Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa
File:                     6F873B3A7CD211EDA61A1836C4F9AE02.roa (raw, json)
Hash identifier:          PSspa5WVVyZVjZshrPddZ4pxM5+1BnN/vAbf8jxE3ag=
Subject key identifier:   81:5E:08:30:18:59:8A:47:0E:9E:05:B4:3D:D7:79:2D:02:D9:EB:43
Certificate issuer:       /CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
Certificate serial:       DD
Authority key identifier: 17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa
Signing time:             Wed 31 Jan 2024 05:45:49 +0000
ROA not before:           Wed 31 Jan 2024 05:45:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     45280
IP address blocks:        103.232.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl
                          rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911549E/serialNumber=17F464683A9CACFFEE392DDAB55EC0410C296AA1
        Validity
            Not Before: Jan 31 05:45:49 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9de8d-ee00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:74:8e:92:ed:7d:50:fe:11:2d:72:5a:e5:
                    b6:1b:3c:e8:e0:53:67:36:6e:85:7b:64:3b:b8:c7:
                    ef:13:b3:d3:59:d6:e1:b0:ef:e0:9b:91:55:24:f1:
                    41:aa:a6:57:58:4e:46:14:bf:a7:32:12:9c:a5:d3:
                    7f:4c:74:d7:b7:21:cd:bd:fd:b9:7f:4b:c4:5d:79:
                    b7:c4:63:e8:87:0f:59:ec:19:1f:b5:01:1e:7e:51:
                    3e:9b:81:28:2a:07:d9:0b:d6:a9:e4:a4:08:d0:99:
                    9b:d8:89:c7:7d:cb:81:d8:eb:d7:a2:4d:c6:cf:a1:
                    ac:bc:08:6f:02:53:39:09:b9:22:d4:55:c8:0e:22:
                    dd:b5:26:77:0e:59:fd:e2:df:b9:34:93:3b:b7:91:
                    0f:9e:95:c4:7b:f3:5f:d3:e7:5d:77:c6:00:1f:93:
                    50:5f:c4:81:a1:90:34:dc:26:c4:f4:3b:77:58:23:
                    24:7a:98:99:90:75:79:28:35:e5:ce:4e:34:70:4a:
                    15:df:df:8f:d7:39:a6:de:a0:98:0a:72:df:48:49:
                    07:e2:d0:87:9e:5f:0a:70:7c:a1:fb:12:cf:fb:dd:
                    54:13:a7:e3:87:42:8d:8b:2a:c5:6d:92:bd:3c:df:
                    e5:6b:04:af:40:ac:78:38:3f:d6:f7:4f:a3:79:14:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5E:08:30:18:59:8A:47:0E:9E:05:B4:3D:D7:79:2D:02:D9:EB:43
            X509v3 Authority Key Identifier:
                keyid:17:F4:64:68:3A:9C:AC:FF:EE:39:2D:DA:B5:5E:C0:41:0C:29:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/F_RkaDqcrP_uOS3atV7AQQwpaqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_RkaDqcrP_uOS3atV7AQQwpaqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911549E/B225B19C7CCD11ED9F8E0B2FC4F9AE02/6F873B3A7CD211EDA61A1836C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:89:58:b1:2e:76:20:2b:58:2d:38:d9:b0:78:11:b4:ad:
         1b:0f:b9:c2:0b:9a:cb:44:b9:ab:dc:3e:a3:79:ae:f5:8c:aa:
         e0:be:81:67:36:60:17:ea:fb:0c:1b:03:e2:7e:df:55:be:2a:
         da:bc:d0:b3:8f:51:32:d2:97:61:09:b9:bb:b0:74:19:27:06:
         21:c1:13:7b:fc:b9:31:8d:2e:f7:cc:85:f5:27:30:b3:38:a2:
         e2:5f:a4:4e:4b:f9:29:4f:26:d6:e6:f4:4f:77:6d:89:db:15:
         64:a3:02:67:6d:09:8b:f0:53:9a:06:18:b9:37:23:e3:0e:d6:
         ef:4c:4f:ea:57:dc:bf:ad:0a:ac:3e:58:7f:2a:21:82:5d:00:
         bc:d7:76:f5:1b:fe:9e:9c:92:01:07:5d:db:0f:e1:ee:01:4b:
         a5:a5:ca:a6:9e:9d:4e:c0:a4:f5:fd:03:8f:77:15:43:6f:f1:
         3a:fd:8f:3a:cb:0f:00:b3:df:b6:44:79:b9:ec:10:35:d8:62:
         47:ab:cb:4a:f4:0a:ab:28:38:a0:42:89:40:4b:cc:45:73:1d:
         a6:c4:46:5f:f2:0c:97:18:ed:48:4b:c6:25:b7:ec:56:57:7e:
         e6:7e:bc:cc:3b:c5:7f:9f:b2:4a:49:70:34:73:35:f9:de:a0:
         7b:4f:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:09:18 2024 by rpki-client on console-fra.rpki-client.org