Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
File:                     12A549F8BFC111ECBF03EF63C4F9AE02.roa (raw, json)
Hash identifier:          vtKO3SjXmvH9dx82EC9zDXe8Vmhi92GTEywUdw7xySE=
Subject key identifier:   43:D6:6F:AA:60:F8:A4:A9:7D:F7:1B:8A:75:02:2E:1A:C1:01:01:2B
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       0247
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
Signing time:             Wed 03 Jan 2024 03:44:30 +0000
ROA not before:           Wed 03 Jan 2024 03:44:30 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     63889
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Jan  3 03:44:30 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594d81e-33a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:92:4f:f8:46:24:7f:24:bf:98:5a:65:b3:
                    25:24:25:a5:65:b6:51:32:9c:fa:16:d3:01:18:c9:
                    8a:16:8c:76:89:3c:08:fe:b8:3e:c1:ac:5c:b4:a5:
                    a2:39:a1:b9:a2:98:35:fc:d1:d4:ec:fe:96:a9:e9:
                    b7:33:e1:b0:b0:ee:03:84:60:59:8a:1c:3f:68:76:
                    88:e9:7b:9e:9f:20:28:52:13:36:bd:9a:83:02:db:
                    bb:4a:aa:1d:50:85:53:5a:8c:16:71:aa:a1:db:65:
                    d0:85:3d:5d:e4:52:fc:68:90:2c:70:02:4f:30:70:
                    f9:bb:78:98:a2:d0:ac:63:1a:cd:62:31:86:f9:1a:
                    39:e2:26:9d:01:46:ce:db:33:6b:f2:97:d9:cc:3f:
                    e3:d3:2d:46:5c:4e:ed:1a:c9:8f:18:6f:23:3a:ae:
                    97:35:35:72:77:68:e9:f2:2c:90:59:0a:a1:cd:76:
                    1f:c3:4e:cc:28:17:2a:ac:59:0e:7a:84:1c:db:7f:
                    e3:fb:10:69:f0:57:d3:c9:49:ba:fb:3b:46:46:16:
                    c2:7d:2e:47:f9:77:12:84:0e:c5:b6:f0:eb:58:52:
                    31:5a:51:45:5f:2e:12:a5:9b:f8:d1:eb:f1:e4:d6:
                    ce:ef:6e:aa:26:1f:be:75:5f:3e:62:9a:ae:1c:58:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:6F:AA:60:F8:A4:A9:7D:F7:1B:8A:75:02:2E:1A:C1:01:01:2B
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/12A549F8BFC111ECBF03EF63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:40:aa:bf:79:bd:41:b5:b6:87:6a:de:e0:54:ac:36:04:
         a2:e3:84:90:b1:89:6e:5a:12:37:ec:0b:a1:7f:cb:57:0b:2c:
         c4:10:dd:ca:af:a1:9d:32:3c:be:5b:b8:c1:bf:f0:d9:40:05:
         a4:11:05:d7:6b:fa:df:43:85:7a:38:5a:c4:40:bd:c4:aa:9a:
         ad:60:14:26:76:6c:d9:10:6a:0a:4e:24:73:2b:2d:4b:76:c4:
         5a:2f:55:11:f7:b9:03:c9:c5:58:41:ef:64:84:9e:36:24:bc:
         55:53:a7:db:a5:3c:1b:c6:36:38:3e:fe:5a:48:92:2f:12:19:
         84:4b:09:8a:e1:c5:5e:fa:a6:46:2d:eb:40:e0:a7:03:21:ae:
         2e:f2:b4:80:42:88:cb:98:ae:ca:0f:7d:f5:d6:52:90:31:03:
         c2:18:ef:d2:ab:02:29:af:48:6e:3d:9f:3b:92:77:25:21:b3:
         3c:d0:34:a0:a6:fc:62:f4:f4:61:fc:8e:e0:8b:61:de:95:b0:
         b6:d1:fc:eb:65:a5:e7:b5:9e:52:e9:09:86:37:80:df:b7:2a:
         36:06:2a:2f:f2:d7:20:ef:e9:f5:7f:ed:dd:9f:3f:1a:fd:c6:
         8b:88:cc:e2:4d:07:43:3d:f5:85:cc:5c:67:bf:51:d8:94:21:
         08:cc:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:27 2024 by rpki-client on console-ams.rpki-client.org