Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
File:                     C09ED7E6804A11EDABB05C09C4F9AE02.roa (raw, json)
Hash identifier:          o+InfXL4ukjFr34bbrRuhamkpyzK3H/+DY8jO61Lmc0=
Subject key identifier:   E7:3E:7A:1B:8F:2D:5E:75:CF:B2:69:A0:1C:D5:0A:B8:AB:07:07:29
Certificate issuer:       /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial:       0245
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
Signing time:             Wed 03 Jan 2024 03:44:28 +0000
ROA not before:           Wed 03 Jan 2024 03:44:28 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     140224
IP address blocks:        103.179.242.0/24 maxlen: 24
                          103.179.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
                          rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 03:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
        Validity
            Not Before: Jan  3 03:44:28 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6594d81c-7c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:6e:69:3e:10:28:c0:8f:1f:12:20:6c:7f:
                    dc:23:ef:67:a9:95:52:2b:62:ae:e3:ec:77:9b:b6:
                    6f:8b:1f:cd:8c:b2:38:77:01:88:82:96:e5:4d:2f:
                    30:8f:b9:09:a7:87:1e:e1:0f:8c:ea:4c:76:7a:01:
                    50:71:1a:84:0a:30:e7:52:36:91:b7:7f:ae:b5:7e:
                    6e:f7:56:77:7e:88:a2:0b:57:71:09:28:16:3d:4f:
                    d7:da:e2:83:28:c5:c6:c5:9c:59:e4:7d:07:23:d8:
                    ce:0b:79:46:4a:e8:54:db:01:e3:40:22:32:5a:5d:
                    06:d6:df:31:05:9d:4b:a8:97:1d:14:a7:a7:e9:83:
                    eb:5a:8e:ac:a5:fa:80:f0:8e:9b:fc:6c:3d:8c:bc:
                    bb:1c:c4:1a:a8:08:06:5b:e2:14:24:69:e7:f3:e6:
                    17:8c:ce:62:9b:08:92:f0:fc:28:d4:73:c6:90:84:
                    d6:73:f2:33:79:b6:cb:67:c7:33:b2:8f:2f:62:5d:
                    53:8f:ab:6d:6b:30:8c:49:a3:ae:e9:72:b3:84:09:
                    20:5c:cf:60:c3:7c:38:d0:0c:59:bd:9b:d5:64:9d:
                    b8:11:e2:2b:1d:02:ad:f3:ad:73:1e:cf:44:2c:3b:
                    b3:b2:94:4b:cb:df:93:00:f4:f3:15:24:c8:c2:88:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3E:7A:1B:8F:2D:5E:75:CF:B2:69:A0:1C:D5:0A:B8:AB:07:07:29
            X509v3 Authority Key Identifier:
                keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/C09ED7E6804A11EDABB05C09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:28:37:f9:9a:bd:e4:89:30:0d:f0:07:fd:18:60:d6:d2:bd:
         48:2d:24:e2:e1:1b:7f:35:52:28:20:b0:6c:04:45:0c:e5:7d:
         81:61:38:02:03:14:e8:f0:7b:b6:5f:a0:53:57:30:b2:c2:17:
         86:02:c8:13:ec:f6:e8:9e:d1:1c:c3:94:ca:df:15:4b:5f:75:
         33:1e:1f:6a:50:67:8d:bf:12:3d:62:4e:fe:6d:eb:aa:b0:fd:
         cf:83:90:89:2c:50:b7:e0:e3:63:bb:e1:c4:2f:e1:69:f3:ca:
         f6:6f:7f:11:48:fb:51:e2:8a:41:9b:bf:cf:ab:77:65:0f:87:
         2b:dd:f5:91:1a:93:ee:7b:e3:f3:62:4a:a8:15:de:9d:ea:dc:
         bb:c2:c4:30:a7:67:ff:24:e9:0f:4b:17:2d:70:0d:1c:e4:7b:
         81:b9:bf:83:88:d7:3a:f1:db:95:88:fa:1d:91:c9:81:ed:53:
         c8:ab:87:00:51:34:9a:ab:31:0f:9e:46:20:29:65:8e:d8:97:
         35:74:94:e8:27:2b:24:27:40:14:d0:6e:33:4f:1e:40:08:fc:
         b2:84:eb:56:ba:09:0c:ed:a3:6c:b0:be:90:58:ca:7f:80:32:
         b7:44:97:ef:a2:20:77:a8:54:a5:c2:3e:ef:10:9e:1f:62:55:
         52:d9:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:33:49 2024 by rpki-client on console-fra.rpki-client.org