b:76:11:a1:eb:
         72:fa:bb:1f:e6:21:98:bc:0c:ca:ff:30:4e:aa:95:2a:e8:21:
         87:17:24:c8:f9:9f:f0:ea:a0:58:ac:cc:be:20:4a:34:2c:14:
         5a:2c:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org