Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
File:                     04679AF66F3411EF833F4C23C4F9AE02.roa (raw, json)
Hash identifier:          qmtBKcItw4zamP5piJpoDvSbfjr++V2rBsBO/gGjHLk=
Subject key identifier:   1B:8B:B2:B1:24:78:4B:61:03:8D:F0:80:15:41:FF:3F:BB:F4:0E:1A
Certificate issuer:       /CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
Certificate serial:       02
Authority key identifier: 0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
Signing time:             Tue 10 Sep 2024 05:17:48 +0000
ROA not before:           Tue 10 Sep 2024 05:17:47 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     138662
IP address blocks:        103.135.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl
                          rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A8E2/serialNumber=0C05243B7EF55611E40A4DBBF7FE7E912092A652
        Validity
            Not Before: Sep 10 05:17:47 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66dfd67b-ddd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:3a:89:28:10:d9:47:cd:4d:cc:b1:32:c7:
                    c6:ef:db:ac:b6:89:54:37:cf:69:fd:ee:99:bd:c8:
                    03:e2:3e:58:07:a9:36:bb:ca:e5:3c:a4:44:0f:99:
                    6f:26:46:91:69:8a:1d:54:3a:fd:90:0a:db:24:ab:
                    58:cd:68:8d:d7:98:45:4c:3c:bc:54:b3:00:96:45:
                    13:6e:5e:20:99:f1:ea:33:df:98:c9:25:2f:5f:15:
                    2b:dd:cd:53:d7:9c:3c:8d:f3:89:4d:6a:fb:78:d2:
                    98:2d:21:a0:14:bb:32:ff:8a:e2:df:80:5a:c2:13:
                    ef:80:5b:85:ae:08:2b:0f:96:29:85:e6:b0:53:cc:
                    87:0f:65:30:af:9f:a2:db:b3:c6:e1:73:45:12:21:
                    a9:d8:17:91:09:dd:e4:ef:5a:8c:a7:55:ac:3d:38:
                    54:4d:67:2c:03:a6:21:a0:1b:57:72:8b:14:cb:fd:
                    96:a5:72:a1:d2:5c:2f:69:cb:4b:6a:01:2b:b1:19:
                    4d:42:de:5c:77:c0:64:6a:71:c2:92:db:40:a4:c1:
                    5e:49:80:f5:80:04:9c:49:c3:ef:21:3a:92:3a:10:
                    b7:c7:98:d2:34:b7:1c:45:fc:7b:7b:ab:3b:20:e9:
                    70:4e:04:f1:ba:20:43:89:b4:f9:b3:63:c0:77:78:
                    ba:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8B:B2:B1:24:78:4B:61:03:8D:F0:80:15:41:FF:3F:BB:F4:0E:1A
            X509v3 Authority Key Identifier:
                keyid:0C:05:24:3B:7E:F5:56:11:E4:0A:4D:BB:F7:FE:7E:91:20:92:A6:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/DAUkO371VhHkCk279_5-kSCSplI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAUkO371VhHkCk279_5-kSCSplI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A8E2/A451D9846F2D11EFB8F39280C4F9AE02/04679AF66F3411EF833F4C23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:94:45:f4:86:1a:8a:19:e8:9b:48:98:a8:ee:b3:85:42:b6:
         dd:ad:06:9c:4e:59:2e:e8:ef:a1:b2:b5:78:ac:3c:2b:39:61:
         3f:85:21:99:68:bf:4b:17:ca:61:3e:90:d1:fd:fd:d0:c1:8c:
         c5:51:6d:17:e4:84:66:3e:c8:d2:37:65:8d:02:56:97:57:70:
         4c:6a:53:d8:d8:b7:5e:8e:fc:64:84:7b:c3:bc:f6:1c:5f:d3:
         5e:16:1f:2f:4a:95:b7:c8:a7:40:9d:f0:e0:fb:e3:b9:20:f3:
         37:33:97:6a:04:f0:66:8d:b2:c7:d1:2a:b5:e0:91:83:22:8e:
         5d:f8:65:0d:b8:88:af:d3:fa:2e:0d:59:54:ca:42:25:c7:af:
         a2:6a:ab:d6:43:bf:fa:d2:d5:e6:5b:c3:98:34:b5:f5:48:9d:
         45:f7:d6:59:bc:f0:d3:ab:00:cb:64:54:c1:d2:a9:59:be:0c:
         60:f5:e8:db:a4:35:c9:2c:52:ea:80:fd:ff:d4:ba:01:b7:8c:
         2d:3b:2e:cc:62:d7:56:c8:8a:ef:a5:82:c1:eb:92:fc:78:90:
         7d:c2:66:aa:ad:83:37:a4:0a:3b:4a:cf:12:9a:1c:a2:45:43:
         34:b3:b0:77:5f:9e:99:f1:03:bc:81:c9:b6:57:1a:b8:3b:e6:
         6e:0d:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org