Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
File:                     6A4842A69F8611ECBE806D30C4F9AE02.roa (raw, json)
Hash identifier:          vZ6MvUd27mPzfp5A96TFmJZRSLkOxkRd29pgThht6lg=
Subject key identifier:   AF:29:E8:E6:70:7B:AD:B3:AA:E1:C4:E9:7A:F9:60:96:F4:19:AF:DB
Certificate issuer:       /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
Certificate serial:       02E5
Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
Signing time:             Fri 21 Jun 2024 02:33:28 +0000
ROA not before:           Fri 21 Jun 2024 02:33:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     138915
IP address blocks:        103.152.98.0/24 maxlen: 24
                          103.152.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl
                          rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF
        Validity
            Not Before: Jun 21 02:33:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6674e677-3f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:4e:e5:f6:e1:8b:61:c3:38:97:dd:13:9e:
                    a0:27:50:73:52:1d:b9:fd:38:ee:77:d4:4c:d6:54:
                    97:29:43:a7:94:06:e5:70:f0:fa:24:fa:79:0c:5c:
                    d1:87:f8:80:77:68:55:54:8b:e4:62:3e:23:72:29:
                    63:df:97:dc:57:bb:ed:20:04:08:88:36:a4:28:59:
                    1d:98:e7:b2:2b:b9:97:cd:dc:85:51:ff:4e:26:0d:
                    02:99:7c:c3:a3:83:0a:bb:82:9a:af:a2:1b:b7:7c:
                    80:7f:65:b8:a5:41:c0:9b:3a:94:51:9a:c5:b2:fc:
                    94:44:c3:6c:e7:6b:16:bb:4f:09:e2:80:e3:d7:a0:
                    48:a7:30:40:04:7a:95:b1:a0:dc:fa:91:29:66:6e:
                    5d:53:24:b5:8c:34:00:7e:00:f9:17:31:da:62:c5:
                    e7:59:2a:bd:10:26:da:df:62:85:1c:7d:96:47:a4:
                    83:20:81:dc:02:3b:74:52:d0:2e:a0:85:f2:ed:5a:
                    29:68:23:b7:38:74:c5:06:5f:3f:66:2b:0f:68:b0:
                    b0:af:ae:b2:0a:04:93:ec:46:53:5c:1d:25:1e:05:
                    d4:14:f0:b6:df:f1:65:a3:ef:20:6c:a8:1a:e2:17:
                    e7:c8:0c:d3:de:1c:f2:aa:76:a8:bd:79:87:25:11:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:29:E8:E6:70:7B:AD:B3:AA:E1:C4:E9:7A:F9:60:96:F4:19:AF:DB
            X509v3 Authority Key Identifier:
                keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/6A4842A69F8611ECBE806D30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:2e:eb:6f:9d:07:fe:da:5e:10:32:9f:c3:11:bb:69:f2:28:
         a9:2d:cd:d6:83:5f:99:3f:59:15:78:b4:6f:36:1e:c8:a3:61:
         ed:9a:58:1b:ae:b3:8a:70:5a:81:61:b9:98:1a:bc:14:dc:d1:
         51:e1:2a:31:0b:a8:d8:65:91:10:cd:2b:da:4d:cf:69:df:2b:
         49:7f:d3:c4:bb:a9:8c:82:90:06:13:b0:05:eb:b4:d8:a2:1b:
         09:3d:11:1d:4e:1f:61:f9:b5:79:73:8f:6c:93:f5:7d:26:0d:
         1e:af:74:2c:8e:f2:22:97:a3:08:9b:92:37:f9:db:85:f0:58:
         ca:19:df:e1:f4:c6:4f:7b:e6:0f:db:f4:96:de:17:9e:e9:28:
         27:ff:e6:7e:81:89:3c:4e:5d:36:bc:b5:d5:31:df:61:f9:3b:
         6e:49:01:1c:ce:19:cc:81:7d:f4:f4:b4:8c:28:70:dd:b8:78:
         ed:94:dc:b3:a4:84:ae:cd:88:f5:20:92:18:aa:46:5a:6f:3d:
         96:cf:95:cb:3a:f1:02:d5:39:6d:fc:e8:9f:3f:76:1e:5d:18:
         37:4e:ab:d4:a2:8c:21:00:f8:35:29:fd:8d:56:2f:c6:8d:2a:
         4c:56:fe:bb:5d:61:ef:bf:84:df:4d:52:a2:28:c1:f8:6a:87:
         7d:96:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:34 2024 by rpki-client on console-fra.rpki-client.org