Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
File:                     6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          SakjzCB9MmCgU+fdTuE6Cb706ZRBlPb9YTDyher0XEo=
Subject key identifier:   47:3A:91:31:A8:65:BF:57:4A:C4:28:25:1A:C9:16:15:7F:2C:12:7D
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       336B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:12:59 +0000
ROA not before:           Tue 30 Jan 2024 16:12:59 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55684
IP address blocks:        103.23.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13163 (0x336b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:12:59 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b9200b-589a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:a7:7f:80:08:ec:44:70:a0:c1:28:82:91:
                    fe:3f:db:2e:d5:1e:07:a7:54:bb:3a:a8:af:bb:d7:
                    c1:b8:75:03:b5:5c:1b:04:df:ff:d3:8d:b5:4a:5e:
                    4f:70:10:9b:11:40:41:9a:3d:c6:ab:03:4e:37:d6:
                    a7:ec:5a:c7:20:bf:a3:a4:a6:55:91:1c:c0:bf:b7:
                    8c:c4:27:39:c3:1e:ec:02:67:30:cb:cd:24:80:29:
                    99:ce:5d:47:94:24:3d:57:26:4f:08:a0:dc:42:b3:
                    d2:7d:42:d2:c7:f3:e9:55:17:2f:eb:c9:c9:3e:a3:
                    f7:3a:b2:2e:fa:d8:24:6b:bf:50:6d:59:e8:42:fd:
                    2f:b7:89:eb:a0:7e:f2:c9:73:ae:80:84:aa:97:98:
                    a7:3f:b5:13:5e:55:22:35:f2:68:64:57:30:01:16:
                    27:86:f9:bb:61:2b:38:60:c9:dc:28:5b:b3:90:ef:
                    16:55:80:c0:cc:99:fd:50:93:40:14:42:bb:c6:11:
                    50:f5:df:b0:75:40:30:8e:92:66:d4:e5:a9:9a:36:
                    25:cb:6d:f1:d8:ff:1e:28:44:f8:8b:de:ad:ec:50:
                    35:3e:a6:ec:b3:86:56:cd:f6:8b:d3:b5:13:2b:52:
                    6f:a7:3c:60:bb:cc:2e:07:90:dc:4f:5c:ab:66:eb:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:91:31:A8:65:BF:57:4A:C4:28:25:1A:C9:16:15:7F:2C:12:7D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:88:09:8a:f5:42:28:1c:12:42:7e:89:26:24:4d:2d:61:9c:
         e7:0e:d7:fb:01:e7:d5:55:75:2b:80:a3:15:7b:ea:ed:f9:c4:
         3c:2d:90:e2:91:e3:45:01:cb:be:5a:17:2c:f9:9e:ee:14:9c:
         93:37:86:d4:01:b9:6b:1e:38:f1:b4:96:18:0b:13:61:06:19:
         97:85:6b:de:26:53:35:3f:f2:0f:01:f7:79:7e:b0:e1:5b:90:
         d6:77:c8:ed:cc:52:e6:6b:dd:ff:ef:3a:62:8e:04:8e:d0:33:
         75:8e:0c:c7:0c:2d:5d:06:e9:80:bd:d7:d0:04:07:07:e2:47:
         1b:ad:d9:d4:77:10:79:19:32:dd:0d:2e:b6:ff:23:c2:33:1e:
         a4:78:14:f4:64:1f:88:f1:7a:0d:df:59:7d:26:5f:8f:9f:ac:
         34:1f:d8:45:aa:2b:25:82:e6:87:0c:65:2f:c8:22:3c:69:0f:
         28:ee:6b:b8:a0:78:47:8b:e2:21:78:d6:f4:8e:fb:02:30:e4:
         76:96:50:ea:31:63:dc:14:e7:91:f4:e8:4f:c6:06:d6:b1:dd:
         d0:ad:da:4b:6f:12:60:0b:a4:ac:bd:0c:41:75:82:47:71:ed:
         dc:e8:dd:ee:4e:ac:65:9b:51:96:fb:d9:52:01:d4:f3:f8:4e:
         dd:2c:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:10:27 2024 by rpki-client on console-fra.rpki-client.org