Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
File:                     36B1CD340A6D11ED89FD3F13C4F9AE02.roa (raw, json)
Hash identifier:          62sXJWlT3h3nHyOfMwNf6c+ar5aY+tJqwoFwwPI3cac=
Subject key identifier:   0E:B8:87:3C:06:78:AF:10:E6:FE:A6:1A:E0:C4:17:B1:59:3B:13:A3
Certificate issuer:       /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
Certificate serial:       0270
Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 03:56:50 +0000
ROA not before:           Fri 01 Mar 2024 03:56:50 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     134599
IP address blocks:        103.179.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl
                          rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2
        Validity
            Not Before: Mar  1 03:56:50 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e15202-be8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:37:6c:4e:9b:74:e1:c0:54:d0:b5:4e:5e:
                    8b:d6:42:6f:47:1d:29:3c:4f:e2:a2:9d:0a:f2:39:
                    ce:11:79:90:10:da:10:e9:1d:b7:3b:cd:bd:fd:a4:
                    dc:79:07:0a:e4:c1:41:ea:64:58:f5:75:f8:6f:49:
                    73:d9:f1:3e:01:f7:7d:24:76:98:6d:a4:09:d9:a3:
                    c5:cd:1e:f9:83:52:e9:9b:3d:87:6d:ae:0e:af:23:
                    38:f0:88:ad:6b:24:49:1c:64:9a:8d:73:09:33:35:
                    d0:68:16:e6:8d:97:99:4a:b6:57:da:01:42:89:d2:
                    c9:e6:ac:64:47:91:89:83:f1:3a:09:64:e3:00:5a:
                    54:1f:66:ec:cf:53:d8:f0:87:6f:d1:24:f2:d9:af:
                    07:9e:8e:78:24:01:e2:36:a8:e6:35:67:e5:ba:ea:
                    74:16:12:bc:3b:e7:01:76:4d:4a:a5:10:07:97:b9:
                    88:ce:a0:47:12:98:48:42:30:88:28:1e:99:f6:65:
                    ed:26:02:85:b2:b2:7d:dd:a7:65:6f:1f:fd:4a:d7:
                    2b:d7:f4:fc:46:b4:e7:73:aa:21:98:32:a9:0b:f9:
                    60:3d:e1:7b:4a:48:da:74:a4:c6:93:90:1a:dc:41:
                    56:37:b1:05:5e:f1:63:e2:37:2b:32:7a:c5:f0:08:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:87:3C:06:78:AF:10:E6:FE:A6:1A:E0:C4:17:B1:59:3B:13:A3
            X509v3 Authority Key Identifier:
                keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/36B1CD340A6D11ED89FD3F13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:29:d0:b5:43:d4:17:9a:ad:c8:a5:95:ff:c4:60:51:94:cf:
         12:77:77:45:be:38:95:03:c2:98:1f:cb:51:7b:c3:97:8a:67:
         78:0a:96:6c:c8:ec:8e:4c:82:ea:1a:ea:c8:ae:21:b4:a0:98:
         89:3c:98:0e:17:94:0c:d9:07:88:3b:69:9f:58:cb:3e:17:58:
         42:5e:d1:a1:78:d0:14:6f:3f:8a:88:4e:0b:cd:64:e2:8c:41:
         c0:31:af:24:22:30:f4:80:ad:56:a1:af:ee:f0:fc:14:a3:6c:
         76:50:de:91:59:30:84:ae:23:cf:f2:4a:a2:d6:6c:e5:a3:de:
         6d:7d:9f:a7:ca:b3:0b:fb:5b:8e:5b:fa:52:d6:be:5f:6b:11:
         b4:ff:9c:f3:f6:bd:dd:5d:89:8d:dd:e7:da:3e:fd:2f:cf:18:
         5c:2e:d8:c4:13:61:4a:e5:2c:2a:2e:85:c2:f5:fa:6f:c3:a2:
         54:dd:f8:60:22:b6:1c:82:c7:e5:3d:e0:b6:34:d7:f3:c6:4d:
         97:ad:4e:80:c2:56:f6:a8:9a:a9:e6:ea:8c:f7:b6:8e:a6:97:
         f9:74:4c:d4:f0:3f:cb:ab:f9:e9:29:1a:af:e2:dc:b7:a9:af:
         c4:fc:b5:33:b6:5a:60:6f:e4:d9:d9:d0:e9:87:62:07:be:7c:
         0e:f4:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org