Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
File:                     0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          5M3eaY8LFqQSHIxb7L7m75NuysFwBQx/uG4MI/FA6H8=
Subject key identifier:   74:F4:26:F0:FE:7F:A1:F5:2E:A6:68:B3:43:51:57:4D:1F:D4:17:4E
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       0375
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
Signing time:             Thu 29 Aug 2024 01:44:15 +0000
ROA not before:           Thu 29 Aug 2024 01:44:15 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     140900
IP address blocks:        103.179.246.0/24 maxlen: 24
                          103.179.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885 (0x375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: Aug 29 01:44:15 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=66cfd26f-5955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:3f:dc:29:f8:09:d9:05:6a:a9:cf:46:d9:
                    01:25:cb:7c:ac:8f:7f:47:45:d9:6a:f9:52:41:c2:
                    47:be:39:81:34:ea:e4:23:89:ed:e0:03:c0:60:d8:
                    cb:4d:c0:4a:b8:fb:d7:81:b9:e8:9e:3e:99:f0:55:
                    fe:47:23:55:c9:01:9f:9b:0c:7e:30:cc:ce:ae:6c:
                    11:5c:34:2a:fd:39:fa:38:0c:64:87:8c:44:76:ab:
                    58:ef:9b:1b:90:41:fb:f4:86:90:05:45:09:43:a0:
                    1d:d5:79:96:1c:e2:53:49:86:d8:d6:e3:0a:8b:4a:
                    79:00:f7:00:35:d0:07:8c:f7:ea:34:7e:63:0f:a1:
                    08:02:99:94:ce:64:a5:b9:ed:9f:0e:68:8a:88:d2:
                    fb:81:bb:b5:d9:15:b2:00:62:a2:f2:bd:21:41:df:
                    e4:3b:f9:a3:41:98:43:0b:b7:14:a9:ae:9f:34:d5:
                    00:00:57:7e:0b:dc:4d:4f:6a:4b:f5:d0:29:56:71:
                    43:09:1f:b2:84:b7:f0:4e:fc:26:77:e4:f6:13:88:
                    7e:29:93:5c:8e:e9:82:c4:a4:be:5a:e8:72:e6:a0:
                    b6:55:56:80:71:03:c9:04:97:f6:d5:40:d2:d3:67:
                    d5:e3:06:5e:cb:cf:60:76:6e:20:cd:b1:ad:e7:f2:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:26:F0:FE:7F:A1:F5:2E:A6:68:B3:43:51:57:4D:1F:D4:17:4E
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:08:8d:c0:15:c8:4c:15:6b:6b:91:ec:59:e8:79:f9:2c:53:
         0c:b8:2b:91:a2:c4:0b:8f:c8:99:56:7f:fe:6e:52:27:14:c4:
         78:89:46:f9:74:e4:dd:26:04:f8:cf:9d:e2:cb:f5:70:67:f1:
         f3:d3:7a:7c:c1:dc:f0:6a:07:a5:ec:52:65:75:c9:70:21:c9:
         14:34:43:4d:d8:0a:e6:be:1d:11:a4:82:ed:12:89:f7:9c:62:
         94:9c:05:8b:29:ba:22:f3:9c:20:7e:83:91:99:7f:7f:fd:6b:
         b3:8c:a6:9e:dd:9f:6a:74:fc:14:95:9b:a9:2a:07:05:08:38:
         50:81:91:34:4f:c7:6a:26:02:29:c1:78:f6:a9:41:49:2e:4a:
         dd:9d:05:c2:6e:6d:c0:75:82:a7:d3:bb:a3:a1:dc:d3:fa:19:
         27:12:37:98:63:4b:93:3f:a1:f0:33:78:ff:0c:d4:ab:36:88:
         40:2d:a9:f7:26:02:6f:86:f5:c0:bc:d7:da:cd:1a:ad:c8:93:
         5b:21:8a:77:c8:cb:6d:65:32:4b:c2:d8:fc:3f:b3:2f:27:c4:
         64:9e:79:2a:b0:54:6f:e0:99:86:ed:9f:c7:cd:ae:94:f1:1f:
         8c:8c:dd:53:20:9e:2d:57:69:28:4c:a5:0c:60:be:00:7a:62:
         8c:4b:ef:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:59 2024 by rpki-client on console-fra.rpki-client.org