Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/6F57F77659AF11EDB5683587C4F9AE02.roa
File:                     6F57F77659AF11EDB5683587C4F9AE02.roa (raw, json)
Hash identifier:          q5H8LfuUxTHiqeIXQ5n58+mIRFaPFvtku7zhC5Nrk2o=
Subject key identifier:   2A:7D:5B:94:F4:03:AD:46:DD:86:8A:AF:33:B8:20:E6:2D:86:B7:BB
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       C5
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/6F57F77659AF11EDB5683587C4F9AE02.roa
Signing time:             Thu 09 Nov 2023 04:55:00 +0000
ROA not before:           Thu 09 Nov 2023 04:55:00 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     132829
IP address blocks:        103.30.8.0/23 maxlen: 23
                          103.30.8.0/24 maxlen: 24
                          103.30.9.0/24 maxlen: 24
                          2400:bd60::/32 maxlen: 32
                          2400:bd60::/48 maxlen: 48
                          2400:bd60:1::/48 maxlen: 48
                          2400:bd60:2::/48 maxlen: 48
                          2400:bd60:3::/48 maxlen: 48
                          2400:bd60:4::/48 maxlen: 48
                          2400:bd60:5::/48 maxlen: 48
                          2400:bd60:6::/48 maxlen: 48
                          2400:bd60:7::/48 maxlen: 48
                          2400:bd60:8::/48 maxlen: 48
                          2400:bd60:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Nov  9 04:55:00 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654c6623-ce60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:96:e3:a5:1c:98:9f:18:4e:44:06:3f:a1:
                    00:5b:e4:96:37:20:73:af:55:72:68:c8:b1:98:08:
                    df:48:51:99:d0:d6:a5:62:4e:b7:dd:2b:94:6e:59:
                    f7:8d:14:bc:74:05:57:6c:07:c0:e7:59:f6:49:c0:
                    3a:89:2e:4e:d0:d4:34:25:ae:f6:a3:9a:62:b4:bb:
                    19:1d:29:1d:24:8d:3f:ce:cc:19:a5:d1:f1:22:e7:
                    42:ad:d8:05:ea:3f:54:fc:17:f3:7a:0b:28:48:bc:
                    b5:a8:97:39:bf:de:d4:71:44:2b:ae:62:69:25:e6:
                    c1:a2:14:d0:e8:bc:ac:bb:71:28:50:43:55:0e:8c:
                    e4:51:9b:5d:7f:67:d1:63:3b:91:a3:e3:5c:e5:fa:
                    29:32:09:b1:dc:ce:0d:69:56:43:b3:a1:bd:74:51:
                    98:bf:c4:d1:fd:27:bd:df:9e:2c:4b:08:fa:17:6a:
                    5b:d9:2b:57:8e:5b:73:8b:8a:6d:a0:39:c2:1f:f9:
                    be:23:d4:6f:5d:91:0e:6e:fd:fa:d2:fa:c2:98:16:
                    39:25:eb:e6:5e:5f:a7:5b:6c:9e:e8:4f:37:cd:ff:
                    bc:4b:d4:00:50:30:39:d6:ae:69:6a:a1:94:a9:21:
                    6b:52:21:4e:19:02:14:e4:2e:4a:fc:8d:19:4c:91:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7D:5B:94:F4:03:AD:46:DD:86:8A:AF:33:B8:20:E6:2D:86:B7:BB
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/6F57F77659AF11EDB5683587C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.8.0/23
                IPv6:
                  2400:bd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:0b:77:db:f9:4d:45:fb:df:18:c3:e9:c2:46:84:34:34:ff:
         3d:7a:14:84:1d:2b:45:9b:a4:12:9d:06:2a:f0:60:8d:f9:46:
         fa:c9:22:9e:43:88:03:4e:00:6e:bd:c5:48:27:5f:e4:bb:c0:
         f7:ea:75:c0:e6:74:7d:e3:77:28:c3:56:15:6b:f3:9b:03:6b:
         fe:dd:61:87:85:0e:89:81:2b:80:7b:ec:65:4f:33:74:a3:d0:
         30:3f:c6:ef:c4:04:dd:ee:55:fe:c2:f9:61:12:93:94:c6:94:
         4f:4b:aa:93:58:6a:99:41:95:96:ea:e3:83:cc:dd:40:8f:b5:
         db:ee:16:ab:3f:8c:9f:17:72:79:f9:8d:12:80:b7:90:98:0b:
         fd:92:ca:16:ad:53:db:69:e6:08:f5:6c:f4:03:f8:8c:24:ad:
         44:3c:0f:8a:53:f6:30:e5:ea:95:8c:da:2d:85:2f:35:65:5d:
         65:3f:ec:e7:ce:89:a7:58:ed:6d:a1:e6:d2:d3:d2:6e:c5:8e:
         9c:2f:a3:39:a3:21:9e:3d:0e:89:8a:43:8b:58:bd:32:a7:15:
         0b:ad:9e:c7:50:0d:84:04:c3:92:2a:25:ba:70:c8:6c:e8:cc:
         d0:6e:ba:cb:93:80:87:7b:81:db:3d:ab:ec:7b:3e:d8:da:e0:
         e0:25:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:19 2024 by rpki-client on console-ams.rpki-client.org