Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E1A7D0C26CE511EE91023B38C4F9AE02.roa
File:                     E1A7D0C26CE511EE91023B38C4F9AE02.roa (raw, json)
Hash identifier:          5OYurLVRkLL9qOmRsM4Z/dCY5aWpuhBOKBgLz24V6+w=
Subject key identifier:   67:6D:FF:4E:0F:FC:55:03:DD:61:85:51:63:53:B2:78:78:FD:F9:87
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       054F
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E1A7D0C26CE511EE91023B38C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 21:53:22 +0000
ROA not before:           Sat 02 Dec 2023 21:53:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     6134
IP address blocks:        103.30.76.0/22 maxlen: 24
                          103.171.34.0/24 maxlen: 24
                          103.171.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Dec  2 21:53:22 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=656ba752-6e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:91:70:44:fc:a8:f4:80:d7:27:e7:67:27:
                    16:f5:90:11:8d:dd:70:64:4e:97:a6:e7:71:58:06:
                    04:56:7d:ab:04:fd:30:37:e3:f0:51:42:0f:50:77:
                    e4:24:d2:81:d0:19:ce:41:6c:b4:e5:78:8b:32:34:
                    1d:01:9d:dc:fe:a2:02:29:23:f5:ce:a6:54:ec:ca:
                    4e:76:e1:e8:62:c3:21:79:fc:51:ee:8e:36:88:03:
                    05:63:db:c8:99:ef:6b:2d:d1:6d:32:93:64:7b:5c:
                    5e:fb:c7:14:0c:01:5c:a5:ec:f3:be:29:04:5e:8e:
                    ac:6f:69:37:cd:13:7d:97:2b:f0:d3:a5:6a:f6:0d:
                    aa:96:bb:75:e5:6b:c1:bb:45:65:33:cd:80:33:b6:
                    d8:89:f9:7d:55:b5:e5:aa:e1:4d:0b:88:69:e3:9d:
                    50:f2:db:5c:79:e6:16:d5:6b:97:ee:32:16:64:ed:
                    0a:a7:e1:28:76:56:62:5f:6e:e3:13:8b:b5:73:7f:
                    c7:7a:8a:86:c0:aa:1c:1b:d8:73:97:92:6f:cc:ee:
                    dd:8d:b8:c0:8c:18:a4:40:35:e2:d7:8b:09:46:e3:
                    a8:30:1b:3e:d0:33:56:ba:37:16:58:3d:37:28:07:
                    c7:ca:21:c7:38:00:73:38:33:b9:ff:99:63:45:39:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:FF:4E:0F:FC:55:03:DD:61:85:51:63:53:B2:78:78:FD:F9:87
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E1A7D0C26CE511EE91023B38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.76.0/22
                  103.171.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:6c:3e:b3:18:42:25:4d:dc:61:57:8c:b0:14:40:81:e3:
         b0:05:66:6b:55:02:a9:2e:9b:01:9e:aa:8c:2b:7e:84:51:70:
         ac:3e:23:3d:d5:87:18:c6:4b:55:0e:a0:15:53:12:fe:52:5f:
         8d:97:37:1c:b6:12:c1:9e:52:42:d0:0b:b4:1f:3c:fc:ff:4b:
         81:76:46:e8:a6:5f:e2:f1:52:13:ba:c6:b4:ca:8f:69:aa:e8:
         92:84:f5:ac:70:5e:06:49:56:86:73:a9:51:c2:f2:a8:90:b5:
         37:57:d0:8a:19:aa:dd:ab:02:80:0b:c7:40:fa:24:5c:e1:01:
         3f:c6:d3:76:02:3b:6b:b0:67:28:be:5c:55:26:71:2a:60:d9:
         46:73:bb:f6:55:2e:1c:41:1d:41:c2:eb:3e:ed:ac:57:3b:b5:
         36:19:1a:88:9f:ba:63:9c:7c:bf:35:24:8d:1b:86:0e:4b:b3:
         de:f4:ac:8a:43:d4:f9:aa:95:ac:8f:52:c2:0c:c0:1c:39:69:
         ca:66:5f:02:c9:ef:34:12:ff:73:69:b9:b2:3a:b9:8a:64:76:
         7f:c3:0e:3f:eb:d3:b4:1e:4c:ee:ae:3a:47:c8:6c:e3:5b:41:
         45:38:3c:81:98:d0:9e:8f:8b:7b:57:99:d3:e6:84:ae:58:bf:
         c8:63:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:23 2024 by rpki-client on console-ams.rpki-client.org