Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/79520888650611EBA9BB2882C4F9AE02.roa
File:                     79520888650611EBA9BB2882C4F9AE02.roa (raw, json)
Hash identifier:          l7MBg6NTbZW3WM5Z+8E9Je+cxLIltVNbF/S3Q9wGO2s=
Subject key identifier:   D3:E7:64:D8:97:F8:A9:F8:29:7E:D0:81:6E:1E:94:A9:FD:B0:8A:2A
Certificate issuer:       /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
Certificate serial:       05E4
Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/79520888650611EBA9BB2882C4F9AE02.roa
Signing time:             Wed 03 Apr 2024 00:32:43 +0000
ROA not before:           Wed 03 Apr 2024 00:32:43 +0000
ROA not after:            Thu 01 Aug 2024 00:00:00 +0000
asID:                     62468
IP address blocks:        45.251.136.0/24 maxlen: 24
                          103.225.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1508 (0x5e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684
        Validity
            Not Before: Apr  3 00:32:43 2024 GMT
            Not After : Aug  1 00:00:00 2024 GMT
        Subject: CN=660ca3ab-26d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:27:7c:99:c2:46:7a:c2:19:5e:36:c0:66:
                    1a:33:4b:57:20:bb:e1:35:3f:3b:43:2a:8a:e9:4d:
                    ae:75:56:97:ad:2c:61:43:d4:04:7c:62:7b:5b:49:
                    12:ef:ba:db:04:32:58:8d:9e:02:d3:f4:a2:a4:79:
                    a6:a9:dc:3a:e0:aa:1f:f4:a0:b1:17:f0:8d:47:76:
                    22:34:a0:d9:ef:7e:1e:1f:94:c6:2c:7c:f7:d9:c2:
                    ba:82:65:65:e7:1c:d2:ad:07:6e:bf:65:2f:86:ed:
                    2d:6e:1f:33:0a:c2:81:19:ae:4d:50:df:73:60:e6:
                    d3:eb:bf:36:1a:b3:a8:a8:f9:8d:77:ba:8e:5a:5b:
                    ea:27:94:aa:15:55:ad:94:e3:f5:d6:d0:f1:cc:ed:
                    c1:40:ea:7e:ad:14:87:4a:f9:2c:fa:d2:d4:65:3c:
                    64:5c:48:19:90:10:35:af:96:d4:f6:da:0b:10:69:
                    fa:ba:ff:76:90:ca:69:a9:31:31:79:71:ec:0a:6b:
                    0b:c8:08:a2:37:d4:05:38:49:b0:3a:c3:72:cb:0f:
                    12:32:2c:23:83:bd:57:43:b7:de:0c:4c:a9:d5:80:
                    0e:89:fb:69:74:71:ab:c5:79:24:02:09:b4:72:65:
                    a1:c7:41:bc:a4:e7:e1:53:98:27:30:c7:67:80:1a:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E7:64:D8:97:F8:A9:F8:29:7E:D0:81:6E:1E:94:A9:FD:B0:8A:2A
            X509v3 Authority Key Identifier:
                keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/79520888650611EBA9BB2882C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.136.0/24
                  103.225.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:60:3f:df:95:0a:f0:3c:5b:22:51:ef:fb:b3:ea:4c:a1:
         c0:0d:17:57:61:9a:06:89:eb:00:b8:cb:df:12:57:bd:38:7b:
         0c:1e:7a:42:0d:02:a3:5c:a0:ef:98:c1:2c:34:f7:1f:13:94:
         05:61:2f:03:23:7a:d9:b2:08:94:72:f2:20:92:01:ca:7b:cd:
         52:32:22:26:e3:d9:2e:93:47:9a:06:be:37:71:ae:11:e6:e8:
         53:a0:67:df:8c:e5:bb:18:38:84:95:81:e6:b2:00:66:52:25:
         39:dd:db:56:8f:f6:e6:4a:35:da:39:54:c1:d0:61:fe:db:ac:
         1e:26:c6:18:4f:11:56:ce:14:4e:e9:6d:f1:6f:81:27:9c:cd:
         b9:fe:8c:e2:14:d1:67:6b:4c:96:5d:42:87:47:7f:cd:18:c0:
         9a:f5:81:11:69:fa:86:c0:8b:cc:ab:e6:30:7d:cb:e7:27:23:
         dd:cb:21:6b:c8:b2:58:d0:4d:8b:00:f8:cb:34:52:ac:8a:57:
         70:24:30:3a:f5:b8:03:ac:de:a6:87:a4:0f:1f:1c:16:55:3f:
         ce:e3:ec:da:30:72:5f:56:fc:0b:b6:fe:6a:1b:3b:a3:3b:86:
         50:32:ae:0b:34:cb:26:b1:e9:32:a6:57:c9:a5:49:2c:a3:9f:
         51:8c:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:31:15 2024 by rpki-client on console-fra.rpki-client.org