Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/362219222CA111ED86813324C4F9AE02.roa
File:                     362219222CA111ED86813324C4F9AE02.roa (raw, json)
Hash identifier:          EmByI/hEDGbR7l0yLVunkRdjktgi7lvL3op9RMavJr4=
Subject key identifier:   43:8D:6D:E5:3E:90:95:CF:14:96:F8:C1:A6:A1:30:47:4C:87:81:00
Certificate issuer:       /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
Certificate serial:       331C
Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/362219222CA111ED86813324C4F9AE02.roa
Signing time:             Sat 24 Jun 2023 15:10:39 +0000
ROA not before:           Sat 24 Jun 2023 15:10:39 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55580
IP address blocks:        203.30.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl
                          rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 14:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13084 (0x331c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC
        Validity
            Not Before: Jun 24 15:10:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6497076e-b63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:28:a9:00:d4:69:47:86:14:f9:c8:01:29:
                    35:60:ca:cb:bf:f0:ed:01:18:56:de:46:a0:eb:1f:
                    88:bb:41:ef:a0:c3:7c:53:30:59:f1:ac:de:bd:c7:
                    b2:45:0a:35:84:5c:80:25:43:a4:02:a5:42:77:69:
                    1c:07:9a:79:b4:62:42:96:fc:fb:ad:66:4b:dd:81:
                    f0:9a:d8:3e:86:41:6b:55:cb:4b:4a:24:5c:95:df:
                    c2:d8:cc:02:3f:48:f5:12:71:ab:9a:6a:b3:db:49:
                    47:9c:60:cb:7f:16:47:6a:68:09:d5:10:57:8c:5a:
                    e0:ed:f5:b0:eb:bc:17:f9:4e:b9:13:b2:79:0c:ad:
                    5b:d7:fc:02:3f:2b:76:90:92:9c:31:dd:30:f1:88:
                    82:f7:e8:d1:fd:ab:8f:b4:ab:38:70:98:e9:cd:56:
                    80:8a:5e:63:bb:96:83:e4:03:ab:9a:1b:eb:7e:b0:
                    d8:3c:f6:bf:73:8d:16:f4:e9:af:bf:77:5f:bc:a8:
                    4b:c9:1b:db:44:02:b0:c7:63:95:02:cb:24:f4:10:
                    c7:db:c9:7e:11:25:ef:40:56:d6:95:ae:02:4c:ab:
                    85:a5:a1:57:8b:4a:42:15:79:f0:8a:b1:15:05:d0:
                    bc:ea:62:4d:2e:f0:0f:0f:1f:58:54:4a:78:56:8c:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:6D:E5:3E:90:95:CF:14:96:F8:C1:A6:A1:30:47:4C:87:81:00
            X509v3 Authority Key Identifier:
                keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/362219222CA111ED86813324C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:f2:98:3c:91:b5:36:42:59:b9:04:64:29:b2:7b:8c:99:e0:
         0c:74:ba:79:21:3d:7c:94:2c:1e:83:d7:19:4c:95:f4:5c:41:
         cc:43:eb:2a:76:1c:25:6e:61:bf:5e:eb:5f:6b:80:ae:8f:4d:
         35:91:33:26:fa:ed:69:24:8e:a5:dd:00:58:93:7a:0e:d7:e1:
         4a:51:95:0f:c5:4a:49:99:d6:23:a0:63:90:e5:a3:39:f9:16:
         35:61:1e:a7:14:ff:58:13:41:b1:a1:23:ca:99:0d:9d:dd:ca:
         f9:17:29:e0:b4:50:39:e7:16:33:2c:06:93:15:78:fc:bd:ff:
         63:3d:3b:81:dc:b4:b4:98:98:cf:0b:a8:5e:7a:4f:f1:8c:a9:
         b9:ce:17:9e:8a:20:ea:8e:81:8e:74:0c:bb:77:49:11:af:19:
         da:db:be:0e:f7:9d:f7:ad:6f:a8:8f:9a:a8:e7:08:c8:50:58:
         b4:8b:65:22:17:12:aa:c9:2e:d3:3a:04:1f:01:25:f1:95:b6:
         30:ad:68:3c:e4:4c:62:5f:49:20:73:ed:89:6b:dc:d4:b0:89:
         84:43:b8:33:50:b7:51:56:6e:9b:ce:d1:d1:d1:c9:52:84:cb:
         e0:36:c0:32:7a:f8:23:41:f4:7d:42:45:e7:db:d1:30:5a:03:
         27:97:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:49:07 2024 by rpki-client on console-fra.rpki-client.org