Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa
File:                     4F12B4886EEB11EC8699607FC4F9AE02.roa (raw, json)
Hash identifier:          2ZcrJfUo8iGbf+zRyErKxf9o0VcsflrpmejeHCyEHtw=
Subject key identifier:   79:DA:28:3E:11:3D:B0:EE:73:07:B6:9C:D5:10:00:B2:DF:CC:34:24
Certificate issuer:       /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial:       031C
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:05:59 +0000
ROA not before:           Wed 31 Jan 2024 03:05:59 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149421
IP address blocks:        103.179.24.0/23 maxlen: 24
                          2001:df0:4540::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
        Validity
            Not Before: Jan 31 03:05:59 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9b917-e190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:cd:ef:04:c5:85:df:0f:0d:d2:60:bc:31:
                    28:5e:bd:72:3d:77:24:a2:d3:f0:e1:16:96:8b:79:
                    14:47:01:ec:f9:97:c9:5e:82:da:47:45:5b:79:8d:
                    3d:dc:ab:49:e9:f4:5f:06:79:57:a4:b7:5a:f0:2c:
                    bd:ac:ef:23:0c:a7:03:77:4b:e4:39:da:92:a1:8d:
                    44:56:b2:d2:50:32:d0:52:cc:8e:f5:86:ff:50:50:
                    38:60:80:4b:ab:ce:fc:37:a3:cc:13:28:63:43:fa:
                    f3:ca:d5:b8:ed:41:8b:d6:fb:5f:82:59:11:6e:fb:
                    5a:e6:71:1a:fa:fd:9b:19:d7:d6:99:ac:5a:e3:cc:
                    51:47:c5:1d:ea:6f:fb:a5:4c:f8:3e:c6:cc:44:1e:
                    c7:a6:0c:9e:d3:fe:3c:7f:44:9d:05:7e:47:9c:d6:
                    66:da:42:3f:59:07:39:7b:4b:f4:bc:ea:9e:b0:c2:
                    33:fb:6d:a7:11:bb:a3:50:e3:25:28:58:06:25:ff:
                    21:94:ae:4c:34:2e:70:48:4c:5a:1b:60:50:b0:be:
                    77:2d:22:e0:3c:cd:cb:59:ab:a9:d4:0d:44:0d:cd:
                    50:70:c4:a0:41:6f:5f:dc:20:1c:13:d8:4d:41:5a:
                    ca:7b:8c:66:34:eb:d0:10:32:f4:77:37:75:3e:be:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DA:28:3E:11:3D:B0:EE:73:07:B6:9C:D5:10:00:B2:DF:CC:34:24
            X509v3 Authority Key Identifier:
                keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/4F12B4886EEB11EC8699607FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.24.0/23
                IPv6:
                  2001:df0:4540::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:94:14:04:f0:1f:e7:74:9a:cc:9b:72:b0:0a:6c:bb:db:65:
         f4:ee:00:29:b3:88:dc:7a:79:d9:36:85:15:0a:31:97:b7:b3:
         4a:e0:d1:a2:ce:88:8d:16:b4:dd:f1:c5:9e:2e:f8:3c:23:f3:
         42:06:8a:30:0f:60:58:f0:a0:c2:4d:d3:e9:e3:3f:de:6f:0d:
         83:58:d1:54:a8:66:a0:22:1a:dd:3b:70:03:c8:ca:86:2c:60:
         bc:fa:80:bc:f2:00:08:8b:50:db:38:39:5e:cb:09:e4:43:3e:
         db:e8:f5:d9:1d:d4:c9:a8:cc:ab:0d:94:a9:b6:35:9e:41:5c:
         07:34:1a:6a:32:58:98:8c:5f:57:29:4d:98:05:0f:ea:a8:20:
         dc:30:64:36:74:10:ec:6d:ce:38:47:08:d6:66:81:de:a9:42:
         07:4a:56:0f:22:34:e2:dd:d7:b8:ae:f7:5b:01:b0:5c:36:5d:
         63:0c:17:99:04:7c:50:b9:e9:c6:3c:e4:2b:f7:b9:6a:e6:f0:
         57:ea:47:75:ad:2c:ff:4b:b9:a7:67:0a:e3:fd:aa:8c:ab:cf:
         47:ea:da:42:d9:74:70:cd:ea:21:b7:80:19:ed:c2:2c:e3:75:
         b0:ff:31:88:7a:d4:56:84:4a:70:8e:63:38:3c:4a:9d:61:23:
         98:0a:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:49 2024 by rpki-client on console-fra.rpki-client.org