Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
File:                     6A9D79ECD6E311EE94842842C4F9AE02.roa (raw, json)
Hash identifier:          pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=
Subject key identifier:   DB:90:37:AF:F7:7C:EB:78:B8:74:1C:C9:2F:64:52:55:B7:35:D5:29
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       014C
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
Signing time:             Sun 27 Oct 2024 03:12:47 +0000
ROA not before:           Sun 27 Oct 2024 03:12:47 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     142295
IP address blocks:        103.12.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Oct 27 03:12:47 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=671dafaf-eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:29:44:92:1c:b9:2e:c3:59:8c:a6:54:64:
                    dc:5f:ad:33:3d:2e:9c:3c:34:78:6a:2b:71:ff:f8:
                    a9:c0:b4:29:b6:6f:5e:5c:fc:a1:55:7a:2c:1e:f2:
                    63:bb:c1:b3:ef:14:4a:c2:6f:07:bd:d9:c8:89:58:
                    7f:96:f9:af:c2:1f:5e:78:d1:ad:e5:48:63:38:a8:
                    d1:c4:01:49:d6:ae:7f:a5:8f:82:50:6c:d5:aa:fb:
                    dd:b8:5d:e1:20:e0:0a:f2:7e:93:22:bd:c0:21:5b:
                    64:bc:28:b3:48:53:bd:4c:21:e2:0f:8e:fc:f5:8c:
                    c8:ea:b1:3c:98:d7:c3:7e:f8:d6:b9:65:e3:f4:48:
                    cc:3e:42:22:fa:b5:e1:9c:ed:21:44:f0:ec:8e:2d:
                    9f:2d:4f:bf:99:6a:0b:eb:02:4b:f2:1a:63:d1:7c:
                    3a:dc:5b:51:3c:47:c8:0b:bb:18:1e:27:5f:c8:b0:
                    08:ea:ed:14:f7:23:e2:7e:68:11:95:3b:ba:c7:fe:
                    8b:d0:cf:ff:ef:ae:88:c0:db:be:2a:6e:c5:db:7e:
                    e5:f1:81:9f:81:a5:1b:cd:bb:5b:45:bb:f1:d5:ed:
                    d8:76:9f:88:58:df:f6:88:26:90:ff:1a:8c:8f:4f:
                    78:ca:10:73:36:f3:7c:c0:b6:67:85:01:ba:61:55:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:90:37:AF:F7:7C:EB:78:B8:74:1C:C9:2F:64:52:55:B7:35:D5:29
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6A9D79ECD6E311EE94842842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:dd:4e:0f:ea:40:39:62:9a:48:a1:9b:c8:01:fb:0d:b5:
         c9:58:44:a9:c4:72:1b:29:61:ae:fd:84:e6:15:e9:4b:76:0f:
         1a:98:75:35:1d:1d:f8:15:27:83:8a:68:dd:58:67:4e:0b:09:
         cc:21:78:44:ff:58:bb:e2:e5:0e:30:64:14:f5:6c:52:b0:5d:
         12:89:65:83:c2:1f:cb:03:e6:12:75:c5:a9:f3:2e:98:c0:35:
         e0:f4:b3:e4:4f:e5:54:d5:de:67:61:84:96:51:c9:db:52:94:
         19:01:be:be:cf:d9:b5:89:5c:ce:5e:b5:de:22:92:0d:8d:bb:
         93:46:7e:0f:17:8c:08:7a:1d:a7:72:f3:9d:ae:6b:f0:1a:c7:
         b7:40:d1:a9:58:d5:18:62:cb:6c:38:b2:3a:73:a9:f9:e4:7e:
         8e:b4:3f:04:43:b7:4b:59:47:c8:36:79:54:15:8a:0e:82:73:
         03:74:4a:07:8a:07:89:76:5c:a4:35:3f:b1:80:08:93:e7:60:
         2f:7d:b4:39:1e:3e:de:3c:b7:45:17:81:dc:88:8a:8b:fc:79:
         25:b3:a6:ed:b6:e5:f2:fb:4e:4f:67:91:ad:75:1c:85:62:4d:
         1e:9f:21:9f:dc:88:c3:2c:6c:17:5b:2a:ee:c7:03:1b:49:e7:
         65:27:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org