Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
File:                     266A625CF25611ED95804341C4F9AE02.roa (raw, json)
Hash identifier:          tapgQdUV2Yd542wXP2Lz7pxKBXtOXYVylkyP5cUGAuI=
Subject key identifier:   05:4A:B3:FB:65:68:1D:12:CA:41:8B:C7:D6:46:C8:7D:B4:F4:AD:C8
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       032D
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
Signing time:             Sat 03 Feb 2024 02:35:03 +0000
ROA not before:           Sat 03 Feb 2024 02:35:03 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     58689
IP address blocks:        103.179.14.0/24 maxlen: 24
                          103.179.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: Feb  3 02:35:03 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65bda656-22b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:8f:63:a9:59:2c:b1:3d:03:d5:93:c9:3c:
                    de:3d:69:0c:72:2e:5c:0d:ff:e5:bc:9b:5d:0b:85:
                    52:f9:ea:01:d0:54:51:f0:51:4f:e3:ab:73:d5:ae:
                    0c:2d:9d:a8:cc:be:de:1a:93:ef:95:fa:34:7e:18:
                    70:72:e2:32:d0:cb:39:da:a3:6c:9e:d7:e6:f7:d5:
                    1b:4f:46:d4:ef:15:1a:9e:7f:a3:be:f7:00:8b:68:
                    d8:8c:0f:b7:72:0e:6b:49:4b:ec:68:a6:95:4a:6d:
                    9a:eb:bd:1e:6b:69:98:6f:36:75:6b:47:33:8f:61:
                    28:9f:ed:81:bb:30:4a:4c:59:0f:87:6b:88:b7:fd:
                    e2:db:7e:d8:e3:d5:f1:db:9c:30:23:bc:dd:be:88:
                    5e:01:f0:23:15:c7:13:cd:04:1f:a1:86:33:df:86:
                    29:ae:e7:58:72:4c:18:6c:06:f4:4a:9b:9b:1c:52:
                    28:10:61:e2:a2:2b:3f:2e:12:b7:cc:7e:49:39:fa:
                    f9:0d:38:73:a3:f1:b0:95:37:3c:9a:a9:ff:b7:54:
                    c3:ce:e3:3e:23:1e:a5:e5:cf:19:62:82:aa:6d:62:
                    f5:3a:aa:b7:28:8b:18:3c:2f:fd:0f:e3:11:07:1b:
                    2b:fd:aa:07:43:3e:73:9a:4a:70:08:0d:2f:83:56:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4A:B3:FB:65:68:1D:12:CA:41:8B:C7:D6:46:C8:7D:B4:F4:AD:C8
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:97:f8:e0:e5:14:da:f7:30:85:39:a2:40:cb:81:07:e8:04:
         2d:30:7f:43:b4:4c:32:8a:22:03:d1:66:5e:f4:f9:27:00:03:
         9e:fe:fa:da:55:7b:67:56:76:5d:49:67:96:88:c3:0b:90:eb:
         88:b5:39:95:74:9a:13:24:1c:fa:74:29:dd:f1:72:db:16:3c:
         a1:5b:c3:c6:0a:51:52:92:df:08:d5:1b:f3:64:6c:ab:c9:f4:
         67:7d:c4:0e:d3:f5:a8:56:04:48:c6:33:a6:7a:85:66:64:22:
         96:56:fe:af:02:b0:9f:e4:63:da:7c:6e:32:7f:3f:70:24:16:
         8f:ed:d6:9b:8b:88:31:a7:e5:2c:b4:29:e0:51:99:9b:de:b4:
         6a:4e:f5:99:12:2b:e6:4a:10:cf:69:f5:84:47:3a:f6:83:44:
         17:25:38:0f:09:48:68:01:28:e8:d1:ea:78:20:3d:bd:94:28:
         24:97:ea:71:09:89:91:5d:11:25:de:b6:c8:04:2a:f1:1f:49:
         01:5a:8c:e1:09:0c:c0:9b:ee:9b:21:5b:9d:b7:b7:ff:a2:87:
         eb:43:a4:1c:95:c7:25:ef:38:0a:a3:4e:eb:9c:32:13:10:e8:
         db:7b:79:4f:34:28:c5:f0:f3:59:3f:af:6f:85:02:41:65:d5:
         6c:57:60:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:50:06 2024 by rpki-client on console-fra.rpki-client.org