Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/82E99F5A10FC11EF95048154C4F9AE02.roa
File:                     82E99F5A10FC11EF95048154C4F9AE02.roa (raw, json)
Hash identifier:          slKeOYWzdmCkmau8RJhvHLGPejq9dHSW1eCqA45Ri5U=
Subject key identifier:   08:D7:41:E3:70:44:13:96:7E:05:11:55:91:0A:00:18:22:96:0E:FA
Certificate issuer:       /CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3
Certificate serial:       E7
Authority key identifier: 3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/82E99F5A10FC11EF95048154C4F9AE02.roa
Signing time:             Mon 13 May 2024 07:43:39 +0000
ROA not before:           Mon 13 May 2024 07:43:39 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     137251
IP address blocks:        103.195.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl
                          rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA18/serialNumber=3AF9ECBC45E4E297D29BA6C411F1A05C8B9DA9E3
        Validity
            Not Before: May 13 07:43:39 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6641c4aa-7a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:f8:e5:1d:52:73:0e:c1:ed:00:f2:7f:78:
                    66:27:92:c4:94:f2:96:96:c2:f2:ff:60:93:8d:05:
                    06:e2:84:3b:a6:68:42:0c:33:f8:22:d2:04:5d:82:
                    d3:69:32:2d:95:a9:f6:70:05:d3:8a:87:7f:4c:a7:
                    73:bd:fa:de:cc:aa:47:aa:a2:e1:0d:bc:ac:a0:9e:
                    1c:1c:e2:f7:a6:cf:85:d4:fd:ef:fb:b4:26:44:f2:
                    ca:e1:cf:9d:59:70:63:5c:ad:6f:80:e3:75:59:ab:
                    0e:34:ac:d8:7e:87:03:b9:48:da:1d:c2:4a:cb:83:
                    16:be:ef:59:60:4e:c4:5d:e6:d8:08:37:36:a9:a8:
                    71:be:2f:18:bb:f6:d7:53:f8:d2:05:6f:dc:c7:73:
                    30:99:4d:5e:53:70:52:6e:31:90:77:5b:24:74:af:
                    50:62:12:48:4f:41:a0:73:e3:1b:1c:09:aa:06:89:
                    95:15:9d:d9:35:3b:4c:c0:5b:9f:7c:2d:47:36:38:
                    ae:4e:70:21:c7:c7:f8:04:43:de:13:e6:c0:99:d1:
                    0c:5e:fa:47:d3:e8:c7:70:40:76:f8:a8:1c:fc:8a:
                    7c:94:00:a1:ec:e8:86:d5:d5:aa:a1:19:1c:f5:54:
                    9c:7a:9e:15:5d:84:0f:c0:46:c0:3c:55:a7:21:6e:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:41:E3:70:44:13:96:7E:05:11:55:91:0A:00:18:22:96:0E:FA
            X509v3 Authority Key Identifier:
                keyid:3A:F9:EC:BC:45:E4:E2:97:D2:9B:A6:C4:11:F1:A0:5C:8B:9D:A9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/OvnsvEXk4pfSm6bEEfGgXIudqeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OvnsvEXk4pfSm6bEEfGgXIudqeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA18/6D059BBCB1B211ED8D7C2F2BC4F9AE02/82E99F5A10FC11EF95048154C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:e5:28:d3:74:6f:b6:44:7c:cb:d0:23:57:50:80:a1:f0:98:
         c2:c4:8c:08:60:b9:91:99:33:da:65:e5:c3:b6:40:7f:1b:d3:
         48:6e:a0:8a:4f:ce:5e:51:df:24:85:9f:b6:d3:6d:e8:91:41:
         99:45:27:60:0b:a1:c3:dd:36:52:55:63:12:a2:ec:43:9b:14:
         be:e3:7f:a2:e3:c1:6c:1a:d7:56:3a:10:1c:db:8f:ae:38:44:
         63:9b:2b:c6:2d:9c:87:10:7a:02:15:64:7a:71:d1:f8:6b:51:
         8d:68:7d:b2:f9:28:df:a0:dc:d1:88:c2:66:6b:69:1c:88:8b:
         78:29:31:d0:96:6e:bd:c0:bf:65:4c:f2:e3:c4:ea:cd:38:f9:
         da:4e:6f:0d:dc:46:eb:a7:19:8c:3c:45:e8:97:77:7f:a6:d5:
         f1:41:c9:04:d2:d6:0a:b6:f9:ab:c5:db:f8:50:ff:e0:c2:81:
         ec:c6:23:53:14:a0:13:c1:85:bc:fa:f6:2b:3a:29:f1:8d:4f:
         ad:ee:3b:49:0d:80:9e:f5:fd:18:27:22:fd:45:34:c8:b0:82:
         17:04:35:bb:ae:a4:13:6b:bb:83:2f:b4:66:ad:18:3f:f1:35:
         8e:96:97:75:03:ac:cc:30:fb:5d:24:af:87:dc:6a:99:6c:69:
         9a:7f:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:16:00 2024 by rpki-client on console-ams.rpki-client.org