Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/D49D6040912311EB9DCD2A33C4F9AE02.roa
File:                     D49D6040912311EB9DCD2A33C4F9AE02.roa (raw, json)
Hash identifier:          QPUpI+0BADqLngv5PXDDeoaYIHHd1ixVl03M1AWIdPw=
Subject key identifier:   55:E6:31:A0:63:E4:FD:3C:D1:50:73:D5:F3:BA:44:DA:B2:BC:C8:23
Certificate issuer:       /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
Certificate serial:       0525
Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/D49D6040912311EB9DCD2A33C4F9AE02.roa
Signing time:             Thu 23 Nov 2023 00:11:53 +0000
ROA not before:           Thu 23 Nov 2023 00:11:53 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136005
IP address blocks:        103.79.119.0/24 maxlen: 24
                          2001:df6:a600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl
                          rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB
        Validity
            Not Before: Nov 23 00:11:53 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=655e98c9-70db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:97:8a:4b:63:a6:57:e7:fa:38:f0:84:39:
                    f4:b9:56:49:32:53:aa:dd:0f:4b:92:88:07:de:e3:
                    cd:39:3a:0e:99:c3:a7:78:ba:02:93:36:a9:22:46:
                    79:87:08:81:e9:eb:a2:d5:49:45:fa:53:86:a0:84:
                    13:70:90:05:3a:a8:6b:10:99:69:d2:60:12:ac:4b:
                    66:3e:45:e5:6c:cd:98:a0:27:ae:0b:c7:22:88:52:
                    f7:7f:f3:e5:52:22:57:96:7f:97:1c:5d:d3:ec:bf:
                    20:28:19:1e:08:bb:10:ec:da:b0:ba:3a:4a:57:38:
                    64:fa:d2:a2:7a:4e:c5:50:71:0e:9f:30:0a:f8:cd:
                    86:97:20:d3:c6:fc:89:57:c1:aa:56:6a:79:9c:28:
                    35:40:5a:14:07:59:55:03:26:42:dc:47:4c:e1:a5:
                    f3:ef:05:8c:f6:05:8e:5f:6b:3b:20:88:5a:49:db:
                    b7:d6:87:8a:87:5e:d0:9c:6a:cf:e3:9e:20:9c:ab:
                    68:33:1c:9c:84:0e:19:e5:b5:2b:a1:13:17:da:b5:
                    df:04:dc:fb:32:2b:a9:d0:34:32:2c:91:78:ea:ce:
                    9b:1e:bc:5a:1e:46:bd:43:07:86:82:08:6c:3e:79:
                    c9:aa:26:38:75:55:ab:ad:50:df:14:1a:70:15:7f:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:31:A0:63:E4:FD:3C:D1:50:73:D5:F3:BA:44:DA:B2:BC:C8:23
            X509v3 Authority Key Identifier:
                keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/D49D6040912311EB9DCD2A33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.119.0/24
                IPv6:
                  2001:df6:a600::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:53:56:9f:3d:65:cc:19:9a:29:d5:1e:89:99:8f:d2:66:b5:
         38:48:15:89:ea:95:5c:45:f2:b3:9c:4d:c0:cb:bf:11:25:e8:
         85:28:b1:b6:69:ab:41:cb:23:99:86:a7:ce:9c:7c:7c:bd:84:
         03:8d:aa:a9:0b:48:49:65:aa:0f:a9:fa:b3:45:a3:a1:91:bf:
         58:0c:88:e9:85:d0:ae:42:69:0f:c2:3e:c4:7e:e0:50:ba:54:
         67:59:79:c6:ce:d3:86:50:f3:62:49:74:37:fd:35:a1:70:a7:
         78:a3:de:59:0a:92:c7:39:8c:15:26:a4:9a:99:c1:25:8f:65:
         82:bc:d2:84:6f:92:cb:c6:5a:9e:3a:da:71:16:bb:73:a8:88:
         cc:8a:10:87:9e:3a:b5:f4:01:41:1c:49:88:90:54:10:01:52:
         ab:2a:a4:49:fa:92:f2:53:7d:7e:5f:4f:a7:50:10:e9:17:3a:
         a0:1c:9e:da:dd:19:30:90:4d:ca:35:97:65:98:96:a6:d3:f2:
         f2:62:36:cf:4f:d0:5b:84:10:6b:be:7c:37:8d:1a:f5:5a:d2:
         cf:bf:ee:8d:02:4c:26:47:8d:99:fe:ad:b9:91:df:72:bc:eb:
         b9:bb:40:fa:68:2d:40:ef:63:6d:b2:25:96:f4:6a:62:f3:5e:
         ec:4c:0a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:44:45 2024 by rpki-client on console-ams.rpki-client.org