Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
File:                     6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          MihL0QGoBZhulEVt8tPyeyKsYue0GcWFQRr2ySfZqtc=
Subject key identifier:   C4:6C:9B:31:AE:47:75:F1:F4:C1:F1:C2:EA:53:8A:0A:17:6D:5F:23
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3425
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:02:55 +0000
ROA not before:           Tue 30 Jul 2024 16:02:54 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     55684
IP address blocks:        103.23.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 00:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13349 (0x3425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jul 30 16:02:54 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66a90eae-c553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:74:3b:3c:77:36:76:10:a8:6a:86:83:78:
                    f7:4d:e6:a5:90:b6:9e:5a:fa:d6:be:53:7b:9f:32:
                    76:e8:8d:95:81:11:ab:ff:fa:ff:03:3a:08:81:1a:
                    cc:0f:50:f6:3b:9a:8a:43:ed:d3:1c:40:b6:30:9b:
                    5f:e3:51:23:3d:ea:12:bf:21:4a:ce:72:a5:d6:2c:
                    98:ef:ff:a4:9a:4c:7a:8b:f5:d2:d0:49:6b:c8:47:
                    1d:b4:39:ef:4b:03:85:b8:0d:b4:50:55:b4:21:d5:
                    1d:ca:c0:4d:19:e8:7c:2f:15:f7:9e:35:03:e8:a0:
                    45:e2:99:7b:2a:38:dd:c1:ef:ee:5d:6d:10:c4:4f:
                    04:1c:7b:7b:50:6f:8d:d6:e2:dd:4b:d4:b7:e3:ee:
                    15:49:66:80:90:80:61:19:7d:ea:c3:f1:98:a7:a0:
                    36:63:f2:e1:12:5c:5b:ec:d7:07:d0:ae:78:4b:e4:
                    d9:e5:76:7d:2a:cd:3b:6f:a3:b4:dc:c9:b8:29:45:
                    b4:b8:4e:74:5a:01:27:0e:65:22:3a:a4:8e:be:0b:
                    78:8c:cf:ba:bb:f7:7c:13:0f:b2:46:08:07:42:c9:
                    e8:b4:61:38:d6:f0:dc:cc:49:8d:f9:2f:b0:ed:c6:
                    4c:87:b4:d2:dc:fe:c0:b4:2c:10:7c:c2:ec:39:6c:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:9B:31:AE:47:75:F1:F4:C1:F1:C2:EA:53:8A:0A:17:6D:5F:23
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:03:c7:53:f1:ab:67:9a:b5:10:9d:26:1e:0e:a8:2e:2b:
         aa:2b:e6:13:60:bd:72:f8:be:77:53:a0:19:d4:94:28:b1:65:
         80:ad:a4:4a:e3:76:99:01:74:4c:c4:5c:88:d1:fc:dd:4e:34:
         b6:97:90:8f:2a:0c:4f:58:7b:76:fc:a0:19:12:58:1b:31:07:
         6a:d1:a1:c7:d7:ef:de:d5:8f:a9:6f:79:64:0b:30:63:b9:5d:
         71:02:3a:bf:05:70:79:66:75:5c:57:a3:95:ab:ab:e6:48:03:
         2a:05:0d:58:fc:9f:d6:63:c7:2a:3f:0c:97:a0:48:8c:de:28:
         f1:aa:cc:b9:91:b5:62:7f:f1:00:87:c9:24:7b:f1:d0:40:e3:
         23:f2:f4:1d:b7:df:72:6f:4c:4f:5f:c0:6c:3a:7b:06:e3:a6:
         ad:e3:f9:9c:d4:db:74:f8:34:b6:69:15:99:ef:8b:ad:62:fd:
         f5:2b:e4:8d:43:f3:a3:81:ad:12:50:f6:11:af:8f:e7:51:5a:
         14:2d:55:4e:a1:9c:9e:7a:16:28:ee:8d:79:05:35:88:4b:39:
         10:ce:1e:f5:2b:d4:58:20:a1:05:9d:7c:20:30:10:2c:c1:55:
         36:1e:19:4c:ee:7d:81:b9:b2:ca:5d:76:05:90:ec:75:f7:48:
         15:78:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:35 2024 by rpki-client on console-ams.rpki-client.org