Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6DD1144AACC311EBA28FAD5FC4F9AE02.roa
File:                     6DD1144AACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier:          czOX77QmnoYQ86gEkshKffr/lBAz+b6Ploh7ySLgMZI=
Subject key identifier:   1A:69:E6:B1:89:07:DD:F6:A5:46:54:2E:98:FA:91:4D:14:C5:F8:78
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       04E3
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6DD1144AACC311EBA28FAD5FC4F9AE02.roa
Signing time:             Sat 21 Oct 2023 00:12:42 +0000
ROA not before:           Sat 21 Oct 2023 00:12:42 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     137969
IP address blocks:        103.155.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 00:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct 21 00:12:42 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65331779-6d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:09:b4:d4:8f:7a:b5:7e:d2:68:94:6e:59:
                    1e:65:f4:4b:fa:9f:26:3c:a9:d7:fe:54:27:4c:17:
                    aa:62:b3:54:5d:f5:5d:0e:45:01:f2:62:fa:4d:c3:
                    f5:4a:b6:56:ab:08:75:4c:d8:a2:d0:18:eb:a2:00:
                    81:53:5b:21:4b:23:ff:41:a6:5c:47:6d:19:1e:15:
                    f8:ee:9a:37:4f:dd:71:20:2b:01:f0:9a:36:4a:fa:
                    5d:00:78:dc:ad:25:08:83:a8:d0:c0:8b:46:70:c9:
                    74:10:bf:f7:77:e4:1b:be:71:16:7d:82:7c:a1:b9:
                    95:f3:10:ed:49:bb:74:31:57:62:4d:32:46:53:53:
                    39:47:a3:70:eb:72:30:4d:b0:5b:c9:1c:7e:ad:98:
                    08:66:83:91:39:3a:b5:68:23:ed:4b:4a:a1:92:e7:
                    28:36:7e:c5:90:c6:4b:ce:87:2d:20:ad:d1:b8:92:
                    f8:3a:ea:cc:6b:2e:84:9e:0f:69:28:ca:32:23:d9:
                    e6:0c:f5:3a:42:60:64:1b:ed:71:11:80:47:fa:e8:
                    5d:9c:50:10:0b:b9:6c:02:f8:ec:2a:2c:3e:71:fb:
                    93:96:c3:ab:b1:1c:a5:8b:e2:2b:c6:fe:b1:97:5d:
                    db:32:eb:df:c1:b4:cb:70:90:a3:cf:1e:1f:d4:ee:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:69:E6:B1:89:07:DD:F6:A5:46:54:2E:98:FA:91:4D:14:C5:F8:78
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6DD1144AACC311EBA28FAD5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:53:06:a7:fc:56:41:74:84:18:de:98:a5:1e:2c:cb:f6:af:
         09:07:33:fa:95:7e:2c:75:2c:3d:84:83:ef:38:02:11:80:41:
         05:fc:f0:75:10:47:91:67:ec:c4:ec:4b:51:9e:3a:57:82:7a:
         0d:2a:1a:1b:71:6b:25:eb:ef:e8:6b:79:98:86:58:d2:95:c1:
         dc:0d:63:e4:53:af:0c:59:0a:ce:16:62:d2:3c:35:b8:63:0e:
         5a:cf:4f:99:7c:5d:f2:be:fa:a9:e3:be:ea:a0:24:20:ab:ad:
         0b:e8:31:9e:c3:25:9c:38:ab:31:1a:ac:fd:85:1a:be:fa:8d:
         e4:b6:bb:8f:10:1b:24:ae:a2:8a:95:1a:8d:78:71:cf:33:0b:
         29:b3:41:d0:b6:82:a0:09:e3:aa:d5:d7:42:f6:66:f8:aa:11:
         80:b6:f4:04:0a:b2:71:8d:61:51:ca:7e:17:a4:ec:b6:02:d4:
         f8:45:09:80:a3:13:fb:fe:06:ad:4f:37:7e:7a:90:fa:94:a9:
         3c:10:5a:f1:2b:d1:84:5f:cd:0f:cf:67:8d:f3:08:3a:65:0f:
         e9:14:5d:cf:6d:f5:21:0b:95:e8:81:7b:11:b5:f6:fe:02:d9:
         bb:55:6d:96:c2:79:db:af:56:00:67:41:b7:0c:d6:80:28:9e:
         06:53:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:45:07 2024 by rpki-client on console-ams.rpki-client.org