Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/C6CD392C951111EFB906EE25C4F9AE02.roa
File:                     C6CD392C951111EFB906EE25C4F9AE02.roa (raw, json)
Hash identifier:          MNDMDJlCyirPaUsQSuMDU67Qsy9JImq4E9fRXZouKVM=
Subject key identifier:   13:BF:A5:C6:0D:22:64:77:8F:A9:B9:C2:0F:A2:53:C0:08:27:C7:58
Certificate issuer:       /CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
Certificate serial:       11FE
Authority key identifier: 10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/C6CD392C951111EFB906EE25C4F9AE02.roa
Signing time:             Sat 02 Nov 2024 17:25:31 +0000
ROA not before:           Sat 02 Nov 2024 17:25:31 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     10075
IP address blocks:        103.131.156.0/22 maxlen: 22
                          103.131.156.0/24 maxlen: 24
                          103.131.157.0/24 maxlen: 24
                          103.131.159.0/24 maxlen: 24
                          2403:cd40::/32 maxlen: 32
                          2403:cd40::/48 maxlen: 48
                          2403:cd40:4::/48 maxlen: 48
                          2403:cd40:5::/48 maxlen: 48
                          2403:cd40:6::/48 maxlen: 48
                          2403:cd40:7::/48 maxlen: 48
                          2403:cd40:8::/48 maxlen: 48
                          2403:cd40:a::/48 maxlen: 48
                          2403:cd40:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl
                          rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4606 (0x11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C6FA/serialNumber=10C6A96ABFE5689BC7BDE5ABE8A66D952453FB18
        Validity
            Not Before: Nov  2 17:25:31 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726608b-f184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:54:bf:51:49:32:5b:0b:e9:96:0c:7b:a1:
                    79:26:97:38:1c:1f:e9:7a:97:52:69:cb:5a:56:df:
                    12:19:4f:86:03:47:b4:fc:f6:e1:42:54:9b:22:ab:
                    f6:3c:83:26:f3:d7:80:d7:ba:e0:bf:ad:83:6a:2b:
                    4a:b0:70:af:22:3d:1f:32:da:d8:c5:ee:a1:10:be:
                    35:b5:6e:5b:96:9a:74:a9:de:c9:a3:08:bf:9c:b0:
                    a2:b3:f4:ba:d4:68:88:da:f2:e4:47:da:97:d4:43:
                    d4:3f:06:1b:a0:51:f7:a3:a8:19:05:ff:c1:8d:49:
                    0b:31:36:d5:19:c3:af:e5:b8:b3:1f:95:5f:f5:f8:
                    0c:2e:e5:5a:b7:d5:03:ff:ce:d0:7d:98:d2:33:43:
                    89:ad:de:a5:36:a8:28:11:b4:f2:36:35:da:1a:2f:
                    6d:63:cc:9b:cf:26:b3:94:b2:05:72:68:c7:1a:a6:
                    71:e1:f5:23:69:d9:28:57:13:b7:cc:ff:c2:d0:0e:
                    ba:03:18:67:5a:93:ec:0a:0e:77:05:53:a7:c1:7f:
                    b1:7b:c2:da:29:dc:d6:26:54:af:e4:ca:0f:44:f4:
                    94:41:14:fc:7f:c6:39:d0:7e:43:f9:b8:9d:7d:40:
                    ec:a3:ac:e5:5e:8c:02:f4:ad:e7:42:89:63:6a:3a:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:A5:C6:0D:22:64:77:8F:A9:B9:C2:0F:A2:53:C0:08:27:C7:58
            X509v3 Authority Key Identifier:
                keyid:10:C6:A9:6A:BF:E5:68:9B:C7:BD:E5:AB:E8:A6:6D:95:24:53:FB:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/EMapar_laJvHveWr6KZtlSRT-xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMapar_laJvHveWr6KZtlSRT-xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C6FA/A17B33C2D5AF11E88FF05228C4F9AE02/C6CD392C951111EFB906EE25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.156.0/22
                IPv6:
                  2403:cd40::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:96:5a:3c:56:98:6c:4a:e7:d7:66:43:7a:30:b2:47:38:e4:
         11:e2:a1:c0:93:db:7a:f0:f4:77:26:a5:2a:bb:eb:86:44:0c:
         ea:11:47:2b:09:50:3c:42:da:f8:87:d0:01:9c:cc:22:31:92:
         68:e8:9c:d1:96:f7:50:f1:28:bb:3d:71:b4:37:4b:4a:27:5f:
         cf:22:9d:3d:0e:26:ab:b2:e4:fa:4b:ea:ed:70:b9:a7:17:16:
         04:41:33:87:d8:35:2f:ef:00:2d:de:22:d1:f6:e1:b1:90:b6:
         f1:a2:09:5c:bc:11:78:ab:81:df:75:32:d7:78:0b:47:77:c5:
         af:98:f7:4d:37:57:8e:1e:bc:3c:e8:12:3b:f9:a2:31:0b:40:
         16:5f:16:a3:05:f0:4c:4d:3b:64:b6:94:be:53:df:28:6c:26:
         0a:d4:01:76:bf:f1:e0:ca:8d:44:10:fd:68:0f:88:d6:9b:05:
         35:b9:fb:b8:5f:c9:f2:c2:9b:92:3e:c3:6b:bf:c3:9f:30:89:
         34:4d:3b:ce:aa:d0:d7:77:bf:c5:74:81:51:49:5d:74:bf:8c:
         e9:dc:87:70:8d:1f:e6:74:a9:63:a0:a7:72:39:d2:b4:32:d9:
         cf:8a:8a:23:98:71:00:b7:b5:4b:d6:54:fc:52:31:9c:92:fd:
         c9:36:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org