Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
File:                     8C891848A8C511EC8F560C42C4F9AE02.roa (raw, json)
Hash identifier:          3VG3cE0RBMf0XORCqHNYJBh9WQlsnyh1LMk7PYJ+aS4=
Subject key identifier:   9A:18:B2:B8:8C:35:48:BC:30:BB:56:49:CD:B2:39:17:66:A5:F1:C3
Certificate issuer:       /CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
Certificate serial:       0331
Authority key identifier: 74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 02:44:50 +0000
ROA not before:           Thu 29 Feb 2024 02:44:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136395
IP address blocks:        103.179.54.0/23 maxlen: 23
                          103.179.54.0/24 maxlen: 24
                          103.179.55.0/24 maxlen: 24
                          2001:df0:48c0::/48 maxlen: 49

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl
                          rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A0B9/serialNumber=74106684D567572A534BEC9E9ED7A4FC3DB1E2C6
        Validity
            Not Before: Feb 29 02:44:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65dfefa1-2f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:fd:89:77:0d:b4:37:8d:c6:55:bf:1a:34:
                    49:fc:90:f0:85:6e:22:30:38:4c:78:b7:2a:e5:94:
                    10:bf:1d:a3:84:bc:0f:ac:9f:be:50:32:d9:b8:47:
                    5f:6e:33:09:61:b1:d5:17:99:39:d9:34:e9:5e:95:
                    36:67:7b:fb:0b:ba:f4:77:17:a4:d2:9c:45:aa:51:
                    25:ce:b6:d5:85:49:00:b7:0d:a1:7c:aa:08:e1:38:
                    f0:ba:30:84:30:18:9f:f2:68:5c:6d:3a:8e:38:f6:
                    c1:8e:ca:bb:6b:9e:e5:af:c2:cd:83:18:a5:14:c9:
                    bf:c9:4f:ad:78:2e:17:ec:f7:82:96:42:c6:2b:85:
                    be:65:09:00:e9:a1:ed:cd:4e:89:3f:1e:b5:de:b1:
                    36:84:b7:33:5a:62:9f:da:ea:1b:d5:80:d9:75:f9:
                    07:3c:5c:6c:57:e4:9c:da:87:ad:ac:1e:b0:8f:91:
                    79:35:3e:77:c0:84:14:ec:30:02:fa:7b:16:59:4f:
                    98:29:5f:e9:4c:f4:11:9c:51:b3:2d:37:46:d8:13:
                    a0:a5:96:1e:a4:f6:30:7e:06:29:ec:07:5e:23:08:
                    42:0e:8f:27:70:6c:55:f0:bf:2f:5e:34:8e:df:26:
                    91:87:80:f9:41:b7:41:0a:ca:dc:c0:17:a6:de:74:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:B2:B8:8C:35:48:BC:30:BB:56:49:CD:B2:39:17:66:A5:F1:C3
            X509v3 Authority Key Identifier:
                keyid:74:10:66:84:D5:67:57:2A:53:4B:EC:9E:9E:D7:A4:FC:3D:B1:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/dBBmhNVnVypTS-yentek_D2x4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBBmhNVnVypTS-yentek_D2x4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0B9/2E06D6DE6FB811ECA5677C78C4F9AE02/8C891848A8C511EC8F560C42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.54.0/23
                IPv6:
                  2001:df0:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:3b:eb:df:5e:d2:45:c0:3c:81:75:6f:ea:45:f9:82:3a:
         86:de:87:de:ca:af:f3:f0:72:e7:e7:81:c1:74:55:78:15:67:
         ef:f9:1a:33:de:d6:17:3b:37:0c:ce:48:66:83:f9:77:fc:ba:
         24:f9:72:3e:f5:63:2f:46:47:f6:ba:58:42:b6:92:29:0a:de:
         f9:20:2b:41:07:be:a7:1f:37:d8:df:25:15:5d:0f:08:75:82:
         ff:8c:58:f7:f2:e5:f5:08:46:a8:a0:5f:05:e3:c7:bd:8f:dc:
         d5:f1:c3:71:02:ed:6a:9c:b5:72:78:e4:1a:f4:49:1e:aa:d8:
         22:25:f1:dc:dd:6f:e9:cb:95:4c:4d:91:62:a8:b6:76:bb:a9:
         89:18:e4:ed:87:85:c4:6a:20:2b:d0:5c:e0:07:df:78:b2:d8:
         e9:d3:a6:44:bc:43:19:78:60:4e:5c:7e:94:d4:d4:cc:d3:5c:
         eb:b5:4a:c2:89:2f:fa:ac:d2:69:cf:8e:00:9d:0e:96:b5:04:
         23:23:fd:71:32:72:09:aa:22:05:88:b9:f2:1d:b8:59:77:01:
         1c:16:d2:89:e4:5e:f9:44:dc:27:2e:09:42:dc:20:c9:f0:71:
         41:15:63:3e:18:bc:3f:1a:99:6b:81:cc:89:eb:a9:a9:33:c2:
         1f:2a:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:30 2024 by rpki-client on console-fra.rpki-client.org