Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa
File:                     61E12BD0CA0611EEB05EB92CC4F9AE02.roa (raw, json)
Hash identifier:          ygmpbmZ4muZogKx3U/M+2PlK1lYAvQY9J31IhnlELfs=
Subject key identifier:   BC:76:C0:10:31:72:82:C9:FA:8E:E9:55:2B:3A:62:5D:5B:28:86:94
Certificate issuer:       /CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
Certificate serial:       0A32
Authority key identifier: B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa
Signing time:             Wed 20 Mar 2024 23:09:31 +0000
ROA not before:           Wed 20 Mar 2024 23:09:31 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     24459
IP address blocks:        103.248.179.0/24 maxlen: 24
                          2001:df3:9140::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl
                          rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 20:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2610 (0xa32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D459/serialNumber=B5174D8265649CDD27426C927D168775D783D538
        Validity
            Not Before: Mar 20 23:09:31 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65fb6cab-2c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:5f:5a:11:e5:26:b5:78:4b:e6:ee:61:11:
                    20:ab:24:82:67:1d:c8:e0:33:91:c3:da:08:c7:22:
                    bf:5a:b6:3c:33:6d:c7:c7:c1:9a:b3:20:3c:0f:91:
                    5c:e2:f0:7c:81:41:df:a8:6a:9b:83:33:d1:e0:0f:
                    2d:42:18:a7:01:a1:2d:df:83:b8:d7:3a:cf:20:5e:
                    d7:03:21:96:80:6c:19:d1:82:0f:5c:b9:5d:bc:e6:
                    4d:32:75:b7:8f:88:29:5f:45:5a:3f:23:75:73:2a:
                    29:8b:da:a3:97:cb:96:a7:ec:1f:c2:08:4f:14:b3:
                    23:34:03:1f:46:a1:0b:0a:34:97:d3:ca:0e:45:85:
                    42:dc:5d:fb:ad:09:85:82:5d:85:4b:d2:da:08:c5:
                    9d:85:38:30:51:81:c4:48:6f:c6:ae:77:aa:b8:68:
                    7d:9e:b5:6b:c0:12:23:4b:30:d2:60:81:ab:c9:84:
                    3d:07:02:1b:7b:de:39:d6:26:eb:90:1f:0b:65:58:
                    ae:4e:12:c2:04:95:01:10:9f:01:c8:c2:e5:b8:80:
                    37:ad:81:11:e0:b6:a6:99:c7:73:2b:8f:f7:05:71:
                    e4:46:28:d1:82:3d:04:8a:46:e7:47:0c:07:42:25:
                    3f:70:e9:f9:38:73:59:fc:cc:46:aa:23:0a:09:47:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:76:C0:10:31:72:82:C9:FA:8E:E9:55:2B:3A:62:5D:5B:28:86:94
            X509v3 Authority Key Identifier:
                keyid:B5:17:4D:82:65:64:9C:DD:27:42:6C:92:7D:16:87:75:D7:83:D5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/tRdNgmVknN0nQmySfRaHddeD1Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRdNgmVknN0nQmySfRaHddeD1Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D459/99EC89EC422011EAB5302016C4F9AE02/61E12BD0CA0611EEB05EB92CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.179.0/24
                IPv6:
                  2001:df3:9140::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:0d:11:34:b4:a9:c3:75:8e:c5:b3:2b:65:1c:b9:33:7b:df:
         7e:a8:d5:61:12:0d:3b:60:8f:ae:51:1e:90:0c:bc:9d:e6:2d:
         8a:08:09:c8:82:3b:94:c7:d0:11:22:b4:1c:0c:92:6f:d0:37:
         1a:3b:0e:52:8d:9f:d8:d6:15:84:26:da:80:5a:de:9d:70:55:
         a1:7a:ae:7d:9a:2f:57:d6:87:82:13:01:58:fe:b6:e0:39:dd:
         7e:56:29:f9:2c:97:f1:c4:41:27:cc:db:73:0c:de:ed:3b:6c:
         0d:7a:8a:d0:65:88:e7:c6:52:fe:f2:9f:e4:1c:c7:c8:94:18:
         69:4d:c1:58:d8:06:83:58:e1:53:18:5b:02:7a:23:7e:f9:95:
         17:4b:2c:03:dc:32:c2:81:5b:ed:ad:64:8a:fa:2f:04:0c:39:
         61:63:ce:09:64:c3:f1:57:03:ee:12:2e:aa:62:fd:a6:30:8c:
         f8:4a:98:cd:b3:a1:55:32:f6:91:b0:2d:50:2a:4d:c1:1d:34:
         ab:da:99:a6:a5:15:d8:34:b5:d9:44:d2:d2:81:45:62:ba:32:
         5f:e1:e6:fc:1c:29:73:af:26:ac:4f:b4:26:03:68:e8:2a:1f:
         1b:cd:e3:cc:c3:94:58:3a:e2:fe:ec:70:7d:dc:39:f6:80:f4:
         87:70:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 22:41:51 2024 by rpki-client on console-fra.rpki-client.org