Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
File:                     9A745DF6BDC611EE9C87EF29C4F9AE02.roa (raw, json)
Hash identifier:          u8kIsJVIp78SEEepgF6rWdlvVZL0QiUXSZNCFyMREy4=
Subject key identifier:   2C:47:1F:7E:EA:4C:7B:2B:1A:48:18:BC:AF:BF:07:CE:48:AD:72:2C
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       B5
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
Signing time:             Sun 28 Jan 2024 10:18:39 +0000
ROA not before:           Sun 28 Jan 2024 10:18:39 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     137218
IP address blocks:        103.56.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 06:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Jan 28 10:18:39 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b629ff-1b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:44:aa:8b:d7:7e:0b:fa:51:6d:d1:7c:c4:
                    e9:6a:45:1d:50:92:a5:9f:cf:2e:1a:21:e0:e0:9e:
                    71:9e:10:a4:3d:09:76:1e:fb:04:b7:80:b6:db:ad:
                    01:fb:87:84:09:8a:ef:4f:3c:6e:3d:a5:46:5e:40:
                    3c:a3:01:0e:cf:35:82:3d:6e:ed:23:eb:12:e7:17:
                    72:ed:3c:79:dc:e7:6c:35:2b:72:ec:c6:4a:db:c8:
                    82:93:58:43:50:4d:81:0c:d9:ba:7f:15:ae:4d:c2:
                    47:54:18:99:4d:14:4d:ed:93:0e:a2:ae:ff:94:7e:
                    c1:96:af:a2:3e:ee:d5:15:c2:27:04:ce:cd:d2:2c:
                    68:33:72:56:ed:d3:a6:92:92:a8:d9:8c:e7:ee:45:
                    b0:6d:ea:23:fd:ac:66:72:6e:57:13:8a:85:ef:3f:
                    1d:31:14:57:57:53:3a:92:07:d1:76:ab:1b:38:5d:
                    e2:83:0c:1d:48:09:eb:aa:6b:04:e1:bd:c9:0e:e1:
                    c7:d4:11:8c:29:14:1b:3f:a5:28:2c:e7:9c:91:7b:
                    dc:f1:be:c9:f0:dc:f8:86:d9:bd:36:0f:45:e7:9a:
                    d9:30:72:77:6f:d7:13:f8:23:89:a3:95:9a:8a:10:
                    82:88:a9:ab:dd:12:80:71:97:4b:bc:be:1a:de:df:
                    6b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:1F:7E:EA:4C:7B:2B:1A:48:18:BC:AF:BF:07:CE:48:AD:72:2C
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/9A745DF6BDC611EE9C87EF29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:08:bc:9c:96:85:52:b6:cb:04:ae:bd:e5:ad:94:b0:31:da:
         03:f8:9c:20:14:54:31:f8:06:8a:fa:64:a6:a0:26:84:83:88:
         3f:31:ea:d7:e6:b7:3b:bc:a0:7a:67:50:33:3f:4a:9e:43:14:
         b2:d3:28:1c:64:42:f5:8f:18:04:9d:50:fb:47:a4:6e:f1:b5:
         df:d3:d0:88:d4:2b:41:46:8b:05:b5:88:3c:2d:4e:cd:92:15:
         ac:30:3c:c6:ff:14:f2:ca:e8:a2:90:a5:07:3c:88:74:ba:d1:
         b9:83:72:90:74:69:ef:c5:56:2e:f6:6a:6b:cc:fa:e6:58:2b:
         8d:6f:eb:4c:54:1a:9a:e3:92:3a:78:27:0e:e5:35:0b:d5:38:
         f8:9d:a7:f1:3f:8b:06:6c:2f:33:75:07:a8:6b:0a:cd:b0:5c:
         10:d7:02:26:40:b6:1a:9f:94:1f:01:23:52:2d:41:cd:fb:44:
         32:c7:f1:c3:f9:92:73:79:3e:da:df:77:c1:6c:3a:90:b7:6e:
         15:3a:56:b6:06:85:00:97:c6:d6:75:1b:27:66:64:3b:59:c7:
         b0:8b:ac:41:1a:84:51:b9:a7:0b:5f:c5:f2:73:9f:59:2f:b4:
         0c:d0:00:41:69:af:57:e0:75:c9:49:b0:01:84:76:e8:ff:e0:
         e5:e7:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:56:39 2024 by rpki-client on console-fra.rpki-client.org