Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A38CC1E133711EF91974981C4F9AE02.roa
File:                     6A38CC1E133711EF91974981C4F9AE02.roa (raw, json)
Hash identifier:          EDIHZDyT/YaV5P0yhPuXW9J40AM7GMMw9JQAUJemekc=
Subject key identifier:   28:5E:D6:4E:74:45:1E:06:A3:63:52:90:E8:5B:E2:AB:F8:07:DE:D5
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       03BE
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A38CC1E133711EF91974981C4F9AE02.roa
Signing time:             Thu 16 May 2024 03:50:20 +0000
ROA not before:           Thu 16 May 2024 03:50:20 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     7586
IP address blocks:        103.177.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 03:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: May 16 03:50:20 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6645827c-2929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:bd:23:d2:29:70:8e:d7:ed:97:34:de:2b:
                    db:2b:c9:49:d2:82:66:3f:e9:f4:41:54:d0:b7:34:
                    7a:34:41:af:76:74:76:ad:1d:1a:3e:85:f1:93:fc:
                    4d:83:a4:28:6e:c4:8c:3c:f4:6d:a2:94:d6:ff:1e:
                    27:cc:df:7a:50:3d:13:69:9b:08:ac:c2:49:98:99:
                    f9:1b:b9:a5:83:f6:96:fb:54:c1:46:ac:21:86:d6:
                    e7:df:51:b1:a8:3f:b2:48:30:5a:a1:dd:ee:c3:f2:
                    cd:87:53:61:f8:ec:de:03:fb:c1:f8:58:89:07:05:
                    90:81:19:c4:a4:3a:6a:69:dd:7a:64:6d:10:d8:7c:
                    bf:85:9c:e1:b2:9a:0a:35:f2:d7:ca:79:f6:11:5a:
                    41:6d:6b:80:5d:1e:7f:b6:e2:b4:ab:e8:80:7d:f5:
                    63:ea:58:a1:59:85:28:52:5e:66:e5:02:ee:5d:a1:
                    2a:4b:06:43:33:3c:ae:fb:b8:88:1f:1f:45:e4:ae:
                    d8:eb:81:8d:7a:99:26:f3:d7:e4:0f:b0:3f:fe:6b:
                    e7:20:24:51:7b:98:a9:5d:27:6c:41:04:03:07:3f:
                    32:ba:18:68:ec:49:6c:f8:d5:af:d0:a5:c2:9a:3a:
                    51:88:c6:a4:c2:a4:99:f1:55:6b:16:61:d3:33:9e:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:D6:4E:74:45:1E:06:A3:63:52:90:E8:5B:E2:AB:F8:07:DE:D5
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/6A38CC1E133711EF91974981C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:e1:87:6b:51:ce:da:d1:95:13:9a:05:58:16:63:11:f1:
         69:ef:a7:b4:9e:db:82:68:54:7e:d3:75:d8:00:1d:e9:ec:00:
         ce:94:88:b5:95:a0:d9:53:64:f9:75:65:9a:40:0f:28:12:85:
         75:36:2f:71:cf:20:8f:64:c2:c7:f2:c9:81:78:c1:68:60:f8:
         50:64:13:aa:30:8f:be:73:5e:56:ae:58:20:80:48:48:4e:d1:
         4f:95:7b:72:68:a1:bf:aa:5b:0f:3e:d1:f2:52:9f:6e:5e:6e:
         7a:69:48:03:a9:eb:29:c6:9f:69:fd:68:63:07:18:e2:2c:91:
         2a:a3:35:b5:19:dc:17:2d:a9:be:96:96:a2:ca:60:6c:5e:73:
         c0:cf:aa:b8:76:5b:db:20:ce:df:e0:9e:27:ba:ab:c7:d9:72:
         01:db:51:a7:9b:8a:87:95:22:65:2b:27:06:aa:f4:bd:d6:13:
         90:36:dd:a5:f3:52:c3:60:40:25:d6:4b:f2:65:a5:e6:95:ba:
         50:58:31:62:0d:0a:c5:76:a0:ab:68:24:9e:bf:10:75:96:87:
         da:5d:79:12:12:2a:b8:9a:38:1c:83:ea:4d:ab:c9:ee:d3:5f:
         93:b2:df:0d:36:e9:81:8d:3a:90:bd:8c:db:04:d9:4f:3f:0d:
         1a:c5:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:59 2024 by rpki-client on console-fra.rpki-client.org