Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
File:                     F5DED02A588511ECAC342433C4F9AE02.roa (raw, json)
Hash identifier:          xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=
Subject key identifier:   CD:C3:36:38:98:70:DC:98:8F:8A:8A:10:5C:30:14:CE:24:D2:30:A7
Certificate issuer:       /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
Certificate serial:       03A4
Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
Signing time:             Thu 11 Jul 2024 01:53:14 +0000
ROA not before:           Thu 11 Jul 2024 01:53:14 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     139466
IP address blocks:        103.141.199.0/24 maxlen: 24
                          2001:df1:b80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl
                          rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC
        Validity
            Not Before: Jul 11 01:53:14 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=668f3b0a-a248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:72:1e:98:6a:b9:41:47:a1:3b:70:b6:fd:
                    d8:c7:de:4e:a1:e8:7e:08:73:6e:d4:f0:fc:63:1a:
                    64:d5:84:26:ea:f0:61:c8:c6:5c:c5:a4:e9:11:5b:
                    90:98:fe:0c:f2:5c:68:de:41:5f:3c:22:f8:ae:0f:
                    7d:d7:d3:39:42:4f:23:75:a4:9d:1e:7d:87:a6:f9:
                    ca:9e:99:5f:aa:2c:42:8a:27:9b:e0:47:19:97:bd:
                    a3:6e:e3:56:58:09:10:8c:b1:87:c1:0b:8e:37:2e:
                    5b:18:f6:5c:52:24:9b:5d:4f:b9:82:62:8b:91:a5:
                    f7:b5:4b:58:bb:67:47:c1:63:e4:40:f6:71:91:6d:
                    b0:a1:f2:96:5c:9d:21:a0:3d:9f:ec:c8:e2:59:eb:
                    f1:06:d4:37:92:6f:8b:d1:fe:25:70:66:66:d4:6b:
                    05:a4:0c:da:9a:82:0c:fe:18:61:d5:78:a5:d6:ff:
                    e3:48:60:dd:bc:2e:f2:8b:04:c3:92:dd:c7:09:8b:
                    46:1b:63:98:56:c2:d2:a4:92:61:c3:ea:00:ae:e9:
                    02:f4:5f:88:67:cc:2f:5e:10:40:02:3e:5a:19:ea:
                    36:29:e3:a2:a7:ab:36:4e:c6:47:c2:b0:7b:52:8e:
                    aa:e1:e4:cf:ea:56:f8:5d:03:cc:60:02:c0:06:35:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:36:38:98:70:DC:98:8F:8A:8A:10:5C:30:14:CE:24:D2:30:A7
            X509v3 Authority Key Identifier:
                keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/F5DED02A588511ECAC342433C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.199.0/24
                IPv6:
                  2001:df1:b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:3e:3b:14:f2:1c:d0:dc:b6:00:33:78:74:12:2e:91:a8:
         c3:20:cb:6c:51:95:9a:46:1c:ff:cc:39:b7:37:5e:91:b6:7f:
         98:6f:9b:31:26:15:7c:f2:a0:6f:56:1d:d6:1e:e9:50:25:03:
         57:ec:2e:65:bb:87:6a:72:57:6b:9c:75:83:00:2a:bc:db:e9:
         10:49:c1:36:e4:72:8f:c7:13:a5:9a:e5:9b:36:81:44:65:63:
         41:29:d6:cd:ba:a5:a6:84:95:f6:4f:26:81:2b:49:24:03:ef:
         fc:e6:3e:09:73:b0:3d:df:f4:d1:2f:e9:84:4e:80:50:90:66:
         0e:5d:79:a0:a4:5b:e6:f5:ad:b4:f8:77:56:9e:cc:d0:5b:96:
         10:b6:f7:28:52:d1:11:c7:1e:08:e8:eb:8e:19:f9:f0:6f:ed:
         77:1a:c0:d9:e5:60:70:c5:b2:a0:8b:75:03:69:b0:8b:63:64:
         95:4c:61:24:24:e5:1d:a1:2d:44:c3:8f:de:bf:d7:64:3b:8d:
         c6:f7:69:e7:2b:cf:67:68:98:12:9e:47:83:b8:2f:07:46:b2:
         01:c5:c9:df:a1:eb:91:06:d1:0f:39:83:38:0e:c2:c8:de:30:
         4a:e5:9a:33:7d:66:29:7c:7d:c2:e4:31:35:85:19:89:d9:ae:
         34:cb:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org