Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
File:                     777244A4506A11EE8D08A11BC4F9AE02.roa (raw, json)
Hash identifier:          o+2SvOKjgLqMNBYgTSYIdey7gDiAzw/jt62wOvB2uxg=
Subject key identifier:   DA:87:93:44:3F:65:44:83:0E:ED:BF:86:B0:26:D2:2C:54:04:36:D5
Certificate issuer:       /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
Certificate serial:       0150
Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
Signing time:             Mon 23 Sep 2024 02:56:18 +0000
ROA not before:           Mon 23 Sep 2024 02:56:18 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     131465
IP address blocks:        103.49.146.0/24 maxlen: 24
                          2001:df2:e940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194
        Validity
            Not Before: Sep 23 02:56:18 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f0d8d2-f3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:5b:fa:63:df:bc:81:ab:2e:0c:f9:26:9f:
                    63:86:36:69:9a:ba:39:00:d4:e6:3a:33:31:41:1a:
                    a4:e7:f5:cd:a2:4d:c3:a4:fd:4a:88:54:b9:97:30:
                    72:40:d0:3c:85:9d:b0:39:76:15:5b:2a:01:e2:55:
                    73:f7:fe:65:f5:ad:cd:f4:76:46:7d:76:fa:47:7c:
                    53:8b:83:5c:1b:0e:b0:67:3e:87:16:5f:6b:dd:70:
                    0c:55:14:17:76:46:11:c3:fd:78:ac:d7:00:2b:a6:
                    fb:54:f2:5a:fd:60:d2:c1:a4:c7:76:6e:93:a4:80:
                    9e:7e:d4:f6:8e:50:a0:6a:c1:92:e2:4f:8d:80:56:
                    f8:a8:9e:ab:d2:7e:fc:1c:2a:66:3b:38:96:95:67:
                    cf:16:95:35:93:9d:85:28:ef:ed:eb:22:69:58:fa:
                    42:48:07:b8:b2:eb:ff:af:3c:47:fd:5b:42:4f:30:
                    16:5d:10:b8:d0:a5:24:60:31:36:58:d8:50:47:46:
                    1a:8f:5f:28:24:c2:3f:3d:63:bb:a6:b9:ed:8c:c0:
                    d1:4b:df:97:4b:5a:79:40:a0:5e:5d:6c:70:d9:77:
                    9a:c8:a9:64:1b:27:5e:e1:1a:7e:13:68:c2:ec:22:
                    81:84:c7:0c:9a:65:df:29:24:e2:ff:14:30:f7:ae:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:93:44:3F:65:44:83:0E:ED:BF:86:B0:26:D2:2C:54:04:36:D5
            X509v3 Authority Key Identifier:
                keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/777244A4506A11EE8D08A11BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.146.0/24
                IPv6:
                  2001:df2:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:51:56:7b:e8:04:bd:1f:7c:28:a2:ca:87:72:19:78:54:61:
         0b:38:26:29:a5:3d:7f:5b:8c:5a:1f:65:07:f2:6d:ee:da:03:
         c9:ea:01:11:91:e3:50:f1:17:eb:07:d5:3c:1d:e9:07:65:66:
         e8:38:4b:dd:a9:14:a9:6a:fb:72:ed:72:ff:22:a4:78:b0:f6:
         6d:8b:6a:36:bb:b8:55:a3:fb:02:15:87:64:cd:5c:6d:14:47:
         ac:72:b5:98:a5:ef:05:3d:9e:ee:0f:2b:08:f8:ee:36:37:13:
         23:e1:b3:5c:03:59:a9:ba:b9:3f:18:db:22:60:96:74:4f:ff:
         6c:57:55:8e:71:fa:80:e2:73:8c:f3:ab:81:b0:e8:0c:90:7b:
         69:c0:36:b6:75:d1:54:9c:11:bf:47:16:42:c8:96:36:0f:04:
         9c:e7:8a:84:aa:58:26:bf:e8:76:5f:b3:83:b5:b0:07:84:ed:
         93:d2:ca:50:30:f1:6f:93:99:e0:01:04:6a:53:9e:d8:0c:96:
         2e:f8:4d:a9:64:ce:06:fc:ad:04:a2:dc:b4:08:e1:2f:f5:69:
         71:e9:e7:77:de:79:b9:2e:25:d7:45:02:bd:d7:0c:4a:37:d3:
         f2:0e:8a:52:a4:c5:28:74:2c:fa:46:b9:27:91:58:74:a4:4e:
         39:7e:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org