Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/4A9AA792720D11EC90C07770C4F9AE02.roa
File:                     4A9AA792720D11EC90C07770C4F9AE02.roa (raw, json)
Hash identifier:          dFDSZakkdJDUIpcwLdntG9c3BeJfWUEXXOwcrxghAfY=
Subject key identifier:   FC:9B:FB:E0:47:24:FE:55:C5:14:85:B7:BC:0D:8A:79:BA:15:29:6C
Certificate issuer:       /CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
Certificate serial:       0303
Authority key identifier: CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/4A9AA792720D11EC90C07770C4F9AE02.roa
Signing time:             Fri 05 Jan 2024 02:44:32 +0000
ROA not before:           Fri 05 Jan 2024 02:44:32 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149425
IP address blocks:        103.179.60.0/23 maxlen: 24
                          2001:df0:49c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl
                          rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142BA8/serialNumber=CA559412E2A238021A94EF2718EDB001EF96EA85
        Validity
            Not Before: Jan  5 02:44:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65976d0f-a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:b3:e8:44:c2:8e:2d:8f:8e:13:88:af:cd:
                    a7:93:8d:6b:8b:9e:0a:2e:3d:83:9e:c9:da:66:0c:
                    9b:27:c6:a0:7e:36:3a:a2:5b:4f:93:c5:8f:23:78:
                    b3:9d:e0:11:8b:48:da:d4:9f:db:d7:cb:a6:82:0a:
                    5c:ce:e8:e2:aa:e5:b1:4b:9f:d8:97:e5:c0:35:70:
                    14:5e:e5:7a:6b:bd:ab:44:40:5d:ad:cf:2e:d1:d6:
                    59:6b:e3:bc:67:7c:49:28:df:76:1a:6e:5d:a0:35:
                    e1:71:1f:b3:b2:00:f5:b7:df:b2:54:88:1c:c1:ec:
                    a3:1b:c1:f2:29:5e:d9:a4:80:08:4c:e3:bf:e3:59:
                    16:17:16:fd:30:f5:85:8b:35:a5:7b:0f:9c:ef:c6:
                    4f:1e:99:88:b7:cd:cd:79:9d:74:9b:0c:84:7a:ef:
                    67:1a:8b:48:95:f7:0d:e4:51:de:27:95:a0:c8:77:
                    e1:38:6f:e9:74:be:81:ef:13:ee:f5:42:c8:6f:b2:
                    46:a9:18:6f:3c:f4:57:79:f4:2b:b3:cb:2c:71:6e:
                    f8:82:ed:8d:03:4d:ee:d4:e4:92:b1:20:f3:c9:90:
                    4c:c6:ea:2d:31:2e:8b:77:88:57:63:ff:a7:bc:9c:
                    01:e8:ad:45:54:99:c5:3d:71:9b:a3:9e:51:99:d3:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9B:FB:E0:47:24:FE:55:C5:14:85:B7:BC:0D:8A:79:BA:15:29:6C
            X509v3 Authority Key Identifier:
                keyid:CA:55:94:12:E2:A2:38:02:1A:94:EF:27:18:ED:B0:01:EF:96:EA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/ylWUEuKiOAIalO8nGO2wAe-W6oU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylWUEuKiOAIalO8nGO2wAe-W6oU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142BA8/DE78D58C720911EC9D93BB6CC4F9AE02/4A9AA792720D11EC90C07770C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.60.0/23
                IPv6:
                  2001:df0:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:4e:34:24:63:0c:29:60:86:f9:3b:82:b6:af:d5:53:ea:27:
         2f:67:fb:98:ae:da:b8:8e:2f:66:58:19:8d:de:b9:7b:80:3f:
         75:50:1a:94:01:da:40:70:f4:7f:ee:4e:bc:ce:90:ed:4c:f4:
         30:77:22:70:0b:0f:35:6d:40:b9:0a:1d:dd:11:b6:34:48:75:
         6f:bc:4f:71:6e:a1:84:04:16:76:d6:10:6e:ae:29:4e:eb:4a:
         64:e2:5f:b2:d6:6e:e7:2a:dc:29:60:65:d0:dc:c6:8c:35:18:
         9b:f8:a4:34:70:8d:66:ef:39:14:b4:3d:1c:e9:66:ef:fa:4d:
         4b:3c:22:6f:ae:70:2c:04:63:e2:10:b1:30:5a:0e:13:fd:0f:
         ff:1c:9f:c1:20:38:33:f7:0d:b3:b7:36:ee:d6:19:36:56:ea:
         af:4a:6e:ff:10:81:f9:fc:f5:11:c8:c7:e1:d6:ca:04:9c:2c:
         d3:8c:bb:b7:a6:27:46:e0:cf:53:a1:61:aa:61:0e:30:87:a2:
         35:b7:5c:f6:e8:a7:04:3c:10:be:bf:f8:e7:9d:55:b0:e9:6d:
         b2:c5:18:94:40:dc:70:0c:4d:e6:98:92:03:ba:f0:76:fe:f9:
         cf:aa:83:80:b3:09:52:92:9b:07:6f:2b:70:da:dd:58:d4:92:
         c5:32:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:35:06 2024 by rpki-client on console-ams.rpki-client.org