Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
File:                     244CF0D8329D11EF9B0F1058C4F9AE02.roa (raw, json)
Hash identifier:          VA6DOr5reCVDmdW7e6+yczGsK4jaqOhoIdkvGeDybRU=
Subject key identifier:   63:02:80:3F:B1:53:E3:B2:6C:AF:08:EB:DE:C3:E5:A7:BC:58:3A:95
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       02A1
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
Signing time:             Tue 25 Jun 2024 02:46:37 +0000
ROA not before:           Tue 25 Jun 2024 02:46:37 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     400619
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Sep 2024 21:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Jun 25 02:46:37 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=667a2f8d-c2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:3a:98:b4:cb:5e:95:4f:4f:49:6b:79:b2:
                    1a:69:ea:04:72:cf:6b:a7:ac:39:bc:05:6a:66:ea:
                    41:98:4a:ec:77:01:0a:f9:d0:fd:2b:6f:50:9a:04:
                    e4:5c:17:94:0f:a1:68:90:0c:b2:7e:78:73:c9:f0:
                    b2:8b:ac:4e:54:d6:95:40:6b:8b:61:06:99:56:54:
                    be:48:05:8b:46:bd:50:4a:a0:1f:3b:de:b1:51:66:
                    8d:00:18:25:d4:17:fc:65:1b:ec:3a:a2:8c:29:9c:
                    84:84:8d:8f:bb:7d:12:10:79:d0:91:c3:10:e4:13:
                    87:3e:41:fb:dc:df:bf:b3:64:40:fc:be:57:be:4d:
                    55:7b:2f:a4:cb:b0:90:69:b2:94:78:0d:9d:16:ef:
                    0e:7f:03:71:dd:61:09:08:30:85:ea:df:67:9e:f3:
                    81:58:cb:17:1d:64:6e:3e:22:4f:bd:ea:fe:b0:46:
                    a3:49:b3:07:5d:a7:2c:67:a0:af:97:c7:89:3a:79:
                    48:12:ef:63:13:de:13:3e:f1:41:4a:48:f8:4f:d4:
                    d9:d3:97:47:4c:d7:fe:a6:fc:28:41:00:14:c8:c0:
                    59:35:d1:90:9d:aa:e5:d3:71:03:b9:db:1d:91:d9:
                    3f:79:c1:09:48:4d:a7:5b:af:17:a7:dc:22:7f:88:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:80:3F:B1:53:E3:B2:6C:AF:08:EB:DE:C3:E5:A7:BC:58:3A:95
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/244CF0D8329D11EF9B0F1058C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:34:b8:20:38:ff:68:6b:fa:37:97:9e:cf:ee:15:b7:99:cf:
         b6:88:48:e1:fd:2b:81:a9:f1:61:84:c0:4e:1e:22:9a:2d:a4:
         20:45:11:e5:66:e0:9a:37:b1:30:72:69:38:e9:df:4d:b0:3d:
         8f:3a:18:68:23:02:27:4f:eb:bd:56:51:c9:dc:dd:89:f6:d1:
         e0:3c:cb:fc:26:46:ad:f5:e7:fc:ce:92:37:05:36:6e:4b:69:
         b5:b1:38:83:31:92:3c:6d:5d:ac:bd:1f:4c:f3:9c:c8:00:5f:
         e8:b1:ff:59:bd:58:f6:36:ea:3e:80:23:b0:40:84:f3:57:96:
         d8:14:b7:c1:8b:5a:dd:02:a4:67:98:07:c2:14:0d:fa:de:44:
         66:f4:b6:b0:b4:f2:74:9e:9e:76:c7:45:ba:24:1e:f2:2b:ff:
         ab:9e:0a:f3:e7:c6:b0:7e:b5:06:e9:dd:88:c3:85:0b:73:23:
         83:f2:3f:1f:ab:ab:b3:e4:93:aa:bc:89:8e:4d:fc:05:13:dc:
         a0:01:8e:26:0e:98:71:3f:53:62:f3:d5:f2:45:c1:fc:98:83:
         25:d7:90:8d:61:2e:34:6e:34:f4:48:bc:c3:a9:43:13:0d:21:
         67:55:19:39:ec:50:3c:77:9f:62:86:f4:cd:ec:0b:49:4d:f3:
         14:e8:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 02:07:55 2024 by rpki-client on console-ams.rpki-client.org