Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
File:                     C7B754BEF85311ED8D59CA87C4F9AE02.roa (raw, json)
Hash identifier:          FKFKH5eFofFRTvqGy9vDB52V4WqF8Uh4JVrswNbtjMM=
Subject key identifier:   C0:37:2C:65:D3:32:0F:DD:99:5B:F2:71:3F:25:08:AC:41:24:F9:F9
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       0490
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
Signing time:             Sat 15 Jun 2024 02:38:06 +0000
ROA not before:           Sat 15 Jun 2024 02:38:06 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     45352
IP address blocks:        103.230.56.0/24 maxlen: 24
                          103.230.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jun 15 02:38:06 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666cfe8e-c0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:e6:a6:c6:d8:1a:7d:94:ee:a3:5d:40:ee:
                    18:ee:1b:d2:f8:b0:0a:6d:91:ce:25:ca:1f:e7:d7:
                    64:f1:17:13:02:7e:96:be:28:7a:1c:d7:b5:e5:ca:
                    19:e3:a6:b9:2d:0f:87:9b:5e:26:f5:58:d5:3c:cd:
                    bc:c0:03:2a:c5:7b:8f:c7:56:cd:d8:99:77:b2:b8:
                    24:40:3a:7d:12:1e:3b:30:40:2d:1c:e5:75:c2:7e:
                    d5:40:00:06:f2:0b:8f:a0:0d:19:49:77:41:48:b2:
                    d1:ee:d1:f7:29:25:26:b3:e6:7e:f5:a6:a6:dd:8e:
                    55:b5:20:72:9c:f3:23:5a:c4:a1:b4:cd:d4:cd:c7:
                    44:cb:30:ea:13:d1:68:aa:cb:ca:fc:c8:0e:de:fc:
                    8b:c0:99:54:5a:5e:df:aa:d2:ac:6f:9c:2f:10:fb:
                    94:50:e9:00:6d:01:7b:ff:95:99:16:dc:43:eb:bf:
                    ca:31:90:9a:ec:e8:3a:23:e1:f2:d1:5e:93:36:52:
                    ff:33:28:d9:1b:52:dd:8b:e5:60:76:44:e6:27:32:
                    9b:7b:8d:88:2a:65:73:37:a3:f9:c5:2e:3d:34:e4:
                    c5:6b:75:73:f5:19:9f:3c:17:23:fc:1d:19:0d:51:
                    bb:a0:cd:ec:37:5f:bc:cd:c1:23:d0:30:19:70:ce:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:2C:65:D3:32:0F:DD:99:5B:F2:71:3F:25:08:AC:41:24:F9:F9
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/C7B754BEF85311ED8D59CA87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.56.0/24
                  103.230.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:54:f8:65:ba:c7:59:14:63:fc:7a:6c:b8:d6:39:13:d4:
         db:37:0c:dd:9c:e1:b7:81:a8:10:e3:42:09:8d:12:72:1d:42:
         ee:be:c1:62:49:96:f1:88:02:ad:1e:b0:41:25:81:e8:47:ea:
         03:d1:2d:99:65:15:71:29:fb:ff:dc:6c:e1:40:66:8b:7a:3f:
         e9:31:8d:b7:25:64:68:ff:b1:76:54:39:90:cf:c1:e5:b2:e5:
         73:85:98:83:af:5e:94:44:01:75:6c:79:53:c6:7f:af:19:23:
         e9:78:d5:f2:3b:f6:21:00:79:be:91:b3:9c:51:d8:00:b2:88:
         3c:2b:52:e1:2d:af:b2:b8:f5:e9:90:96:d0:75:3f:d2:11:96:
         10:c1:f2:f1:04:27:ff:29:1f:a9:fa:5a:03:1c:14:23:2a:a3:
         28:06:26:3e:05:00:52:66:7c:6c:9b:30:e0:9f:99:12:7c:a4:
         fa:17:d1:38:4d:f4:51:02:a9:85:29:f8:6c:f3:d8:69:4d:6c:
         e6:1d:3a:ad:de:8c:ef:f0:54:25:75:d6:ed:c9:7a:fe:98:5d:
         23:e6:48:d6:b7:44:50:97:b0:44:e0:9a:66:0e:4e:25:b8:fd:
         df:3e:d9:ef:b3:e1:89:91:2a:79:ef:66:62:9f:d1:2a:f3:23:
         d3:fb:ae:44
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1
NDI2QTFBMDMwHhcNMjQwNjE1MDIzODA2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjZjZmU4ZS1jMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqurmpsbYGn2U7qNdQO4Y7hvS+LAKbZHOJcof59dk8RcTAn6Wvih6HNe15coZ
46a5LQ+Hm14m9VjVPM28wAMqxXuPx1bN2Jl3srgkQDp9Eh47MEAtHOV1wn7VQAAG
8guPoA0ZSXdBSLLR7tH3KSUms+Z+9aam3Y5VtSBynPMjWsShtM3UzcdEyzDqE9Fo
qsvK/MgO3vyLwJlUWl7fqtKsb5wvEPuUUOkAbQF7/5WZFtxD67/KMZCa7Og6I+Hy
0V6TNlL/MyjZG1Ldi+VgdkTmJzKbe42IKmVzN6P5xS49NOTFa3Vz9RmfPBcj/B0Z
DVG7oM3sN1+8zcEj0DAZcM5MCwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMA3LGXT
Mg/dmVvycT8lCKxBJPn5MB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF
NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTIzMjAvNkQ3MDVCQ0VGRTcwMTFFQjlDRkI5MDI5QzRGOUFFMDIvQzdCNzU0QkVG
ODUzMTFFRDhENTlDQTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABn5jgDBABn5jowDQYJKoZIhvcNAQELBQADggEBALZ7VPhl
usdZFGP8emy41jkT1Ns3DN2c4beBqBDjQgmNEnIdQu6+wWJJlvGIAq0esEElgehH
6gPRLZllFXEp+//cbOFAZot6P+kxjbclZGj/sXZUOZDPweWy5XOFmIOvXpREAXVs
eVPGf68ZI+l41fI79iEAeb6Rs5xR2ACyiDwrUuEtr7K49emQltB1P9IRlhDB8vEE
J/8pH6n6WgMcFCMqoygGJj4FAFJmfGybMOCfmRJ8pPoX0ThN9FECqYUp+Gzz2GlN
bOYdOq3ejO/wVCV11u3Jev6YXSPmSNa3RFCXsETgmmYOTiW4/d8+2e+z4YmRKnnv
ZmKf0SrzI9P7rkQ=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org