Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
File:                     55C580C2108411EDB5AE6333C4F9AE02.roa (raw, json)
Hash identifier:          9NKplmN+iiuv6c+kMy1FA50u91JuPs1rSgUrzKrPqRo=
Subject key identifier:   B7:26:A0:D6:74:7E:25:14:D1:98:87:FB:79:B7:BF:FD:A9:FE:34:1A
Certificate issuer:       /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
Certificate serial:       0110
Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
Signing time:             Wed 05 Jul 2023 03:32:19 +0000
ROA not before:           Wed 05 Jul 2023 03:32:19 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     133929
IP address blocks:        103.169.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl
                          rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E
        Validity
            Not Before: Jul  5 03:32:19 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a4e443-bd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:23:8c:f8:ec:9c:eb:90:24:a5:18:be:c0:
                    6d:4c:24:18:ae:47:69:8d:90:e1:ad:fb:98:c7:a7:
                    78:5a:73:42:20:7a:aa:fe:6b:28:d0:4f:47:41:45:
                    36:f1:f5:59:6b:f0:35:c4:6e:2d:d5:56:4f:2c:d4:
                    e5:af:7a:9d:13:e2:e2:01:84:7b:c9:4e:7a:15:88:
                    40:dd:10:77:60:9d:90:4e:35:09:68:c8:fe:17:2a:
                    ca:c1:4e:7d:ba:12:f7:1f:6e:ca:da:6d:91:2c:a3:
                    3b:ab:1b:9b:5d:5d:e2:e7:43:73:66:f8:89:1a:2b:
                    c0:5a:fb:24:0e:d1:26:34:ab:2a:eb:7e:33:34:67:
                    f0:15:a2:2a:39:84:02:b8:05:4d:9f:b4:28:25:e6:
                    56:3e:97:17:04:1c:f4:e0:0d:f7:db:05:32:a8:87:
                    94:1a:af:bd:f9:4a:e3:dd:d1:d5:fd:eb:ce:c8:d9:
                    72:3c:fd:8a:f1:f3:09:d5:d8:6c:8c:39:1c:f3:00:
                    e8:b5:3b:61:f3:a4:aa:a1:ea:96:b5:45:0c:8f:01:
                    9b:f6:c3:04:5d:22:82:28:1f:75:8b:d3:a1:df:11:
                    d1:6e:c3:d2:9a:4d:c0:33:37:8c:e1:92:0e:6c:f8:
                    45:5a:cf:a2:1f:0f:6f:d6:a4:9a:ea:d3:f7:c7:94:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:26:A0:D6:74:7E:25:14:D1:98:87:FB:79:B7:BF:FD:A9:FE:34:1A
            X509v3 Authority Key Identifier:
                keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/55C580C2108411EDB5AE6333C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:53:80:da:dd:80:55:f6:77:67:00:99:7b:22:d4:a2:7b:c2:
         b0:61:6c:fc:80:50:fe:c8:d3:7c:5e:5b:64:15:51:bd:e2:bd:
         ea:21:61:f5:45:e8:b0:c7:b7:93:12:f3:39:da:58:18:91:60:
         07:ea:fa:aa:86:d1:1f:16:73:75:61:95:63:b4:3f:d2:83:78:
         00:56:e4:aa:da:ed:23:0b:0d:c9:c3:3f:08:6a:33:de:ba:24:
         a5:1d:fc:a4:47:ab:c8:53:6e:3e:26:71:66:6b:73:54:e2:09:
         66:b3:a2:8f:4e:59:e9:eb:a5:c4:ea:01:4a:d3:aa:26:06:99:
         ce:25:f6:91:75:6b:82:de:fb:c7:a4:09:fb:86:e0:be:87:54:
         47:b1:c1:e1:96:a9:3e:08:8a:bf:89:be:4b:c2:b1:54:a7:6e:
         77:e6:b5:5a:0e:fd:79:37:99:81:87:cc:17:b6:3e:9c:87:70:
         1b:e2:b7:44:d6:47:8e:07:52:69:f3:de:f7:b9:55:03:52:80:
         9a:bd:fa:ac:32:56:0b:36:ff:0f:a8:b0:92:91:99:5b:79:25:
         3a:8a:b1:52:dd:46:a0:7a:14:bb:fd:15:56:6c:78:6f:a6:97:
         9a:39:45:30:e0:e6:2e:32:a2:45:f7:84:b0:48:09:28:2a:55:
         b7:7c:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:05 2024 by rpki-client on console-fra.rpki-client.org