Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/AA57748A148611EFA50CB960C4F9AE02.roa
File:                     AA57748A148611EFA50CB960C4F9AE02.roa (raw, json)
Hash identifier:          Dhm42QAdMoiiHioZjNGa2XysuQifx6ADPf9TkGvGWhk=
Subject key identifier:   02:61:4A:90:D2:A9:D7:7A:56:E8:65:F6:C1:66:8C:96:1C:4F:03:1F
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       01C6
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/AA57748A148611EFA50CB960C4F9AE02.roa
Signing time:             Fri 17 May 2024 19:50:09 +0000
ROA not before:           Fri 17 May 2024 19:50:09 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     138590
IP address blocks:        103.69.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: May 17 19:50:09 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6647b4f1-18d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:e4:16:45:aa:0e:f4:64:bf:d1:28:96:bb:
                    21:82:df:48:6e:43:82:35:37:b1:fd:ae:4f:be:a4:
                    01:c7:54:93:2b:c8:f1:f3:50:c4:2b:ed:76:18:a0:
                    21:39:e5:b3:17:a3:46:4c:fa:e3:04:4a:69:0c:db:
                    68:3f:17:e4:24:b6:22:4f:58:10:1e:18:ef:4a:0b:
                    70:ac:9b:6d:09:83:c9:60:50:31:3a:45:ef:dd:c1:
                    d2:80:93:ea:1c:f8:cb:97:79:07:55:43:a7:94:f3:
                    e5:ad:31:b3:f2:68:aa:e4:53:87:e7:44:a0:1f:e8:
                    af:4b:fe:b3:e9:e3:1f:8f:d2:12:a8:b5:5a:9a:e0:
                    f9:19:3b:8d:f1:a9:4d:b0:9d:9e:8c:27:43:78:e1:
                    d5:dd:56:6b:c0:f6:40:72:60:70:b9:88:fa:36:e3:
                    d8:97:05:c5:f6:01:c7:a0:8b:0f:3f:b7:13:6a:be:
                    5b:99:0e:ef:4b:82:a8:83:2c:c2:6d:50:7a:bc:06:
                    c7:e6:f2:b9:22:f3:42:80:c7:3b:02:83:fa:28:76:
                    1d:43:d7:ab:9f:2d:e3:16:b4:69:2b:ff:48:b9:66:
                    ab:65:09:a0:34:d6:81:80:a7:93:28:bd:a9:a2:06:
                    9b:84:57:8b:70:11:aa:a7:d2:24:50:8a:b7:a3:f8:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:4A:90:D2:A9:D7:7A:56:E8:65:F6:C1:66:8C:96:1C:4F:03:1F
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/AA57748A148611EFA50CB960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:ab:fe:3f:e4:e2:e9:56:c2:00:d1:da:49:ef:bc:96:a7:
         5a:04:a9:7d:64:22:6d:8b:4b:0b:54:49:46:63:4d:e8:c8:49:
         8c:8b:c1:e3:a6:96:06:e4:c4:a9:0c:cc:8d:5f:4a:49:4b:79:
         0f:14:1c:5d:46:cc:2b:20:8e:d9:cf:c3:2e:25:ea:9d:46:3e:
         09:55:4d:01:51:e5:d4:1d:61:14:f3:fe:ef:23:6d:84:95:18:
         b2:6e:9b:64:f7:85:f0:d6:5b:3c:a6:4c:62:94:96:fe:56:4e:
         fc:d8:b7:c2:fb:e9:ad:b3:21:e2:84:61:06:47:7b:5a:2a:60:
         7c:d4:c8:3e:27:16:fe:94:92:10:85:b3:60:76:08:2a:7f:02:
         df:4c:83:00:a2:02:95:44:60:52:ed:23:6c:cd:90:50:94:5c:
         7b:37:a1:94:7a:19:fc:75:2a:33:28:bf:44:a8:8d:3c:55:bf:
         dc:6b:eb:03:ec:17:0b:19:75:16:27:b5:c4:92:f4:1a:3f:65:
         89:d6:ab:95:d6:9e:1e:91:57:9e:ef:38:63:e5:e1:23:ea:60:
         f6:29:37:4d:77:b8:17:5b:bd:70:fe:3c:01:14:20:65:a0:de:
         d6:67:e6:15:3f:79:df:5a:10:8b:32:6d:d1:18:ae:7a:b6:1d:
         ad:1d:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:37 2024 by rpki-client on console-fra.rpki-client.org