Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
File:                     6079B40AD98211EBAA210852C4F9AE02.roa (raw, json)
Hash identifier:          TG8IQz+xUhIYqjVF9B+CTvKyQQTT3laiqwgO8abnyA8=
Subject key identifier:   EF:8D:CC:AA:D0:DE:C1:A0:E9:A9:9D:15:87:F0:B3:38:FF:3A:6B:EB
Certificate issuer:       /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Certificate serial:       048F
Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
Signing time:             Fri 12 Jan 2024 14:44:05 +0000
ROA not before:           Fri 12 Jan 2024 14:44:05 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139927
IP address blocks:        103.147.106.0/23 maxlen: 23
                          103.147.106.0/24 maxlen: 24
                          103.147.107.0/24 maxlen: 24
                          2001:df2:9180::/48 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
                          rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
        Validity
            Not Before: Jan 12 14:44:05 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a15034-ba82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:13:c7:03:aa:b0:a0:d9:11:4b:b6:47:53:
                    06:92:ab:26:50:ea:15:3b:9f:8c:d3:36:12:ff:32:
                    3f:1e:a6:44:99:71:b3:99:37:10:3f:20:75:80:8e:
                    83:f1:0e:97:c2:9c:12:31:a3:44:f4:a9:29:c4:a7:
                    b7:c6:4a:d6:95:f9:1f:b0:fe:ec:7f:46:dc:bb:9e:
                    f3:4a:73:95:36:9c:ea:13:7c:76:ec:bc:51:93:0c:
                    cf:18:66:bf:5b:62:18:ae:19:b9:2b:93:be:ca:e0:
                    9d:1b:f4:ee:43:40:c6:14:ae:32:46:cf:04:2a:3e:
                    63:af:9d:6e:f8:11:8a:f4:f9:8f:52:dc:0f:c3:80:
                    a0:df:49:af:c0:f8:80:e3:2a:c9:1f:53:7f:34:21:
                    ab:95:b8:64:65:7c:85:63:5a:ef:72:08:76:ad:4c:
                    34:2d:03:83:8b:2c:52:04:8e:b1:a9:53:d5:13:55:
                    eb:40:43:2e:1b:d9:af:e2:7e:99:e0:f4:9c:51:64:
                    9b:52:f3:aa:78:d8:e5:85:e4:46:1e:d2:38:c9:a1:
                    68:2f:6c:a0:68:e9:19:01:36:98:85:0f:ed:3e:13:
                    4b:3b:41:a9:12:7f:68:fd:9d:18:20:0f:10:d0:da:
                    8c:13:03:b5:b9:ee:cc:19:a4:c8:9d:8f:7a:50:77:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:CC:AA:D0:DE:C1:A0:E9:A9:9D:15:87:F0:B3:38:FF:3A:6B:EB
            X509v3 Authority Key Identifier:
                keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/6079B40AD98211EBAA210852C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.106.0/23
                IPv6:
                  2001:df2:9180::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:94:37:8a:2c:40:07:cd:b7:01:eb:7d:cc:81:1e:11:dd:
         6b:07:ad:4f:8b:54:04:cd:63:91:7e:77:2f:ef:2c:5b:fe:dd:
         a5:7f:7c:3e:09:a4:77:dc:0d:e8:0d:d9:1e:e8:02:40:cc:6c:
         e8:b9:de:0a:1c:67:49:dd:db:ba:6d:0b:87:ec:d3:b8:c8:03:
         36:a8:f9:e5:f0:26:f3:eb:2a:15:99:46:1d:3d:2e:c0:1f:22:
         66:f8:ea:3b:1d:4f:2f:de:29:90:81:5f:44:91:8a:14:29:d9:
         5d:7c:dc:77:d5:51:0b:8e:3a:4a:c3:5f:68:2c:b3:71:c0:c9:
         b1:e3:7a:c3:f1:3d:4b:40:09:82:ca:1b:97:62:ee:07:c7:f3:
         f9:7c:33:da:73:2e:14:a8:20:e4:c0:42:7d:9f:ff:99:65:5e:
         d2:0a:28:8f:cf:05:65:94:3f:5d:3f:1d:13:0c:ce:89:5a:31:
         f6:a9:62:e7:c3:a6:41:29:c9:54:6a:9b:b0:14:59:04:0d:bc:
         4a:8e:4b:1d:8c:80:27:e7:18:4f:af:bb:69:c1:e6:01:40:c6:
         d8:95:15:f2:b9:71:b1:b3:ac:70:2f:9e:1f:57:ac:b8:37:29:
         9b:a3:b2:ba:cc:24:95:ba:da:6d:93:02:64:c1:dd:18:12:63:
         59:ec:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:36 2024 by rpki-client on console-ams.rpki-client.org