Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/E4C5DB840E7C11EB8625AE5AC4F9AE02.roa
File:                     E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (raw, json)
Hash identifier:          p3yoI4a8L4ls1QSdAzSR3MNXUgJAZevZDIUvHXoXxGw=
Subject key identifier:   ED:3E:81:B5:69:38:C6:A4:7F:5D:91:42:08:67:58:4D:03:62:07:DE
Certificate issuer:       /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Certificate serial:       0644
Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/E4C5DB840E7C11EB8625AE5AC4F9AE02.roa
Signing time:             Thu 31 Aug 2023 22:29:26 +0000
ROA not before:           Thu 31 Aug 2023 22:29:26 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     131312
IP address blocks:        103.69.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl
                          rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
        Validity
            Not Before: Aug 31 22:29:26 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f11445-d29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:3c:f1:b8:3a:72:53:c5:b0:29:41:7e:44:
                    71:95:51:d5:0b:e7:6d:c8:d7:c6:b9:77:a0:57:3a:
                    98:ed:28:ba:2d:7b:58:7a:59:64:bd:80:73:39:df:
                    98:3c:b1:b2:fa:a9:fb:9f:e4:b2:4c:fd:27:57:57:
                    a3:f3:e3:7d:57:20:58:b0:11:01:b9:f2:05:82:50:
                    12:de:05:ec:20:0f:2c:07:9d:3f:09:93:6e:7c:3b:
                    ea:44:b1:51:38:1d:9a:02:3b:c5:69:d2:1a:0a:72:
                    01:aa:1b:a6:4f:12:b1:80:1c:81:03:bf:71:59:40:
                    b5:c8:04:63:3d:32:04:92:a1:65:6d:cc:5f:6b:9f:
                    0e:99:ac:37:f1:3d:7a:96:1b:67:ff:a1:29:08:d5:
                    31:45:8c:0e:40:c7:40:c2:68:66:9e:a2:db:d8:80:
                    f2:6e:1c:e7:b0:8c:7f:39:c4:e0:b3:a3:ba:c2:d9:
                    86:53:18:88:a9:02:66:93:6e:39:63:d8:54:7e:2b:
                    61:fa:92:2a:46:88:e6:91:42:47:a0:e4:d8:29:5c:
                    1d:56:a6:dd:2b:27:ee:c4:76:80:40:dc:01:42:0e:
                    f8:d9:d0:52:da:f1:2f:d8:68:60:54:f2:b2:05:25:
                    cb:b6:16:2c:db:cd:3b:61:ef:2d:ac:76:58:a0:9a:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3E:81:B5:69:38:C6:A4:7F:5D:91:42:08:67:58:4D:03:62:07:DE
            X509v3 Authority Key Identifier:
                keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/E4C5DB840E7C11EB8625AE5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:42:7d:ea:cd:1e:5a:ad:3d:01:88:8f:3c:5d:14:af:d6:fe:
         b6:34:32:06:64:fb:e2:c2:bc:b3:2d:63:3a:35:5c:ad:c8:cb:
         e2:cc:b7:8a:d4:88:1f:fb:8f:05:f2:7d:57:1c:ef:8d:23:75:
         a8:f5:14:c9:26:14:ba:23:56:2f:c7:55:2f:9a:28:01:eb:2f:
         7b:f7:2d:80:06:ed:5d:17:d7:52:93:0f:6e:7d:f5:19:3a:72:
         32:ac:14:20:a8:6a:09:64:94:4e:44:c7:f9:9e:d3:5a:0c:27:
         a9:ac:42:df:37:4a:ac:a8:f3:83:d9:06:4d:7b:34:c3:35:5f:
         1c:29:c2:02:78:2d:fb:22:40:1d:d3:91:c6:37:c6:9e:61:13:
         7e:eb:0f:ee:ce:dc:99:99:7a:5f:50:48:76:2a:28:73:f4:f8:
         67:e4:99:78:b7:e2:9c:6f:77:63:2b:2b:11:be:9b:5f:48:30:
         c1:37:2f:fe:37:35:c2:ed:79:6b:71:b7:8c:53:1e:d8:c9:05:
         5d:d9:79:81:c5:b6:40:ea:15:6e:00:5c:a9:f8:b1:10:a2:3e:
         df:58:f9:4e:1a:aa:c5:b8:83:77:66:e2:61:bb:a7:66:89:f2:
         2c:0d:fa:71:c4:56:2e:7c:b7:a5:47:73:0d:e3:25:6f:91:cc:
         63:88:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:32:59 2024 by rpki-client on console-fra.rpki-client.org