Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
File:                     0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json)
Hash identifier:          MrNZ6F/Tz/6S7L1UD5UnXWJFM1u5sMiA1hmNIcsx/UM=
Subject key identifier:   34:DC:D2:90:70:FE:B4:6B:81:DE:83:DA:78:73:4B:DF:E8:19:AA:D5
Certificate issuer:       /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
Certificate serial:       0306
Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 02:54:46 +0000
ROA not before:           Thu 01 Feb 2024 02:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140900
IP address blocks:        103.179.246.0/24 maxlen: 24
                          103.179.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl
                          rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF
        Validity
            Not Before: Feb  1 02:54:46 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65bb07f6-14b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:ef:75:28:e1:06:da:25:84:95:c3:47:8d:
                    e9:b5:8e:17:5d:54:a8:47:11:3f:f0:87:f8:1e:98:
                    33:9a:33:4a:75:f2:00:72:6c:37:12:a2:d7:58:fb:
                    63:7a:41:9a:48:7d:e3:f9:09:25:da:16:7a:7c:0b:
                    25:69:ae:8a:29:56:7c:00:8a:fd:48:1f:3a:de:35:
                    9a:99:f6:f9:36:ec:52:e9:30:1d:4b:b6:39:72:c5:
                    c7:48:ae:f1:08:05:c9:87:e4:3a:52:82:dd:dd:0c:
                    30:41:57:b4:7c:1f:95:73:df:82:cb:b0:61:70:81:
                    9f:2c:b7:42:90:62:b4:73:e3:0c:11:94:9b:b0:17:
                    ed:5c:57:ce:7a:0a:a0:35:24:47:48:2e:f4:3b:30:
                    fa:a4:54:0a:25:f8:9b:03:57:bf:10:79:fe:90:08:
                    63:96:18:d1:75:f3:aa:bd:93:8f:f6:bb:43:d3:80:
                    55:fa:67:59:eb:29:6e:41:16:a4:db:25:74:0f:ba:
                    5c:34:2a:5b:47:27:bb:c3:17:a2:39:98:70:37:cd:
                    61:a0:f1:6e:0f:ec:ea:3a:ea:f3:72:1a:ab:9e:ca:
                    23:1f:55:ec:0f:49:1e:8a:2c:89:66:f6:c1:9e:41:
                    8c:b2:12:e7:20:1e:ee:03:c2:76:b0:3f:d5:8c:72:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:D2:90:70:FE:B4:6B:81:DE:83:DA:78:73:4B:DF:E8:19:AA:D5
            X509v3 Authority Key Identifier:
                keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:46:fd:cb:03:0f:57:2a:3b:e9:93:0d:4f:b7:0c:7a:c5:
         fa:9a:0d:7b:86:bf:67:5c:27:9a:f1:bc:b4:23:f3:0a:65:38:
         8f:3e:1b:93:12:b3:7c:4b:0d:97:0d:14:79:16:c0:75:75:5e:
         6c:d8:70:fa:cf:a0:58:4b:76:e0:89:12:1a:10:ea:3c:31:19:
         75:43:b1:64:03:17:a9:e6:26:7b:45:3a:f0:28:33:ac:b0:02:
         15:a3:33:43:11:eb:d2:c4:41:80:8d:72:5a:36:33:ad:75:52:
         3c:47:ee:a0:3e:9e:6c:d8:06:bb:6b:d7:c7:bd:a9:39:ac:c9:
         6d:5b:a2:13:d2:ee:b9:cf:59:37:eb:ab:93:b3:42:dc:60:e7:
         07:ef:01:c4:e8:ac:51:ff:b4:d1:0f:06:b0:d6:e3:51:0d:49:
         0a:24:f4:bc:bc:bd:07:0b:71:42:95:06:79:c7:bb:aa:7e:b4:
         36:8e:30:15:26:98:f0:7f:a3:a7:42:ab:64:45:89:cc:e2:99:
         d9:21:d2:b1:ff:8c:94:0f:72:3a:e0:ac:6e:5a:8c:ac:ac:25:
         95:c9:74:e5:c2:65:8b:97:8b:5d:c5:19:00:ac:a3:42:f0:c8:
         43:38:ae:b7:c6:7d:66:aa:cb:4c:86:75:47:1d:3e:53:5e:cb:
         98:bf:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 03:39:41 2024 by rpki-client on console-ams.rpki-client.org