Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/6904305CA65111EEAAF77C79C4F9AE02.roa
File:                     6904305CA65111EEAAF77C79C4F9AE02.roa (raw, json)
Hash identifier:          paYLMpBP/EYGHzXeKsT+teOAlJis2899AoEl3K62h8s=
Subject key identifier:   CC:DE:14:76:0A:D2:62:CD:3B:37:6A:7D:AD:6C:C5:41:5F:67:BE:20
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       056E
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/6904305CA65111EEAAF77C79C4F9AE02.roa
Signing time:             Fri 29 Dec 2023 13:51:48 +0000
ROA not before:           Fri 29 Dec 2023 13:51:48 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     10111
IP address blocks:        103.231.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 02:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Dec 29 13:51:48 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=658ecef4-4fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:5f:2d:96:28:da:b4:97:96:46:e1:cd:ad:
                    7d:0c:89:11:3b:d8:4f:32:0b:c2:53:20:61:90:28:
                    f2:ca:87:b0:58:20:bb:00:58:49:4b:7b:73:1f:c6:
                    b0:30:91:42:5f:d2:0f:0a:d6:e8:93:3f:54:07:73:
                    26:7c:91:12:27:e9:03:a2:ce:21:ec:40:e7:c7:77:
                    53:1c:78:27:d6:40:f3:1c:bf:af:ea:c1:01:8f:38:
                    bf:3b:d5:28:a7:b5:61:43:ae:5e:e4:0e:83:0a:d1:
                    ef:1e:65:ae:d3:f6:e2:58:a4:24:77:1c:a5:4d:ee:
                    6d:cf:23:eb:f5:0a:9b:f1:1a:f7:96:a8:b9:55:b0:
                    1f:08:97:a9:5d:18:3e:46:07:3b:88:c1:9a:1f:23:
                    30:12:6a:65:b9:80:21:7d:7b:b6:92:5d:b9:b2:69:
                    59:2e:42:99:0f:9a:fc:44:ff:a5:76:fd:82:ee:b3:
                    f3:bf:c0:08:e6:04:9b:86:28:0f:85:b3:28:ec:31:
                    2a:08:00:9c:f1:cc:dc:2b:a3:9f:53:c3:4b:25:ee:
                    43:7a:c9:15:a8:9b:a5:ef:d7:90:02:88:4f:ea:5c:
                    39:af:80:a2:d0:d5:8e:ee:a2:26:6c:5e:d2:2b:d9:
                    8b:73:d8:ce:8a:9e:4d:31:df:d0:38:ac:35:a9:65:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DE:14:76:0A:D2:62:CD:3B:37:6A:7D:AD:6C:C5:41:5F:67:BE:20
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/6904305CA65111EEAAF77C79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:b5:3c:58:c3:12:b3:6b:84:3e:26:4f:1e:82:d5:81:0a:
         09:67:ff:25:fa:df:ba:a0:ab:de:3a:e0:bf:ef:5c:cf:b9:20:
         1f:b2:66:34:78:e9:ed:59:1b:a6:9e:25:28:0b:6d:72:a2:52:
         d6:bd:90:75:1b:52:55:a7:15:2d:f8:30:8e:41:cb:da:5f:28:
         ab:43:2f:47:71:2f:e0:0c:27:3a:21:71:e4:d6:ab:95:f4:92:
         86:a9:25:22:58:12:7f:2c:1b:00:63:5b:9c:cb:31:0a:1b:90:
         f7:53:e2:c6:9e:25:37:a2:44:69:22:0d:c6:c8:fc:74:64:1e:
         24:69:83:c4:ce:9a:13:b9:b3:b9:07:dc:49:78:f2:49:74:6c:
         8a:08:df:50:dd:49:54:5e:fc:5c:35:0f:de:32:1f:82:6e:fe:
         4b:8f:cb:62:6c:68:ec:ab:28:7b:15:d3:3a:cb:75:0d:27:8f:
         69:48:56:93:88:52:cb:25:e0:98:ef:97:94:33:73:71:4b:bc:
         1e:0d:12:a5:c1:f6:79:79:bd:7e:51:d6:c7:ec:48:7d:06:bd:
         7b:5a:cd:a0:45:68:73:dd:24:9d:06:c1:0c:4d:93:65:b0:3b:
         48:af:26:0c:fb:31:49:72:6d:14:be:23:73:1f:20:9c:5e:04:
         ed:c1:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:08 2024 by rpki-client on console-ams.rpki-client.org