Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa
File:                     8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (raw, json)
Hash identifier:          bFykBMwTECS+fJRFAuAN9lIoZf9EY9cWgG2rieRhIG8=
Subject key identifier:   00:0A:77:2B:DA:83:A1:D9:5E:1A:4C:D4:98:0F:B6:AF:42:79:2F:73
Certificate issuer:       /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
Certificate serial:       0819
Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa
Signing time:             Sat 06 Jan 2024 21:39:13 +0000
ROA not before:           Sat 06 Jan 2024 21:39:13 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     59268
IP address blocks:        113.212.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl
                          rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C
        Validity
            Not Before: Jan  6 21:39:13 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6599c881-66a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a5:34:d9:69:29:d5:79:3a:c7:d0:02:fb:7d:
                    cf:41:5e:d7:a6:b3:f0:c7:52:bb:95:e4:98:7c:f6:
                    26:43:72:06:6f:10:62:fe:af:fa:0f:5d:e2:90:e0:
                    5d:88:cc:23:8c:19:c5:f1:a2:0b:09:82:b9:69:ba:
                    b2:59:43:31:a7:83:14:54:c0:94:cc:92:2a:c0:52:
                    d6:c0:9f:87:22:ba:b9:7f:0f:c2:68:6f:e8:92:3d:
                    c0:06:4d:66:3e:04:0c:90:f5:d4:20:d9:62:bc:e3:
                    10:4a:6f:21:93:c3:76:7d:96:02:be:5d:a8:8b:59:
                    74:43:6a:63:27:2a:26:cd:02:84:9e:59:4d:20:82:
                    80:4e:3c:9c:8b:95:13:29:ef:9a:2d:ad:c9:ea:91:
                    3e:67:2a:7e:32:a9:ef:93:4a:ed:2e:bb:f3:19:f3:
                    3a:49:d6:a4:7a:06:48:39:e4:ab:a1:c2:f9:f7:cb:
                    c6:c7:9c:3a:8a:42:cd:47:d3:76:07:3a:38:dd:4a:
                    2c:04:d5:ca:0b:ee:7e:4b:17:e0:97:e6:b7:50:d1:
                    57:83:1d:ab:f3:00:1f:58:9c:94:47:f6:d4:2b:d0:
                    a8:57:34:cf:fc:03:80:16:08:7b:4e:86:54:30:42:
                    b8:6e:22:a7:78:06:fa:be:97:48:b5:dd:7c:55:7c:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:77:2B:DA:83:A1:D9:5E:1A:4C:D4:98:0F:B6:AF:42:79:2F:73
            X509v3 Authority Key Identifier:
                keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/8C79CFC6A6FD11EAA1B00744C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:2b:00:94:97:c9:9c:5e:8f:20:c7:b2:30:ff:a3:06:e7:
         04:f4:8a:66:68:00:16:46:5e:c1:2d:ab:c5:01:81:8d:5a:60:
         2d:d4:69:73:dd:2a:8d:ad:e7:68:64:18:9f:09:23:06:b9:73:
         5f:dc:d3:1a:48:1d:0e:0c:a2:9c:15:ea:cf:46:db:59:aa:2d:
         3d:5c:b8:ef:f6:dc:d9:45:66:ce:56:75:fc:1b:e8:a0:5b:b4:
         1a:cc:30:a2:0f:e0:b5:07:f8:66:50:16:50:6b:e3:a4:40:1d:
         da:50:70:75:4c:0f:ec:9f:4a:34:6c:98:58:3e:f2:ec:c1:32:
         72:2a:4d:ac:48:d7:99:9a:ad:a2:58:48:18:c9:30:f2:b1:5f:
         a7:58:d4:72:28:b1:b3:f9:8c:29:93:18:44:dd:39:6d:02:2f:
         79:da:cb:1a:ea:ba:56:90:7e:18:98:f8:71:79:a5:1a:65:b3:
         53:03:45:a6:44:4c:11:a7:b0:32:e8:54:f3:c8:05:cc:13:ba:
         f8:71:8d:9a:43:2e:81:8c:8e:bc:aa:4d:af:af:61:4a:d9:18:
         3c:4c:2a:f2:21:19:b9:2c:46:4c:4d:ab:da:0d:ea:20:cc:47:
         e1:01:7f:22:4d:2a:56:55:50:1a:6f:e1:3c:7d:12:19:83:49:
         43:0b:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org