Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa
File:                     6FCF7FF2180411EA9AA70A57C4F9AE02.roa (raw, json)
Hash identifier:          mKEtXAReo073pS6G/Scd6VusUJKflX5sGzsP9WFHvuk=
Subject key identifier:   32:56:AD:46:A2:23:9E:59:76:5D:F4:B8:74:D8:5E:D1:0B:83:A6:8F
Certificate issuer:       /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
Certificate serial:       0ADA
Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa
Signing time:             Sun 31 Dec 2023 19:57:25 +0000
ROA not before:           Sun 31 Dec 2023 19:57:25 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139788
IP address blocks:        103.145.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl
                          rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3
        Validity
            Not Before: Dec 31 19:57:25 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6591c7a5-c8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:ac:b2:37:39:38:4d:08:99:25:23:f6:df:
                    3c:87:0c:35:09:32:5f:57:1a:26:33:c3:ec:59:7a:
                    3b:54:f3:9d:61:0a:43:aa:05:5d:eb:40:5c:4e:1e:
                    5d:38:21:e2:bb:b3:1f:db:18:28:75:24:80:1b:b6:
                    96:f7:44:7e:aa:ee:10:26:9d:15:58:92:64:b7:c5:
                    52:d6:79:df:d5:cf:5c:f8:0c:c4:79:bf:fb:cc:24:
                    a9:65:a8:82:eb:25:55:68:25:35:f5:12:49:65:f4:
                    75:19:b9:19:b7:81:6b:4a:61:e7:43:27:2e:40:80:
                    28:b6:45:14:42:bb:61:27:91:cd:20:50:a1:5d:52:
                    f3:1f:d4:30:e3:f8:24:39:00:1e:cc:1e:ef:e4:a0:
                    e6:31:53:96:75:e8:f1:3a:85:6b:82:34:55:d2:1d:
                    20:2e:f9:f0:96:7c:ab:f2:0c:8d:4c:67:fe:37:ac:
                    ac:f8:bc:9e:ba:db:4e:41:e7:54:5b:1c:59:14:ac:
                    88:27:0c:e3:95:aa:a9:5b:92:f8:ce:ea:d3:0a:d0:
                    b1:41:03:30:fd:2a:ec:11:10:10:57:b5:0e:3e:b8:
                    50:b7:7b:c9:b3:9c:1a:f9:4e:f0:59:90:66:10:0c:
                    0d:32:9d:40:a9:c5:c9:87:93:50:14:f6:3c:7d:d7:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:AD:46:A2:23:9E:59:76:5D:F4:B8:74:D8:5E:D1:0B:83:A6:8F
            X509v3 Authority Key Identifier:
                keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/6FCF7FF2180411EA9AA70A57C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:f9:ec:fe:70:b1:00:6f:f6:f9:a5:31:82:5e:68:14:fe:62:
         b3:94:b9:12:89:32:61:56:1d:db:40:e0:fa:a1:0f:b8:fc:b0:
         c8:c0:3f:b4:43:84:c8:bf:dc:02:ee:0e:ee:b1:6f:25:8e:cf:
         f2:2f:ed:e6:56:69:10:90:f6:90:f5:e9:e5:06:f3:f7:9b:50:
         2d:c6:f2:28:a7:26:e2:e1:7a:fc:9a:82:5f:9b:f8:a3:a5:8d:
         14:c4:9f:e0:47:74:49:8c:36:35:27:5e:25:e2:01:46:ba:d6:
         56:05:6c:a7:90:84:7c:f3:f1:9b:eb:84:d8:95:d7:97:e4:2b:
         a5:71:08:8a:8f:d3:20:df:ec:9d:d3:62:e6:47:d8:31:1c:11:
         61:ca:74:17:4f:1c:79:54:ce:c7:bd:a7:ac:a8:1d:e5:18:4f:
         f1:8f:a6:a9:c1:6c:ba:32:7a:77:c9:93:92:a7:c9:11:01:c1:
         b6:19:0e:4f:9d:64:d6:ba:75:b9:bf:7b:79:b5:2e:57:f3:c4:
         37:3a:d4:ee:37:ea:da:a2:6e:18:4d:da:e6:e6:46:b9:14:19:
         67:6a:14:8c:5d:08:7b:43:65:4d:5f:ee:29:00:82:74:a6:b0:
         50:84:1e:df:8e:4a:41:72:a9:ac:13:3b:c9:5d:46:32:3e:da:
         d6:f4:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org