Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/ED534930C8B511ED9A1D817EC4F9AE02.roa
File:                     ED534930C8B511ED9A1D817EC4F9AE02.roa (raw, json)
Hash identifier:          EnSThUNLj3duMs+PFwL69aE2lyuNuJnZvXcjZaqpLLI=
Subject key identifier:   12:C5:5D:AD:43:B0:F7:74:0A:E2:EA:B9:5D:AB:A3:18:38:33:D6:9F
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0592
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/ED534930C8B511ED9A1D817EC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 23:51:22 +0000
ROA not before:           Thu 02 Nov 2023 23:51:22 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        103.155.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Nov  2 23:51:22 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654435fa-97a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:fb:eb:f5:ec:7b:55:c6:46:6b:37:54:e5:
                    c1:67:31:c4:e0:85:87:34:5d:bd:07:b3:1b:52:9f:
                    3a:c2:96:ce:63:92:29:9a:d4:79:7c:9a:1f:d4:fa:
                    74:53:fd:7b:8f:a4:89:b8:e5:52:9b:c3:80:d6:66:
                    a9:bb:b2:5a:13:e7:1e:c8:b1:a3:29:b7:4a:0a:e3:
                    bd:bc:3f:cb:7f:88:38:d1:3f:4c:f7:0b:60:54:5b:
                    66:c6:53:ed:15:8c:1b:82:90:47:2c:dd:80:98:c0:
                    be:dd:11:58:ba:46:c6:d6:f0:9b:e6:12:49:a8:92:
                    56:af:e9:a4:d2:22:b5:e0:e1:67:f5:7b:0c:22:e5:
                    45:4d:0a:f3:af:83:41:92:dc:71:29:08:3b:8e:26:
                    5e:25:ac:77:f3:29:83:33:d9:1e:09:a5:86:2a:05:
                    65:e5:51:20:b3:86:d6:da:7a:97:66:cc:16:6f:02:
                    f0:f9:2f:ad:d9:d1:e0:0b:e8:dc:f3:6c:39:c7:83:
                    84:91:60:48:5c:f4:48:66:74:d5:be:2d:37:c0:a5:
                    ce:92:30:46:4d:22:82:6a:71:99:60:b4:74:0e:1c:
                    ce:67:b5:6b:9c:66:93:38:40:26:66:7a:e4:61:a3:
                    92:9c:ea:8c:5a:e3:7a:1c:c7:0f:55:9d:87:68:92:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C5:5D:AD:43:B0:F7:74:0A:E2:EA:B9:5D:AB:A3:18:38:33:D6:9F
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/ED534930C8B511ED9A1D817EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:10:23:01:6d:e0:bb:0c:6a:04:06:bc:62:21:18:1d:c0:
         03:f2:59:1e:58:a1:6c:71:43:92:ba:2a:02:e0:40:79:6c:15:
         05:59:64:f6:bd:ae:6e:0c:46:f7:df:49:5b:85:90:2f:de:96:
         84:63:8d:cb:60:7b:fd:89:c4:e8:d4:48:ed:6e:8a:d7:98:fd:
         9d:37:8f:1c:95:5a:1e:a4:3a:43:80:dc:c0:60:38:20:3d:11:
         31:ad:d8:9d:2e:04:67:64:6f:0f:db:9f:77:0d:0d:2c:11:77:
         b5:d3:b2:48:6c:04:08:17:e5:45:78:46:4f:87:eb:b7:b7:3c:
         57:0a:65:25:5e:7b:a4:a9:80:58:c4:29:8e:ba:70:9e:a9:9d:
         2f:b3:0d:47:e3:dd:96:d9:b8:b4:2b:7f:10:fd:cc:53:8b:33:
         e8:30:b7:18:92:d2:8c:cb:63:7e:e5:40:3d:23:18:7c:36:e2:
         79:49:b2:83:79:70:66:95:ac:eb:71:89:58:a3:f8:79:ac:ca:
         fa:3d:ae:18:8f:19:1a:9a:e8:f7:b9:de:93:48:4d:d4:a1:ac:
         e4:f7:35:8f:6d:9d:ab:81:57:e9:18:99:fe:ef:e0:22:e6:03:
         a2:68:1a:54:3f:84:fa:92:6a:48:fc:07:01:1e:93:d6:1b:78:
         f0:cf:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:59 2024 by rpki-client on console-fra.rpki-client.org