Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/56D1860A97D411ED801D7E41C4F9AE02.roa
File:                     56D1860A97D411ED801D7E41C4F9AE02.roa (raw, json)
Hash identifier:          rTtYX1LDsjHbgRQGYM/IhQASFN1rXozG53hA00I5+ns=
Subject key identifier:   2F:37:C8:6E:7B:FE:83:5C:49:10:2A:4E:E0:7E:4C:26:3B:60:6C:FD
Certificate issuer:       /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Certificate serial:       3C
Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/56D1860A97D411ED801D7E41C4F9AE02.roa
Signing time:             Fri 05 May 2023 07:46:55 +0000
ROA not before:           Fri 05 May 2023 07:46:54 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     56231
IP address blocks:        103.179.70.0/24 maxlen: 24
                          103.232.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
                          rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
        Validity
            Not Before: May  5 07:46:54 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6454b46e-cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0b:92:d2:bd:1a:de:31:03:5a:ac:12:4e:eb:
                    85:cb:73:61:05:5b:9c:ef:7d:24:32:1a:4a:11:7f:
                    aa:0d:8c:7b:a8:37:15:43:e9:26:93:b2:5d:f9:35:
                    69:fe:46:e5:eb:bb:e8:5f:40:c1:62:66:79:66:73:
                    73:ba:b0:5e:44:6b:45:6d:d3:b5:2e:d4:38:e3:cc:
                    3f:97:4f:19:96:e7:bf:47:38:d5:12:d6:f7:0c:f0:
                    f1:19:ec:ba:82:95:1f:b6:ab:80:15:40:65:20:1d:
                    c9:4b:2e:f2:d2:33:4e:79:45:e2:5a:a8:e2:b5:ed:
                    05:58:fc:42:ec:04:57:59:01:ae:ea:fa:b6:ba:8b:
                    c8:0d:9f:45:71:b5:56:a2:60:a6:88:58:f1:6c:24:
                    83:6c:d9:c5:a6:da:89:28:37:60:f4:97:0c:8f:d5:
                    4a:07:79:e6:21:45:df:78:e6:b6:07:10:d5:e0:a6:
                    aa:ce:02:90:6e:db:44:81:ae:b3:d7:86:a2:df:fd:
                    d6:4a:36:4c:40:c1:2c:48:2c:c2:67:44:1a:c1:4b:
                    65:4f:2a:1c:fb:61:89:f9:15:29:65:7c:f1:bc:e9:
                    f2:4c:fb:24:c8:86:8e:91:23:cd:7b:76:d4:c6:28:
                    34:37:e1:d4:43:47:d5:45:ff:2b:e8:cf:56:ec:98:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:C8:6E:7B:FE:83:5C:49:10:2A:4E:E0:7E:4C:26:3B:60:6C:FD
            X509v3 Authority Key Identifier:
                keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/56D1860A97D411ED801D7E41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.70.0/24
                  103.232.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:39:7e:78:17:26:79:ce:c5:b7:cd:1b:a5:63:00:df:ba:
         93:e0:a2:f5:3d:32:93:4c:da:bf:e5:cd:90:a1:23:48:48:c4:
         38:24:70:c6:24:ee:1a:15:92:9d:d6:8a:bb:f1:7f:93:01:06:
         5d:5f:dd:2f:43:02:dc:90:10:99:25:e4:6f:f7:cb:b3:ec:49:
         9f:7a:2b:05:48:08:b2:df:5c:18:80:a6:9b:a2:98:0c:07:3c:
         fa:8d:09:ee:d0:a1:55:7e:78:52:a3:b3:f2:b2:26:3c:11:52:
         30:2a:86:42:aa:c4:c9:cf:0d:a6:db:30:df:20:a6:fa:24:fa:
         37:d8:2d:95:37:48:84:9a:0b:7d:47:fc:65:fb:98:01:21:8e:
         4c:2d:3b:34:e8:6c:ec:44:23:56:19:61:66:b2:06:17:66:60:
         45:4d:f2:2c:66:42:89:50:72:98:a4:6b:12:87:60:e4:09:35:
         67:ae:1e:6a:1a:a3:69:b6:81:59:64:7a:cb:fa:6f:ca:a8:18:
         32:ce:20:65:e7:64:f2:50:cd:22:a5:c7:8b:c4:c7:7d:8c:20:
         41:e4:ab:68:01:58:df:89:83:34:26:39:75:70:57:97:07:95:
         eb:4a:ba:7b:ab:05:f2:62:bd:b7:fa:75:64:40:c1:b6:60:8a:
         dc:13:a5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:22 2024 by rpki-client on console-ams.rpki-client.org