Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa
File:                     6CAF60F0296011EEB0606446C4F9AE02.roa (raw, json)
Hash identifier:          Sr1gM7DJLm8/XytX9UflbRy7ENHK/GAvCtTrDWx3wlo=
Subject key identifier:   84:FB:B2:DD:B0:4B:3A:74:0E:F2:0C:00:B2:32:44:58:5D:A6:47:AB
Certificate issuer:       /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
Certificate serial:       07
Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa
Signing time:             Sun 23 Jul 2023 13:54:21 +0000
ROA not before:           Sun 23 Jul 2023 13:54:21 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        103.115.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl
                          rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499
        Validity
            Not Before: Jul 23 13:54:21 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64bd310d-9721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:22:5b:86:16:9b:61:39:3a:c2:c8:ab:07:
                    c7:28:a7:ee:6f:48:57:ad:70:92:26:56:bc:25:19:
                    30:da:4d:ec:51:be:e8:03:b2:5f:10:33:82:d2:40:
                    7d:25:ae:2e:9d:56:69:5f:d0:54:22:7a:5f:a5:5d:
                    9b:19:a1:d9:b1:13:ed:3d:6f:14:f4:de:08:36:1c:
                    45:1b:d2:b6:13:eb:d2:67:8b:c9:a4:20:38:e0:60:
                    84:ef:8b:cd:0b:93:77:ab:c8:f5:6a:24:df:01:07:
                    34:09:eb:21:ea:9c:a8:67:e0:c4:27:83:4b:b1:df:
                    ed:e4:c8:1b:62:57:ee:ae:00:6f:02:b6:79:9c:c0:
                    e8:18:51:bb:27:b6:a0:3a:29:da:10:eb:b7:97:e7:
                    b8:9c:47:99:69:67:78:74:c5:cb:81:39:06:5a:63:
                    b4:fa:43:e1:cb:eb:06:59:f1:09:4f:99:43:eb:3f:
                    ae:78:f1:b7:35:de:10:53:3e:22:f2:ee:49:c2:dd:
                    ce:80:10:2a:ed:2d:b4:6c:5e:06:40:88:70:cf:e0:
                    ed:61:2f:fc:dc:09:84:c0:24:d1:26:79:1c:e6:35:
                    5b:23:84:00:46:f6:9a:2f:67:c4:d6:aa:d7:a1:57:
                    0b:a5:e5:b7:09:83:80:a7:64:0c:7c:d1:c8:01:e6:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FB:B2:DD:B0:4B:3A:74:0E:F2:0C:00:B2:32:44:58:5D:A6:47:AB
            X509v3 Authority Key Identifier:
                keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/6CAF60F0296011EEB0606446C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:77:a6:ae:68:f4:29:57:59:4d:20:41:0f:5a:d9:9d:d3:3c:
         26:2e:ea:1c:56:86:db:41:03:df:22:11:5f:04:80:db:3f:0d:
         7e:cc:fe:67:e5:53:6f:cb:0b:ef:fc:27:e5:68:ee:ac:6e:19:
         1e:15:02:a7:90:89:27:c0:ba:8c:91:51:8a:c7:41:ff:29:4c:
         f6:60:47:c0:f3:db:56:c9:d2:33:e1:bf:8d:c9:4e:c5:e3:8a:
         c2:99:22:09:31:45:ba:d4:c1:94:cd:c4:5a:63:ea:90:4e:bf:
         aa:aa:c2:dc:1a:0f:a4:77:6b:ba:86:fb:94:c1:2c:3a:d5:d8:
         0e:0a:bf:eb:52:a9:90:eb:04:7d:c9:25:8b:bd:1a:af:3f:9a:
         9b:15:c5:05:71:69:1a:fe:c0:28:40:ec:aa:41:c2:b1:72:e4:
         ab:dc:cd:94:d3:8c:38:07:55:e9:02:82:75:cd:3a:1d:45:08:
         b3:02:b8:37:2d:99:6d:f8:ff:7b:61:30:1a:48:fa:0d:47:b1:
         38:67:10:91:fb:7a:db:cb:2c:60:0c:c3:18:f9:f6:d9:45:20:
         86:0b:38:fb:fd:35:21:f4:26:c9:3c:a5:93:a5:c3:24:a1:8c:
         e1:11:ff:bd:b1:4d:26:48:96:c2:93:c7:39:f2:07:7c:4c:1d:
         6e:e1:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:53 2024 by rpki-client on console-ams.rpki-client.org