Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/76EF24FE7B2711EBB00AAE16C4F9AE02.roa
File:                     76EF24FE7B2711EBB00AAE16C4F9AE02.roa (raw, json)
Hash identifier:          15s9GGtV9r2X3ENjyLsJWCxlo86maWdm8NO5zkuQdRk=
Subject key identifier:   76:ED:57:6F:3F:97:98:EC:A8:97:AE:61:F4:46:25:48:2C:54:69:CF
Certificate issuer:       /CN=A91287DA/serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
Certificate serial:       05C9
Authority key identifier: 37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/76EF24FE7B2711EBB00AAE16C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 01:04:44 +0000
ROA not before:           Mon 03 Jun 2024 01:04:44 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17439
IP address blocks:        103.139.74.0/23 maxlen: 24
                          2001:df0:6e80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481 (0x5c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91287DA/serialNumber=379D1547BBBF48C253C93E8D43267D4EFBD9B684
        Validity
            Not Before: Jun  3 01:04:44 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665d16ac-f7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:58:f8:ca:ab:06:7e:df:6e:16:2d:79:5a:
                    83:3e:d0:86:69:97:3f:13:37:d6:a5:19:c0:1a:70:
                    cc:5f:7e:3b:4c:3a:ea:22:1e:af:1a:e6:27:d2:91:
                    9e:7e:2f:d8:c8:6d:a6:3c:6a:15:f1:78:fe:c0:5c:
                    0f:d4:c9:2c:82:6d:93:c8:2d:02:48:8e:23:ae:b0:
                    3e:a2:8d:83:a5:69:1e:4c:99:2e:89:80:21:1d:fd:
                    86:0a:ef:60:a0:6e:fe:4e:44:cf:d8:49:a3:7b:d1:
                    af:af:94:c2:f2:39:40:0a:56:ed:3e:d8:02:55:de:
                    6e:3b:91:39:61:3c:61:c6:01:4c:6c:ad:f7:83:be:
                    e2:45:81:d5:30:d6:8c:5d:07:81:6f:0a:d1:eb:e0:
                    b9:52:ff:96:03:a2:f7:dd:0c:e2:a3:c5:9d:7e:0b:
                    9b:ac:ad:41:1c:ee:35:a3:fb:7e:84:30:26:8f:13:
                    0b:6a:0a:e2:63:92:32:1e:4d:40:73:02:5e:b2:3a:
                    8d:7c:d5:32:13:46:6e:c1:b0:4f:2e:43:96:30:93:
                    bc:03:02:e6:0d:dc:24:dd:35:a0:f3:f8:d9:44:39:
                    bf:f1:c9:b7:6f:75:67:75:08:e4:31:78:d1:52:48:
                    61:b6:65:60:19:d2:80:ae:26:f4:56:5a:e6:1c:27:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:ED:57:6F:3F:97:98:EC:A8:97:AE:61:F4:46:25:48:2C:54:69:CF
            X509v3 Authority Key Identifier:
                keyid:37:9D:15:47:BB:BF:48:C2:53:C9:3E:8D:43:26:7D:4E:FB:D9:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N50VR7u_SMJTyT6NQyZ9TvvZtoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91287DA/089251A87B2611EB8FEBC515C4F9AE02/76EF24FE7B2711EBB00AAE16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.74.0/23
                IPv6:
                  2001:df0:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:fc:58:c5:4b:12:88:20:e1:41:ec:cb:b9:10:28:a9:e4:
         5c:fc:a2:88:f0:e9:fa:4e:ca:f1:12:fa:ee:3a:1d:c5:da:0c:
         b0:8d:ad:a3:38:96:ae:84:b3:e4:3c:9e:dc:e5:fd:a4:f6:0e:
         d0:37:c5:35:c4:78:47:65:45:6b:20:04:d2:d0:22:01:dd:ab:
         cf:44:d1:90:65:9b:86:be:c9:98:1a:16:e6:35:38:cc:5a:fa:
         e9:80:67:b7:24:77:8c:9d:d2:a5:58:2d:4b:f0:1a:08:51:2a:
         28:2d:14:e9:f7:82:b8:36:ba:49:52:b5:fd:68:6c:6d:b4:e4:
         24:96:1b:fc:f6:21:bb:1e:b3:20:7b:3b:8f:09:28:22:d0:07:
         73:ad:b8:4a:a4:4c:fe:66:1d:e3:05:1e:b8:2e:32:40:20:64:
         36:bc:a5:06:15:47:ed:3c:fb:d5:60:fa:76:d7:51:f8:fb:ed:
         03:7b:48:8c:e5:e3:9b:6b:d4:49:d1:3f:3e:63:dd:75:f4:69:
         a3:67:c3:74:e1:25:e7:c0:c9:69:aa:97:db:75:9a:9d:fe:c0:
         ab:d4:d0:0c:06:23:72:29:af:30:de:22:0a:ad:3c:09:1d:7c:
         48:cf:cc:ee:4d:69:e5:6c:f0:9a:93:3b:00:d0:69:35:e0:47:
         8c:6d:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:43 2024 by rpki-client on console-fra.rpki-client.org