Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/2AE9737ED4B711EEBFA02485C4F9AE02.roa
File:                     2AE9737ED4B711EEBFA02485C4F9AE02.roa (raw, json)
Hash identifier:          qOPiiS+v+Z2H4SsRAZY+6fSR7CBpixObZx9x5102EVQ=
Subject key identifier:   45:56:63:BA:FF:CB:D0:B0:E9:3F:AF:FA:0E:E3:3C:A2:3B:4F:2D:DF
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       0526
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/2AE9737ED4B711EEBFA02485C4F9AE02.roa
Signing time:             Mon 26 Feb 2024 14:56:06 +0000
ROA not before:           Mon 26 Feb 2024 14:56:06 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     131275
IP address blocks:        103.79.16.0/24 maxlen: 24
                          122.50.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Feb 26 14:56:06 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65dca686-1564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:d7:aa:df:50:12:8c:8c:b6:20:fd:c9:4e:
                    4a:e1:48:a2:34:1d:88:53:33:c4:40:c3:72:c0:e0:
                    9f:3e:18:15:b4:60:a1:e0:a0:be:b5:09:7d:51:f0:
                    68:cc:8e:49:c3:c2:2f:f9:d4:0b:8d:14:2f:a1:e7:
                    3a:98:95:4f:86:eb:1a:fe:b6:eb:b3:cb:f5:83:63:
                    05:e7:3c:e0:9f:29:40:97:30:c8:35:ae:09:86:b7:
                    d9:8c:81:96:35:cd:0e:8b:f3:03:92:15:0c:77:dc:
                    b2:53:86:b0:85:e2:74:83:9d:1d:4a:26:00:0a:9e:
                    73:5c:87:a1:09:e6:e1:d6:f6:6e:f6:20:71:e2:d9:
                    8b:92:df:10:52:cc:9f:21:88:ba:0c:4b:ab:09:42:
                    9e:b8:12:62:8d:14:4f:19:e6:bf:36:f4:73:70:4b:
                    c5:01:dd:0e:29:e7:92:90:b7:c0:39:a0:c3:ef:8f:
                    36:22:d5:3c:69:df:21:72:d0:e2:a8:a7:da:e8:6d:
                    0a:27:25:36:ed:cf:c4:b7:34:b7:25:15:46:e4:26:
                    4f:86:34:64:85:fc:67:95:7d:08:29:51:5c:99:de:
                    af:fc:7a:77:1a:15:76:80:2e:2b:98:33:79:a2:e7:
                    3d:e6:37:7e:30:a5:08:78:75:d4:04:e7:aa:cb:1e:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:63:BA:FF:CB:D0:B0:E9:3F:AF:FA:0E:E3:3C:A2:3B:4F:2D:DF
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/2AE9737ED4B711EEBFA02485C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.16.0/24
                  122.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1b:70:37:9b:7f:ed:8d:e5:34:c5:58:e2:1e:06:8c:d3:72:
         da:15:b4:54:79:b1:91:22:51:29:83:7c:7a:f6:5d:60:4e:f0:
         d6:aa:ea:5f:2c:db:f2:80:37:a3:5f:01:0b:25:26:9b:ac:c0:
         d6:c6:1b:27:9c:e6:a0:83:6c:0e:82:8c:d3:21:89:d0:65:19:
         82:b5:48:f8:1b:4a:87:cc:33:60:7b:69:d8:0b:52:08:ba:05:
         1d:16:ed:a0:1f:22:08:0e:38:13:22:73:9e:db:f2:b3:60:50:
         73:e3:33:b1:bf:9a:bb:85:da:40:59:25:64:39:75:d7:ab:f3:
         c9:2d:63:dc:f1:cc:5a:5b:e9:98:14:a6:69:a0:b1:75:33:b3:
         b7:75:12:1e:41:1c:73:ae:d8:b0:04:28:73:51:56:4b:9f:3c:
         c4:ae:e6:e0:49:18:e3:c0:20:e9:36:05:b1:4a:3e:13:b9:3d:
         a4:fc:4c:1a:93:b9:b7:4f:1a:df:59:69:4a:87:8d:ba:84:13:
         dd:01:50:c5:0a:01:92:38:4f:19:02:47:e2:89:a2:93:1f:e7:
         92:8f:55:50:cd:0b:62:5d:b8:87:e0:e2:61:f6:b1:97:20:45:
         2a:ee:85:de:4d:6f:8b:26:8e:51:03:2e:11:91:1f:29:54:63:
         40:41:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:39 2024 by rpki-client on console-fra.rpki-client.org