Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/5A591BB025E011EC9E89C60AC4F9AE02.roa
File:                     5A591BB025E011EC9E89C60AC4F9AE02.roa (raw, json)
Hash identifier:          SfX78mf8Kd7x/+CvFiJo2Q6E4e6u3b0BX938D2DXIEQ=
Subject key identifier:   C6:2F:3F:5E:B4:1B:E0:96:AE:64:AA:A2:D3:C6:C5:41:26:12:5A:68
Certificate issuer:       /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Certificate serial:       0361
Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/5A591BB025E011EC9E89C60AC4F9AE02.roa
Signing time:             Mon 03 Jul 2023 01:11:29 +0000
ROA not before:           Mon 03 Jul 2023 01:11:29 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     146993
IP address blocks:        103.255.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
                          rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
        Validity
            Not Before: Jul  3 01:11:29 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a22041-d0f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:89:83:05:30:f5:a4:34:66:cd:35:16:09:34:
                    f9:07:ec:ac:36:af:8c:e4:51:fe:3b:17:10:4f:02:
                    8f:e5:e4:b1:07:5d:c8:0b:1a:7b:85:d9:16:84:f6:
                    d7:06:60:87:32:72:53:ea:e9:8d:5f:35:76:1a:a2:
                    91:10:2b:a4:3d:3e:2f:c9:8f:78:d1:f0:e8:1b:63:
                    61:29:96:3f:59:b1:1e:4d:08:89:72:e8:31:a7:a9:
                    cf:6f:ab:11:bd:ea:69:1b:68:25:92:79:8e:68:35:
                    f7:af:0c:85:af:27:6b:38:62:24:8c:64:34:9d:1c:
                    37:46:1c:81:a4:25:27:41:4e:c0:e9:a8:db:40:26:
                    89:08:28:f9:d3:5b:6f:4a:74:3a:94:79:f0:aa:f5:
                    3c:02:91:b0:93:f0:0f:42:aa:1a:a3:bd:1b:70:60:
                    c9:64:aa:2b:36:28:c6:83:60:5a:b1:cc:d1:58:d2:
                    ff:1b:7b:ba:63:ae:5f:bd:fe:c5:ed:95:22:ad:92:
                    9e:97:11:43:22:5d:71:73:1b:c6:4f:54:46:8a:82:
                    4c:49:38:78:08:0e:7d:46:07:cf:2e:85:db:f2:e2:
                    04:73:c6:59:26:62:d9:53:d4:47:a1:2f:db:ed:c4:
                    19:be:c7:cd:c3:b1:ca:e9:e0:96:7b:48:b8:98:c5:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:3F:5E:B4:1B:E0:96:AE:64:AA:A2:D3:C6:C5:41:26:12:5A:68
            X509v3 Authority Key Identifier:
                keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/5A591BB025E011EC9E89C60AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:87:89:47:a6:ed:c2:ae:83:ba:73:60:31:f4:d2:19:9c:18:
         74:ce:a2:aa:d9:be:62:45:54:47:9b:9b:6b:6f:f9:89:71:92:
         25:49:14:1e:21:3d:26:ab:4b:92:6c:60:db:75:4c:fe:e8:ef:
         58:6e:aa:e8:52:20:ab:9e:51:01:b6:29:d2:e2:19:21:73:a0:
         1c:cb:4c:84:75:23:d5:b3:a8:c8:96:d7:c8:e8:fa:b0:82:1a:
         c6:77:cd:1a:fd:b1:40:2a:f2:91:c1:a9:c3:b9:6a:f1:77:cb:
         24:d1:af:8c:4b:5c:62:b3:fb:aa:f2:89:7b:e4:4c:6b:4c:35:
         cc:ee:67:57:97:d6:00:db:b4:d5:12:d0:55:74:dc:81:0d:f3:
         6f:49:ce:c8:61:ab:17:d1:9d:e9:3d:ff:33:0d:a8:5d:dd:a8:
         f5:99:93:77:b7:f6:e7:ef:58:cd:06:46:ad:dd:13:f5:a2:76:
         ab:07:0c:c0:5b:22:d8:15:11:62:27:e2:db:69:25:13:d8:08:
         14:8b:e1:f8:3f:7e:d0:9f:b7:38:32:2a:6f:9f:6c:5b:5b:18:
         7f:f2:05:bf:87:3c:88:12:62:8d:54:62:49:89:6e:7a:48:72:
         83:33:fc:ba:a1:88:74:d1:f7:26:23:7a:e3:95:b3:5f:22:a6:
         e5:b0:af:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 03:51:27 2024 by rpki-client on console-ams.rpki-client.org