Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
File:                     16B9139A238311EEA2B7992CC4F9AE02.roa (raw, json)
Hash identifier:          PESjMQOAZB7rvOiAhEgdB1/OLnkYT/S5AzMdHgU3c1g=
Subject key identifier:   8E:65:83:51:67:F1:A5:1A:69:10:A7:DE:7E:BC:0E:0F:81:71:31:4A
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       0244
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
Signing time:             Wed 03 Jan 2024 03:44:27 +0000
ROA not before:           Wed 03 Jan 2024 03:44:27 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     140212
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Jan  3 03:44:27 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594d81b-6f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:35:d8:a6:18:3c:2c:e3:07:8a:8c:42:e0:
                    ca:5b:48:d3:db:97:a6:8d:23:8e:8b:2c:e1:2f:2e:
                    b4:d8:b9:a6:ed:5c:8e:b8:a1:0a:3f:0d:4a:04:d0:
                    63:7c:34:1f:10:65:0c:10:73:b6:bf:37:21:e9:b7:
                    fd:bd:90:ce:c3:87:07:d3:a5:1f:e9:a7:df:94:64:
                    e9:71:1d:0d:8e:9f:e9:7a:b8:5b:ac:cb:7e:07:ef:
                    00:04:91:f6:25:99:bd:77:c0:73:03:09:db:4b:33:
                    23:72:47:15:35:f1:62:f5:7f:34:98:d2:3e:b2:52:
                    62:f8:ad:9a:aa:5d:18:22:4e:04:e4:ab:b6:b8:6c:
                    ce:3a:7c:f6:aa:65:42:ff:62:f9:a8:4c:39:54:45:
                    a6:48:b2:b7:1b:2d:1e:db:96:1e:15:17:6b:54:fd:
                    d6:ab:2d:bf:5c:55:2c:26:de:ba:81:c5:3b:4f:4e:
                    3a:a2:42:f0:01:12:b0:bb:06:cb:48:19:e1:70:05:
                    7b:ba:56:0b:37:a1:7b:8d:a1:ec:01:8c:b3:6b:66:
                    94:ef:f9:e8:c3:25:3f:af:49:41:9d:de:ab:18:d7:
                    83:2f:51:d3:16:42:97:55:fc:ad:10:5d:a2:dc:1d:
                    5c:24:32:06:d3:78:c2:f6:ea:9b:52:b6:2e:b9:00:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:65:83:51:67:F1:A5:1A:69:10:A7:DE:7E:BC:0E:0F:81:71:31:4A
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/16B9139A238311EEA2B7992CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:84:a2:f6:94:47:68:45:cc:3e:44:d2:7b:f6:b1:d4:40:3a:
         b5:e6:46:0b:ac:4d:5a:42:33:fb:d6:a9:24:db:1f:00:84:7d:
         bc:bb:6a:d3:fc:6d:11:a7:91:87:70:5a:3b:e6:10:ac:7c:4a:
         2e:ce:00:60:05:b5:7b:17:05:6e:15:ef:10:9f:6b:56:f6:a0:
         13:ab:05:98:76:19:b6:63:28:61:5b:2b:ba:b4:8d:e0:72:e0:
         2a:6e:0f:8a:46:c6:1a:cf:96:7e:da:a0:12:54:66:c6:e4:d2:
         f0:05:10:9c:06:5b:8d:5d:43:5d:d4:d5:b0:cd:23:1e:5f:ae:
         6e:82:2d:6d:23:fa:4f:be:42:66:eb:14:83:2c:8b:a6:54:52:
         32:76:77:6c:83:a2:87:38:c3:63:d0:20:8c:a9:a2:fe:84:91:
         b9:ab:df:a6:51:72:a9:47:19:70:f3:d4:30:a4:88:52:15:58:
         a6:58:47:ed:16:f2:f9:df:e0:93:c2:a5:fd:b2:a1:8f:fd:88:
         b9:2b:1c:04:e3:a4:89:7d:05:0e:97:fc:48:a0:d4:c1:01:5e:
         b5:96:66:d3:b5:76:38:93:7f:36:f6:83:50:a0:f4:f5:84:3a:
         1b:53:1b:f6:54:36:5e:a2:c2:d3:a8:8d:0f:f4:41:60:14:9f:
         b5:30:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:52 2024 by rpki-client on console-ams.rpki-client.org