Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
File:                     076948B2428E11EF912F3710C4F9AE02.roa (raw, json)
Hash identifier:          TUrfxp2ZB674b0yMhOuMDImIoCsh/4WxM1ekk3XEVBs=
Subject key identifier:   DC:82:72:D5:46:37:66:42:51:A9:3C:D5:22:F1:2B:F2:FD:DE:7E:3B
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       0749
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
Signing time:             Tue 08 Oct 2024 21:30:30 +0000
ROA not before:           Tue 08 Oct 2024 21:30:30 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     58601
IP address blocks:        103.243.80.0/24 maxlen: 24
                          116.206.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865 (0x749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Oct  8 21:30:30 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6705a475-dfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:41:49:be:c6:8e:20:65:69:52:24:71:35:
                    c2:b4:b6:ef:dd:62:e7:0c:1f:07:f4:fd:42:47:99:
                    16:c0:bb:d5:8e:a1:04:f0:1f:42:51:d1:8f:bf:2d:
                    b7:e3:71:4a:45:21:2c:7b:bf:cb:e5:fa:d3:6c:22:
                    8d:0b:74:c1:c5:10:ac:eb:bb:bb:28:b2:e6:e9:32:
                    9d:d4:91:ee:ea:6c:e0:de:0e:7c:87:f0:58:6a:62:
                    22:0b:80:e6:5c:f7:32:4c:22:53:93:f7:6b:9f:14:
                    23:8c:ce:ee:40:f8:9a:64:7b:a3:31:93:d1:a4:6f:
                    71:97:e9:99:ef:bc:2b:2b:0c:32:b5:6d:38:43:cc:
                    50:ea:ae:04:a3:9a:80:77:33:3e:35:71:7a:ac:67:
                    97:8a:2a:ae:f5:8f:4b:52:e2:48:bc:6c:dc:87:5d:
                    04:97:f8:91:ca:9c:20:75:b1:f6:35:26:42:11:64:
                    8c:59:5d:a6:ab:d1:ef:e7:ba:8d:1c:5e:0e:48:f3:
                    16:04:56:06:67:32:2a:0d:95:e2:93:67:1a:70:cd:
                    de:f5:d0:bf:9e:a1:3b:c9:5b:ad:8c:17:d1:97:7c:
                    6e:4e:db:83:d4:34:66:a1:cc:7d:22:12:85:0b:32:
                    e8:6f:1e:3c:ff:36:7a:66:7a:48:d5:08:c2:56:bc:
                    a4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:72:D5:46:37:66:42:51:A9:3C:D5:22:F1:2B:F2:FD:DE:7E:3B
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/076948B2428E11EF912F3710C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.80.0/24
                  116.206.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:9b:bd:b6:b7:df:84:52:07:49:03:a4:1a:b2:4d:d5:17:
         fb:ca:1a:32:82:26:9f:b8:cb:b9:2b:59:24:65:f5:d2:6a:63:
         6e:57:4f:cc:8f:3a:e6:e7:d4:4a:db:ca:4e:00:7a:11:d5:ac:
         2d:d8:eb:5d:cd:00:8d:63:e6:a7:48:b4:15:c4:ea:00:14:81:
         4b:5d:61:db:f0:8d:31:8c:ae:15:fe:37:f3:a0:c3:9c:30:d4:
         93:9f:6d:42:98:ba:eb:7f:94:21:ac:c8:3a:98:2d:a5:bd:c5:
         e3:90:dd:50:2a:ad:a1:ec:1e:18:53:c6:0c:eb:10:2b:6b:6c:
         4b:f8:f6:9d:23:72:56:57:01:7b:5c:fa:62:db:e5:9c:aa:ce:
         81:69:6d:2b:a2:9f:96:fd:7f:de:78:b9:ec:d3:bb:cf:ec:51:
         93:e2:88:be:9d:e6:37:cb:40:94:ff:4c:ab:ad:69:57:6b:f0:
         95:b2:9b:34:81:30:27:50:25:25:38:cb:c4:57:43:1a:a1:cb:
         53:d5:77:9b:35:7a:77:f0:8f:9a:d8:72:e3:c4:01:5e:b1:65:
         81:e0:7a:1e:26:af:e5:5a:0e:6a:fc:5e:fc:b6:a5:d5:29:1a:
         43:86:be:f9:92:7f:1b:7e:aa:cb:4d:cc:62:2f:b5:64:be:80:
         40:90:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org