Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa
File:                     0C5564C2E3AC11EAAAC85761C4F9AE02.roa (raw, json)
Hash identifier:          5FYn5QVSBhm0XZoV+j+o/nzPJ0WO1FJiMFnDtdxaDwM=
Subject key identifier:   4F:1F:C6:E2:72:5C:A7:C5:21:C5:F2:C6:C5:D8:43:37:3F:A9:C1:6C
Certificate issuer:       /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
Certificate serial:       0737
Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa
Signing time:             Thu 02 May 2024 22:41:55 +0000
ROA not before:           Thu 02 May 2024 22:41:55 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     53550
IP address blocks:        103.214.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 22:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7
        Validity
            Not Before: May  2 22:41:55 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663416b3-cd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:28:6e:7a:16:9a:ce:59:fc:31:3f:79:7f:
                    be:4b:0b:95:9d:68:bd:89:43:43:b3:bd:88:ac:11:
                    59:ce:0a:05:6c:d7:9d:1d:85:8e:2f:10:e1:0f:3a:
                    f1:f8:ad:f6:f7:8f:a0:2f:dc:eb:cd:e4:64:e9:50:
                    63:10:db:83:cd:70:89:97:5c:2f:94:99:fc:68:73:
                    d1:7e:f1:86:ac:6f:7c:47:0b:fe:e1:d6:ba:dd:7d:
                    2e:ee:77:4a:16:c8:75:bd:63:1d:e6:69:5f:a9:c5:
                    b3:0c:56:95:2f:fe:36:bc:b2:17:36:8c:6b:3e:65:
                    11:52:15:17:72:18:6a:44:b0:d4:92:f4:3b:9d:2d:
                    be:f8:d2:79:39:cb:d6:80:d3:a1:cd:e8:d3:83:2a:
                    ba:b1:99:9c:73:8a:34:c1:d1:7c:95:f5:91:10:26:
                    2b:7f:bb:f4:c4:b9:9c:e9:6e:ee:2d:5f:7b:ca:90:
                    cb:7e:90:de:bf:cb:6a:0a:29:26:99:e7:47:f9:a9:
                    4d:d2:86:78:dd:a1:ba:70:e7:08:f1:07:18:1a:86:
                    9c:29:d5:9a:4c:85:8d:fc:bf:d7:f2:b0:e2:aa:57:
                    41:0d:cd:4c:60:5e:78:58:86:f1:83:1d:68:aa:84:
                    50:20:da:e1:90:03:0d:6f:6f:d1:f3:13:a0:fb:2c:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1F:C6:E2:72:5C:A7:C5:21:C5:F2:C6:C5:D8:43:37:3F:A9:C1:6C
            X509v3 Authority Key Identifier:
                keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0C5564C2E3AC11EAAAC85761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:b7:73:08:ab:59:6d:2c:3b:ba:b0:53:d5:3d:7c:a1:8f:
         84:c5:f9:fc:b2:db:3e:df:7b:43:3e:3e:0b:c6:e2:1c:6a:20:
         08:ee:3a:38:78:84:4b:fb:e0:ce:de:81:ca:d9:fe:e0:9d:1c:
         23:e4:18:f3:e7:74:70:55:e7:d3:8f:5e:96:40:f5:55:05:ff:
         87:8e:2a:ee:cb:9b:32:8d:d9:4b:91:8e:04:ca:ae:4f:7f:f0:
         a7:65:03:62:c0:3b:c8:c8:1a:e9:f9:a6:d8:f9:6b:c4:7c:5e:
         a1:95:9d:95:b4:2c:b6:2c:74:2f:b5:c0:5f:b1:07:d4:d7:a6:
         d7:d9:a3:23:92:e3:62:f5:9e:c5:a4:2a:d7:61:31:0c:10:a0:
         43:9b:89:0d:ac:bb:b3:f4:86:89:29:f3:9a:b9:7f:54:34:9d:
         70:c1:eb:a2:b4:44:72:7d:71:de:f8:4e:f3:80:b2:6a:8e:84:
         e0:9d:a3:8a:a7:07:c2:91:27:c4:de:2c:e9:f1:27:92:96:ba:
         4b:9f:3a:f6:2b:8b:48:65:90:d5:ad:e6:ef:9a:ae:4a:c7:78:
         6e:fb:b3:c9:90:d9:17:9a:ea:99:25:56:55:64:d6:b6:9c:b3:
         2f:e5:18:1b:a9:f8:a4:87:6c:53:7f:b7:fe:28:0c:02:c8:20:
         7f:67:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 23:20:10 2024 by rpki-client on console-fra.rpki-client.org