Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/59B897AE59EE11EFB2872947C4F9AE02.roa
File:                     59B897AE59EE11EFB2872947C4F9AE02.roa (raw, json)
Hash identifier:          k6IfKNxH4wiErqgB07j5oq4QC0zF0uzZRIPQVRkqxco=
Subject key identifier:   56:75:1C:5B:C7:8A:19:25:13:58:24:0E:1F:22:D0:DC:22:4D:2F:CD
Certificate issuer:       /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Certificate serial:       02
Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/59B897AE59EE11EFB2872947C4F9AE02.roa
Signing time:             Wed 14 Aug 2024 03:36:11 +0000
ROA not before:           Wed 14 Aug 2024 03:36:11 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     139876
IP address blocks:        103.146.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl
                          rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
        Validity
            Not Before: Aug 14 03:36:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66bc262b-217e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:86:17:b3:6c:65:5d:8b:33:83:9a:99:f8:19:
                    30:50:05:be:75:2d:3b:cf:c8:7b:57:70:2e:e4:e2:
                    2f:71:61:20:8a:0e:64:98:60:45:52:7b:12:68:ff:
                    41:88:95:04:af:76:b3:14:da:6a:62:2a:b9:e7:c1:
                    04:18:0d:53:fd:a1:7f:5e:66:2c:85:21:b6:01:ca:
                    96:bf:6d:a9:f9:50:73:81:60:f9:43:3e:22:d1:e3:
                    17:55:e4:57:e7:66:47:78:f9:5e:c8:cc:4a:67:5d:
                    85:c0:6c:de:01:a2:0c:27:01:78:dc:df:10:ff:12:
                    92:bd:f3:d7:f6:41:53:ad:09:8e:4c:a0:b0:e1:65:
                    c2:b7:c7:59:ac:d8:2b:d5:0d:f9:fd:9f:73:bb:29:
                    6c:bd:89:55:ce:7e:b7:02:d1:67:78:a7:d0:c7:2d:
                    f3:2a:2e:96:21:0e:97:0c:b2:64:1d:93:90:b4:a4:
                    ef:1f:17:a4:20:4e:31:bf:73:1e:11:f3:17:ea:7b:
                    b8:8a:19:e7:dd:10:93:00:ba:92:44:4b:e1:05:af:
                    53:94:b5:e1:11:a4:6c:6b:2d:53:1f:66:2d:f0:48:
                    84:d2:ca:31:ce:d8:b6:f8:7a:4f:3a:16:ba:f2:51:
                    60:99:f9:aa:ed:12:bc:af:1a:dc:b7:7c:f3:bf:09:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:1C:5B:C7:8A:19:25:13:58:24:0E:1F:22:D0:DC:22:4D:2F:CD
            X509v3 Authority Key Identifier:
                keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/59B897AE59EE11EFB2872947C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:25:ea:a3:14:30:dd:34:bf:48:c5:c8:f7:cd:5b:49:ba:
         9c:5d:55:a8:d4:f9:bd:38:1e:cf:cd:ea:c1:9c:43:14:c7:5d:
         3f:56:ee:5b:a7:07:1d:cf:6f:be:1e:bf:42:f9:ae:1c:44:e9:
         78:b6:6a:a2:86:af:b8:0b:d1:61:62:38:d5:d9:c7:cb:56:b5:
         da:5e:cb:46:c7:1c:77:75:ee:df:16:66:44:8a:0b:f7:5d:16:
         61:a0:fe:17:3f:12:b9:58:94:ac:57:38:4e:e3:ad:39:fc:e2:
         b0:10:b7:2f:9a:86:f9:e0:47:65:30:ce:5d:35:41:84:0d:02:
         82:b2:28:8a:c9:b0:c9:4d:12:1d:22:23:85:7e:50:5f:4e:77:
         d3:bd:10:04:58:33:6d:e9:4b:8c:a3:45:7d:7d:72:a4:6a:8d:
         33:c6:85:24:c0:bf:e1:cf:4f:47:d6:8c:b1:be:6c:21:23:db:
         ca:fa:da:90:03:e3:7c:c5:c7:f3:02:c6:ea:c5:38:6e:16:10:
         64:20:fc:8b:84:75:c3:ad:05:52:72:9c:4f:9e:6a:a9:ff:58:
         a7:dd:fd:2a:1f:87:e9:4d:6e:2e:2c:bc:df:75:95:0f:48:30:
         98:5c:70:dc:59:7d:16:73:fe:68:1b:96:32:9d:e0:fe:db:f4:
         d9:02:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org