Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
File:                     44CF316C29DA11EEAC070054C4F9AE02.roa (raw, json)
Hash identifier:          hTk/lRLlQBviCYjhXy1epTHYshfben0qR2IckEw1iPY=
Subject key identifier:   A5:26:AD:12:E2:44:94:4C:F5:3A:43:72:DB:1B:7A:CD:19:7A:45:DF
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       79
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
Signing time:             Thu 21 Dec 2023 06:18:18 +0000
ROA not before:           Thu 21 Dec 2023 06:18:18 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     17794
IP address blocks:        103.247.92.0/24 maxlen: 24
                          103.247.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Dec 21 06:18:18 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6583d8a9-0d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:4c:28:3b:71:14:ad:b8:32:38:83:44:3e:
                    68:12:04:06:6f:fd:5b:fd:c6:75:28:27:28:ee:a8:
                    4b:de:3a:da:16:f3:bc:9a:c7:33:a9:ee:d6:09:34:
                    36:f3:85:36:20:4c:7b:00:7b:38:18:7e:8a:6f:bd:
                    34:6f:90:01:f5:f0:21:c3:4c:1c:41:54:39:c7:4d:
                    3b:61:b4:4d:85:bd:5e:43:51:39:4b:0a:31:22:c8:
                    ba:a5:bd:6f:6c:50:e7:68:b4:1b:e0:b9:ba:27:15:
                    f3:f4:f8:ec:4d:20:a7:0f:ba:1e:a5:fe:db:88:a4:
                    48:c4:a9:92:7b:6d:98:4b:ae:e1:18:90:ae:7c:08:
                    dc:8d:27:00:29:d0:fe:21:97:3d:68:d6:68:eb:ba:
                    b1:7c:6f:58:02:63:14:9b:8d:39:0b:43:67:42:f2:
                    09:1d:42:01:a8:51:49:8f:32:fc:c7:8b:26:24:cc:
                    39:08:fd:24:df:7d:a2:ab:4b:5e:db:e4:23:f0:ae:
                    cc:7d:af:75:2a:26:78:a4:9f:bc:e2:7c:8c:25:86:
                    97:79:a4:84:8a:a4:0f:3b:cb:09:12:1c:fd:45:89:
                    81:a4:4b:cd:4c:b2:5a:8d:8d:56:e6:1d:2b:31:8a:
                    fa:80:a7:e5:21:6b:14:87:2b:97:86:e4:a2:20:32:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:26:AD:12:E2:44:94:4C:F5:3A:43:72:DB:1B:7A:CD:19:7A:45:DF
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/44CF316C29DA11EEAC070054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.92.0/24
                  103.247.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:51:3f:8c:d2:e4:4a:01:94:e4:fc:65:a2:21:6a:d7:c9:
         74:05:ae:46:8e:1e:37:4c:29:19:dd:60:13:87:41:8f:be:b4:
         b3:b5:f7:8d:7d:fd:48:57:02:ec:48:8d:35:9d:69:a9:6d:b7:
         e4:bc:94:6e:76:d4:4a:39:3e:7b:67:d2:43:65:f1:2d:49:a7:
         f7:01:19:2b:80:0f:bf:27:cc:f7:4b:30:13:9c:bd:8b:dc:df:
         b0:49:f3:d8:a9:07:09:5d:a0:37:03:16:09:1d:7b:43:32:82:
         a3:5e:98:7c:b3:28:7b:4e:fe:ed:96:3d:a8:b1:4d:7a:7a:05:
         f1:9e:65:c2:75:e7:a5:c8:12:59:98:22:cc:26:55:08:70:3d:
         10:0e:4d:44:24:14:46:45:64:bd:0a:50:3e:1a:7c:b1:d7:2b:
         76:11:79:9d:c4:6f:07:a1:9b:5f:3e:1f:e3:d5:8d:d8:03:bf:
         7d:be:f2:c9:e5:d3:ec:07:2b:cb:4a:6f:f1:2e:86:86:e6:be:
         e3:08:8f:ab:d3:67:d2:fd:b3:59:f5:0d:62:e4:38:4a:da:ad:
         a7:8e:54:fb:27:48:7d:68:78:f2:fa:57:84:68:59:af:f5:9f:
         84:a7:ad:94:b7:d9:80:16:d2:a3:a7:ae:48:1f:ea:86:60:1b:
         ef:f3:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org