Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa
File:                     25DD10F26F3211EDA3DCF033C4F9AE02.roa (raw, json)
Hash identifier:          XH5unmWwWCdLbJdTx9XdtxFjo8wHLicd3InDS3kED1w=
Subject key identifier:   F7:A9:A1:89:8D:93:78:29:DA:AA:CB:9A:A5:79:49:89:E7:9A:45:54
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       77
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa
Signing time:             Sun 09 Jul 2023 03:43:01 +0000
ROA not before:           Sun 09 Jul 2023 03:43:01 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     54092
IP address blocks:        203.55.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Jul  9 03:43:01 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64aa2cc4-ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:38:9b:17:a3:0a:ed:eb:38:57:ca:24:ec:
                    28:21:6c:ab:c6:b9:fe:17:6c:ef:55:86:1d:52:cb:
                    0b:c9:6f:f3:b3:01:8d:e1:e2:0a:b9:8f:64:b6:df:
                    98:7f:ea:7d:39:f4:03:6e:4b:b7:aa:cb:a9:26:d7:
                    dc:1f:4d:09:09:bb:65:bc:c4:f0:3e:73:92:a5:79:
                    09:d1:37:e7:17:c9:7e:61:24:a4:f6:9b:10:32:c2:
                    04:cc:c2:45:bd:10:86:88:98:81:bc:c9:16:25:a0:
                    98:e7:ea:55:1a:34:f7:3e:b7:d6:58:6c:62:d0:2c:
                    3f:84:77:8f:2c:2c:2d:18:9e:ce:bf:2e:2a:0d:af:
                    32:6d:11:9c:47:96:39:d3:4a:97:c2:0d:6f:15:8b:
                    12:77:a3:2f:3b:5e:a6:a7:14:4b:9b:80:e9:44:70:
                    35:d4:52:8c:19:04:91:27:68:f6:15:39:ea:c8:62:
                    a0:53:b0:7d:b1:cd:e6:6e:66:de:b6:e9:ad:a5:58:
                    8c:fc:54:71:34:67:69:2d:a4:f7:b7:c0:ef:61:e4:
                    d5:cc:55:fb:18:05:c9:2c:f6:0d:43:6b:da:7d:ba:
                    08:9d:14:c8:d0:d5:f5:3e:72:02:d4:ce:7e:1d:48:
                    65:9e:bc:43:7e:58:1c:34:3c:9b:d0:1f:3e:dd:a2:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:A1:89:8D:93:78:29:DA:AA:CB:9A:A5:79:49:89:E7:9A:45:54
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/25DD10F26F3211EDA3DCF033C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:29:38:dc:8d:b8:e0:05:d9:a2:19:bf:1f:17:bb:a2:54:
         1f:c3:4b:09:88:82:72:50:d4:c1:1a:ec:c0:5c:06:4a:0e:18:
         88:a5:94:9a:b3:7a:62:1d:e7:6c:94:5c:d6:b9:24:05:95:b0:
         8d:d9:ea:e6:b3:c2:bf:0c:de:9d:7d:ea:70:de:fa:07:27:96:
         f9:0b:8e:f1:94:10:27:4d:0a:c2:b0:48:29:27:58:6c:50:02:
         f1:a3:c5:be:34:e6:e7:04:3b:a4:23:ac:95:3d:3c:70:5c:72:
         c6:76:d9:93:e0:0d:ab:08:ab:c4:75:a1:97:c7:bb:c6:b4:28:
         9a:7a:d8:cf:9b:36:0f:f6:a0:cd:a3:da:20:50:89:b5:a9:48:
         91:24:ce:28:00:da:9d:73:11:b2:4f:51:4f:a5:c1:6b:af:05:
         77:97:80:ed:a1:47:bc:c0:db:62:58:02:ef:3e:0c:67:90:b9:
         e9:3f:ea:be:88:a5:27:a4:6b:48:fe:1d:87:97:d1:5d:08:b5:
         8b:ba:18:ab:d0:b0:65:60:88:e1:a1:85:2f:1a:f6:f2:92:9f:
         97:c8:d4:ce:92:9c:ee:71:22:01:54:19:8f:ba:5e:92:9b:9d:
         9f:e1:90:75:11:c9:f3:37:97:ce:ca:b7:d7:90:9c:ad:bc:49:
         ca:77:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:20 2024 by rpki-client on console-ams.rpki-client.org