Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
File:                     ECDFCD86656711EDBED7F511C4F9AE02.roa (raw, json)
Hash identifier:          YExmn8CoOt/3b0HOemDGXbkRHpmn5xVH/e/sdoTs7EM=
Subject key identifier:   F2:87:01:DD:31:2E:9E:D9:FC:69:70:2F:60:B6:19:12:3E:70:72:E6
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       87
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
Signing time:             Thu 13 Jul 2023 04:03:32 +0000
ROA not before:           Thu 13 Jul 2023 04:03:32 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     150342
IP address blocks:        103.17.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Jul 13 04:03:32 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=64af7794-abfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:44:16:a3:6f:20:b0:8f:31:09:02:fa:16:
                    20:3f:e8:2e:43:ed:6e:42:d5:f1:c6:39:60:51:38:
                    86:67:25:ad:ff:e5:de:c7:1a:71:6b:2b:2a:bc:7c:
                    54:5a:94:b5:56:aa:e4:0f:c8:ba:2f:95:ad:f9:c9:
                    3c:1a:b7:a5:0d:c0:e7:ff:12:12:88:24:80:2b:89:
                    60:02:0d:99:3b:e5:15:5e:00:da:0d:7a:46:5f:e3:
                    8a:6f:86:33:d7:61:72:ee:16:a7:8d:c8:4a:a3:62:
                    2e:5c:00:e7:97:a7:d9:35:24:c2:9e:b0:36:52:bc:
                    50:01:7f:ed:84:ff:a3:8f:38:f1:3f:54:05:38:4a:
                    ce:f1:1d:f1:f3:8e:87:c5:07:82:35:9a:79:48:d2:
                    f2:f9:fa:5c:78:d8:f4:c9:3b:81:5b:87:78:89:64:
                    41:f9:37:0f:ee:9d:dd:7b:09:0f:6e:b5:67:c9:6a:
                    df:78:92:58:7b:e5:5f:a6:b4:ba:f1:a6:9a:f0:89:
                    59:27:98:81:81:75:f3:9f:98:41:ce:c2:61:9a:86:
                    0d:38:b5:6e:6e:b8:0d:c0:a4:33:14:03:bc:b3:bc:
                    51:2e:a9:6a:48:1b:92:a4:77:f3:03:37:71:21:60:
                    da:a6:2f:e1:99:1c:23:02:b6:bb:58:af:96:a1:7f:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:87:01:DD:31:2E:9E:D9:FC:69:70:2F:60:B6:19:12:3E:70:72:E6
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:30:22:3b:14:ec:f6:ff:4c:cb:d6:47:e3:b7:f1:f8:13:40:
         86:fb:b0:68:2c:43:36:8b:3c:f8:0d:4a:73:b4:e7:d7:a8:74:
         00:6b:1f:8c:41:8a:f9:3e:1b:9f:3d:0c:71:0e:d2:b5:b1:e7:
         1d:15:94:69:e6:a8:7b:65:2b:93:cc:b0:66:fc:2d:25:db:57:
         b1:b5:18:af:6e:99:d5:e7:6a:a6:a7:1a:04:38:a2:7b:10:c8:
         01:e6:53:a5:89:e8:c0:b2:6d:8e:be:ae:f8:63:33:b5:96:63:
         4b:9f:f8:12:2b:e4:8d:c7:87:98:1b:89:24:60:fd:60:7b:a9:
         ec:13:3a:14:87:fe:19:b6:c3:6e:d0:6c:6c:4d:9f:47:cd:94:
         26:28:0c:39:ce:7a:9a:8e:67:68:59:73:c5:6e:44:c6:31:a2:
         06:4d:35:e2:d6:e8:69:df:f1:b7:a2:70:b7:3d:8c:f4:28:04:
         39:1b:14:e2:02:4c:5b:3b:fc:0c:65:b6:97:10:7d:73:fb:3a:
         3d:b7:da:c9:95:8a:06:f6:ee:75:58:dc:c5:89:b4:c3:e8:2b:
         8e:9d:42:d5:62:c6:38:f2:69:17:5b:6f:d9:10:d6:19:a5:a6:
         52:25:bf:53:67:4c:d2:5d:85:cc:8b:cc:89:20:07:a0:08:ef:
         1d:b3:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org