Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa
File:                     279EE41683E111ECBB82F47DC4F9AE02.roa (raw, json)
Hash identifier:          ngK147vMs6q/RHxhjfKLOtDjm0hQwKZIJBdKYWfYSHs=
Subject key identifier:   EF:B2:BA:16:D8:F2:EF:F3:FB:12:76:9B:2F:FE:13:D5:F0:64:38:73
Certificate issuer:       /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
Certificate serial:       036A
Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa
Signing time:             Sat 23 Dec 2023 02:13:59 +0000
ROA not before:           Sat 23 Dec 2023 02:13:59 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133326
IP address blocks:        103.176.120.0/24 maxlen: 24
                          2001:df0:dc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl
                          rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65
        Validity
            Not Before: Dec 23 02:13:59 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65864267-8a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:9f:62:98:c9:70:a6:d9:7f:32:83:78:0f:
                    40:bb:33:15:93:f3:fb:98:d4:5e:c4:ce:6d:00:81:
                    ae:22:9b:b1:f9:7c:c0:9f:77:9d:b7:a9:ea:c7:d1:
                    90:fe:bc:f3:dd:03:e5:d2:1a:38:21:d8:97:bd:f6:
                    6c:81:43:82:3c:3f:00:d3:e9:ae:d4:68:34:1b:f4:
                    c7:32:56:25:02:c3:a9:84:e6:a6:93:fe:63:29:c8:
                    7c:b0:65:78:29:af:bb:13:c3:34:e9:c1:59:85:06:
                    f5:07:17:53:13:4c:3a:3f:29:18:aa:50:63:1c:db:
                    90:87:6f:31:28:a7:7d:bf:b7:a8:7b:6a:30:c3:3e:
                    65:d0:9c:86:2e:c7:31:4c:00:6a:6b:c2:45:bd:15:
                    ce:3b:42:bc:97:43:7b:48:ff:2b:29:c9:42:2b:0f:
                    46:58:02:95:b1:ed:49:cc:ce:3b:df:99:00:73:0f:
                    64:29:7d:3d:95:59:f1:9d:34:02:dd:4b:e2:83:22:
                    c9:51:ef:e8:62:bb:f7:4a:be:ee:2d:c5:e0:67:e1:
                    b9:26:d5:93:42:43:74:a2:b8:8c:21:2f:ea:0c:27:
                    1d:f5:87:77:5c:ae:b2:a7:8f:31:6e:be:3f:a9:5d:
                    f0:8e:bf:83:7a:12:02:ea:ad:f7:42:80:88:8d:67:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:BA:16:D8:F2:EF:F3:FB:12:76:9B:2F:FE:13:D5:F0:64:38:73
            X509v3 Authority Key Identifier:
                keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/279EE41683E111ECBB82F47DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.120.0/24
                IPv6:
                  2001:df0:dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:99:5a:8c:54:ac:d1:46:f9:5d:bc:af:0a:ae:d8:5c:77:
         f0:9d:62:12:cd:ad:a8:ce:e4:3f:65:d5:38:28:1a:2d:3b:6a:
         8c:b3:4b:70:07:1f:fb:ac:3e:bd:30:bf:58:cd:d2:79:e5:94:
         25:62:19:23:65:ff:3e:0d:f8:f1:4f:38:9a:9f:9b:bf:93:c9:
         10:ed:06:3a:7f:64:8f:fd:3a:d0:da:c4:b0:53:d8:ce:3c:81:
         fe:67:3e:a9:85:1e:34:f0:ea:a1:19:27:73:18:02:c1:ca:4a:
         e5:17:04:68:09:2f:bc:9f:16:a8:12:10:17:3d:7e:7e:d3:e8:
         24:f7:ee:ad:9b:08:99:df:e0:34:d9:7e:f8:a8:64:57:83:a5:
         48:ce:d8:a2:59:e6:cf:56:70:c4:92:2a:c4:6d:7d:9e:d8:6c:
         8f:fa:60:fd:51:5f:28:4b:d8:34:ef:e2:30:a7:6f:96:c4:8b:
         e9:06:47:15:63:97:21:cb:b9:ff:f4:6c:f7:67:91:6a:28:f7:
         48:fa:b1:c1:6c:d1:40:6b:72:d3:22:e5:2c:16:18:6a:67:b8:
         df:f4:68:58:cd:06:d3:24:6a:ee:ad:a0:ea:86:ab:39:2d:90:
         de:05:a8:cb:34:bf:5a:ac:d5:86:eb:1f:73:f5:de:61:78:5b:
         40:28:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org