Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
File:                     A534BB46BDC611EE902E692DC4F9AE02.roa (raw, json)
Hash identifier:          JfMofx6efmNrALly6LfWx1mO0pCrYZC1n6UcCfMKtOU=
Subject key identifier:   60:B4:88:BD:DD:10:22:22:71:A1:50:12:DA:22:8A:5B:68:2B:8E:27
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       B7
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
Signing time:             Sun 28 Jan 2024 10:18:57 +0000
ROA not before:           Sun 28 Jan 2024 10:18:57 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     9230
IP address blocks:        103.56.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:34:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Jan 28 10:18:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b62a11-7e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:8d:0c:d3:12:dc:8a:1a:21:02:52:62:20:
                    36:ce:61:9c:83:c2:5d:4e:8e:52:f8:58:9e:4a:0e:
                    7e:9b:38:21:5b:f7:08:2c:f4:36:70:72:29:e3:b4:
                    a6:85:14:91:11:93:59:bb:0e:77:dc:4e:65:0b:fe:
                    b0:b3:df:f1:01:eb:e8:5a:61:14:e7:d9:a9:96:e4:
                    2c:e6:50:10:1b:f6:92:03:1a:a5:ef:b4:61:00:89:
                    86:3d:5b:38:5b:2b:2c:a4:dc:3c:e2:a7:3e:8f:b4:
                    b5:22:6f:fb:b3:cf:a7:94:8f:72:a7:5d:e0:5a:98:
                    82:21:1b:51:77:0e:be:04:bc:51:66:22:5c:4d:b6:
                    dc:41:80:0f:7a:a4:78:9b:2e:2f:82:83:63:d5:ca:
                    c3:70:0c:f4:c8:8e:ca:fd:e7:0e:17:ca:5b:b6:af:
                    44:5f:b7:e0:ab:2c:c6:7a:46:c6:3d:f3:6e:81:11:
                    05:34:c3:5c:da:4b:d1:48:f7:32:b8:8e:09:a9:ec:
                    31:e6:c0:c5:77:ee:03:56:16:39:06:aa:cb:98:74:
                    37:2e:8f:d7:d9:cf:e9:fd:13:ca:3d:ab:71:77:03:
                    a9:24:2a:ff:b6:33:1a:28:eb:bf:36:25:0f:e5:e7:
                    bf:e3:4b:a8:26:4d:72:c2:a3:01:77:eb:8e:a9:77:
                    6c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:88:BD:DD:10:22:22:71:A1:50:12:DA:22:8A:5B:68:2B:8E:27
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/A534BB46BDC611EE902E692DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:83:47:4e:b0:6f:14:b9:52:57:ee:d6:c0:cd:d9:03:5d:19:
         b6:bd:3e:31:ce:fe:c2:84:f9:f9:75:d1:cd:e3:5a:aa:00:e0:
         19:c9:95:86:a8:9d:0f:45:28:34:29:67:c8:f4:0e:5d:97:04:
         fa:71:ed:56:94:1e:f8:fb:48:93:ed:8a:85:b6:5c:2e:e4:23:
         ca:2c:3c:31:cc:36:11:7c:b0:26:80:5d:1e:a3:2d:99:51:7c:
         46:0b:1e:79:63:fe:88:99:01:2e:4b:27:1c:f9:c2:c0:da:73:
         94:e6:f9:82:8e:9b:e0:3b:38:63:b0:b0:e5:90:9c:18:9f:65:
         c5:dd:33:66:66:0f:1b:45:79:5c:2e:71:16:a2:3a:25:d1:75:
         38:6b:73:b4:eb:14:11:0d:cf:d9:bf:33:1f:84:92:65:e1:8b:
         de:32:ac:fc:58:a3:f4:7e:6a:25:36:d3:a2:d4:f1:84:5e:6a:
         41:f2:06:59:bc:59:07:fc:ad:84:37:9f:3d:c9:22:1e:59:c1:
         c2:9d:e7:81:4b:1b:83:69:98:5e:7a:bd:76:9c:1a:63:d3:47:
         ad:3a:01:cd:7a:b5:7f:08:dc:7b:ff:85:1e:2e:f7:10:05:39:
         fd:5d:ea:c2:69:dc:b5:e2:f9:7f:19:04:91:eb:8d:04:4a:72:
         04:8f:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:22 2024 by rpki-client on console-ams.rpki-client.org