Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa
File:                     06FA65A81F2711EF98DA2926C4F9AE02.roa (raw, json)
Hash identifier:          nUYZgdQadurE/wuqTHuLZMufVFF/OgkunOtB48BXYGM=
Subject key identifier:   F5:65:54:DE:4B:23:6A:1E:A8:2C:3B:CC:2B:38:C6:CA:63:A7:46:A7
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       04
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa
Signing time:             Fri 31 May 2024 08:23:15 +0000
ROA not before:           Fri 31 May 2024 08:23:15 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     205019
IP address blocks:        203.56.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:10:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: May 31 08:23:15 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=665988f3-8a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:e2:63:b0:1a:44:31:91:ec:1e:31:b3:c4:
                    25:3c:ba:aa:c3:9e:de:8f:ff:83:74:86:92:a6:ed:
                    62:51:91:0b:8f:60:e1:58:bd:d9:61:3e:73:37:48:
                    c8:d3:63:85:92:e3:f9:0a:30:0f:aa:a6:83:60:bc:
                    fa:ef:20:b3:86:3d:37:d1:07:05:c0:ad:db:f0:d6:
                    a3:08:a0:96:61:1b:6e:be:b5:91:c4:d4:33:81:68:
                    6a:f9:8c:6c:73:7e:22:c6:a2:79:62:41:62:52:58:
                    cb:83:00:fe:a5:02:2c:88:36:bd:06:2e:e6:1e:70:
                    5a:83:d8:50:9c:be:f5:38:32:d2:15:1a:6d:cc:2d:
                    5d:70:05:77:29:7c:d4:99:da:f2:79:e1:1c:2d:6b:
                    2a:aa:c6:65:73:2f:01:dc:50:86:7a:80:dc:16:77:
                    1e:f0:18:ce:6d:37:81:e0:d3:f4:8d:38:e1:d8:f3:
                    f2:b1:cc:9c:df:c8:10:03:56:78:ab:a5:a7:bc:09:
                    ae:ff:1a:3f:55:40:2b:3f:f1:4c:30:b2:9b:b8:dc:
                    e3:33:fb:0a:02:10:01:0d:f2:20:b1:13:65:6b:1e:
                    ee:c5:db:8b:5c:59:3f:3a:63:ab:d0:0e:b8:42:31:
                    65:69:2f:84:94:dd:b4:e1:51:a0:cd:99:91:f3:43:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:54:DE:4B:23:6A:1E:A8:2C:3B:CC:2B:38:C6:CA:63:A7:46:A7
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/06FA65A81F2711EF98DA2926C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a4:c1:a2:30:f3:de:87:36:38:11:d6:9c:f9:3c:c0:d6:61:
         64:58:b9:a4:7e:0c:f5:19:32:57:e9:69:5c:74:54:dc:1c:50:
         e2:89:37:df:01:6f:f5:1e:78:3f:f9:52:6d:ec:1f:ef:33:00:
         e8:a3:f6:0f:09:51:ca:1e:52:c9:69:27:0a:45:81:d9:6d:d1:
         ce:52:94:f0:5e:cf:e8:d5:c3:68:53:7c:02:a8:20:16:cf:87:
         0a:2b:5e:2b:6b:10:b5:2d:f9:fc:65:c6:1b:6c:a9:05:7a:8a:
         88:99:a4:d7:60:ba:49:c7:b6:c6:76:2b:17:d0:87:95:3d:32:
         c0:44:78:5f:13:f0:1e:18:da:8a:e5:7b:ed:85:36:58:68:d2:
         f8:38:16:d7:dd:43:f1:e2:79:d8:ba:f3:a1:d4:23:d4:85:a2:
         f7:24:14:2d:fe:88:f9:22:fd:65:0d:46:a8:ca:80:d7:b9:37:
         70:d8:e3:66:0c:00:74:d9:83:6c:7c:28:19:b9:d8:24:01:8a:
         bb:50:bb:55:d3:5d:5f:ac:7c:14:10:7d:3a:be:81:2f:5c:fc:
         82:a4:b4:e0:73:c1:04:9a:8b:f3:25:6a:e5:be:9d:b8:b5:c6:
         c5:46:e8:9a:0c:c8:43:6f:b3:0f:90:57:db:d3:f6:f3:88:07:
         b3:b8:41:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org