Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
File:                     79A8653C32AB11EE8EEB9940C4F9AE02.roa (raw, json)
Hash identifier:          24u0grqfHT7mCDkFfHl5PbbeKpdenVnPXBlwkMUAV4w=
Subject key identifier:   1A:F7:51:3D:DD:63:DF:CE:97:09:1C:B5:4F:94:7B:65:3D:79:B9:34
Certificate issuer:       /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
Certificate serial:       03
Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
Signing time:             Fri 04 Aug 2023 09:44:16 +0000
ROA not before:           Fri 04 Aug 2023 09:44:16 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151644
IP address blocks:        103.247.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl
                          rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327
        Validity
            Not Before: Aug  4 09:44:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ccc86f-4c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:6d:71:20:6a:c3:5f:9d:cf:c4:43:1d:78:
                    e8:e2:06:d0:3e:1a:81:2b:38:33:8d:35:95:3c:2d:
                    4b:28:4d:0d:fc:6e:b1:f4:02:0f:b2:99:cf:fc:ff:
                    4c:aa:40:e0:fb:47:0a:91:d2:d0:a7:f8:6a:91:34:
                    79:7c:b5:f0:2d:ad:b7:3a:5c:60:f8:8c:a5:85:fa:
                    20:51:7c:77:8b:20:07:02:71:5e:b1:53:31:3a:d3:
                    0d:08:7e:c3:92:90:3e:a4:76:87:81:fe:c3:e2:ed:
                    9e:aa:60:e1:4f:80:e3:8d:10:06:ed:7d:57:ad:09:
                    a8:b2:b6:f6:64:36:60:51:46:bb:f2:fc:94:ba:72:
                    72:bc:2f:f5:50:ec:e1:a7:31:db:08:d9:6d:8f:2e:
                    ed:a4:ec:fc:9e:1c:15:93:34:ef:d3:cc:82:25:c0:
                    42:72:8f:76:99:66:ec:05:35:6d:ea:53:ad:d7:2b:
                    61:5f:63:1f:3d:4e:c1:64:87:29:db:fe:95:49:24:
                    96:65:9e:e6:94:fd:e6:86:41:e6:46:3f:8a:6c:16:
                    b0:7f:49:e5:b4:14:a8:97:2b:27:40:3a:ba:c9:fe:
                    12:7b:e9:2a:cc:f4:99:7c:5c:6f:a0:82:59:5c:83:
                    64:1b:ff:e3:ca:e0:56:15:17:f2:1f:93:92:f2:ce:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:51:3D:DD:63:DF:CE:97:09:1C:B5:4F:94:7B:65:3D:79:B9:34
            X509v3 Authority Key Identifier:
                keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/79A8653C32AB11EE8EEB9940C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:03:f2:05:b2:a6:7a:48:28:16:5c:51:1f:ab:02:5a:ff:a0:
         27:7b:b1:14:92:92:dd:4b:3a:65:48:d8:95:ab:97:7f:b0:d6:
         8a:f1:6c:db:53:e9:6f:b2:a8:a7:4a:5a:7e:04:17:77:e1:cd:
         72:cf:66:73:16:d2:d4:4b:18:a7:de:dc:5a:eb:68:3b:1a:c6:
         d3:44:d1:74:a7:2e:d0:54:20:b5:bf:e1:27:af:f4:1d:bf:ea:
         97:4d:9c:be:ac:b9:8c:73:93:d4:61:ff:48:e4:b8:37:6c:10:
         b5:96:13:58:f3:54:e4:40:13:ca:e3:45:b5:75:44:f2:42:bf:
         70:0f:e3:68:c3:5e:bf:b7:5c:20:f4:3f:3a:f4:38:65:50:63:
         a5:11:e1:ef:7e:08:fa:71:3f:d9:7c:bb:c7:12:0c:32:1d:f2:
         23:cd:08:cf:1c:f3:fa:9e:36:55:4b:3b:bd:be:db:7f:10:9b:
         99:2d:63:2f:c2:c3:be:45:75:a5:83:8a:a0:d3:87:7e:c9:6e:
         d4:4f:38:c9:9a:e4:03:03:18:4d:6b:94:97:9b:c6:f7:ec:bd:
         30:4a:ff:c2:95:c1:81:d5:7a:b2:85:4d:69:cf:94:c8:54:23:
         f8:5d:64:d8:49:00:98:f8:c3:02:11:94:19:a9:05:5b:54:ec:
         d0:c2:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:34 2024 by rpki-client on console-fra.rpki-client.org