Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
File:                     EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa (raw, json)
Hash identifier:          Mw8eNXJciBpejgNQtmvMWPv6cNGBSEsS2Aeoz+vAi4g=
Subject key identifier:   27:AD:B0:93:8A:05:65:39:70:B0:23:78:F1:60:4C:80:45:BD:13:B1
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       36
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
Signing time:             Tue 05 Sep 2023 08:33:48 +0000
ROA not before:           Tue 05 Sep 2023 08:33:48 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     134489
IP address blocks:        103.69.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 06:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Sep  5 08:33:48 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64f6e7ec-d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:df:eb:72:d1:ef:75:e1:42:48:ec:c5:41:
                    5b:8b:d0:a3:da:3f:b2:c8:3e:66:e9:28:e7:43:f6:
                    9e:ac:38:28:eb:10:f7:4f:a7:32:3a:d2:dc:98:98:
                    97:c5:08:03:60:08:8c:db:d6:5b:60:7a:bf:c1:3e:
                    67:8d:ef:cb:19:13:8c:02:55:12:69:b8:b7:e3:fb:
                    51:0b:c7:9d:ec:d6:42:b9:a6:8f:c6:b4:cb:9a:ef:
                    2e:8a:aa:bc:d1:83:1a:75:90:e5:53:be:e1:64:bf:
                    e6:08:fb:ea:54:76:8e:c3:09:2d:f3:5a:fc:ae:af:
                    62:9a:1d:9f:80:cf:b8:ed:44:0d:ed:b8:85:b7:ef:
                    2c:03:d7:e2:7d:30:7b:b2:19:50:37:bf:75:2f:be:
                    e1:59:89:06:77:c9:5e:61:60:ed:39:96:fe:97:e3:
                    eb:7c:fc:f6:4c:22:d6:1f:f6:3b:cb:c2:35:d7:92:
                    54:f9:fe:fb:e1:1c:9d:0b:46:d4:4a:9a:4c:77:b9:
                    05:ae:f2:2e:d4:3a:63:f2:15:b7:71:bc:b7:ab:29:
                    f7:69:8d:9f:a4:5e:82:d6:03:bf:5c:49:9a:a0:bd:
                    ed:0f:e8:1f:d5:fd:56:99:12:5d:19:5e:e2:9c:73:
                    7d:34:d5:2a:d9:c2:a5:02:5d:74:26:1a:28:d5:41:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:B0:93:8A:05:65:39:70:B0:23:78:F1:60:4C:80:45:BD:13:B1
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/EF2D0AB84BC611EEBFFD4D71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:93:10:93:dc:82:a4:34:42:4f:94:da:b8:01:d9:a6:68:0b:
         3b:6a:fc:90:7f:eb:74:1e:d4:89:43:89:f1:e0:2b:99:3b:e4:
         73:59:59:19:4c:99:99:9a:a1:ba:fe:57:03:3b:87:c9:a4:a7:
         36:b1:10:dc:00:d8:fb:2f:1f:e9:81:dd:f3:72:7d:d6:fb:5e:
         c5:d6:b0:cb:13:91:23:d5:f8:0f:d6:e5:28:37:1e:5d:c0:d8:
         fc:f8:84:cc:7c:39:c6:2f:48:68:49:ad:64:b7:ca:a0:65:44:
         50:37:2b:5c:48:2e:1b:97:4e:63:8f:5c:50:66:86:00:44:bd:
         f8:60:3d:28:16:3e:47:62:66:18:5b:e6:00:86:9b:e1:33:ec:
         fa:d5:4a:84:5a:5a:d7:90:84:8b:b9:b5:d5:e9:22:c0:a4:1c:
         83:d4:9a:39:48:59:99:0a:93:47:a8:67:2c:50:92:38:94:97:
         76:6c:e9:e1:e6:9a:95:7d:7b:af:85:0b:6b:6e:97:15:2f:75:
         bb:47:70:3f:4d:73:90:82:41:65:ff:65:3e:cf:bc:98:54:4a:
         fa:27:f9:19:54:03:40:d6:9e:11:f2:94:cb:0c:ed:8c:bd:e1:
         c2:3e:94:1b:00:96:3f:df:a6:9e:50:e8:f9:dc:c5:cb:75:b8:
         fa:ac:0d:39
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjE5MDExMC8GA1UEBRMoN0IzQTZCREVEMkY3QjRDMDU4NDU2OEMwNjRBQjgwMzQz
Mjg3MjNBMDAeFw0yMzA5MDUwODMzNDhaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjZlN2VjLWQ2ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9CN/rctHvdeFCSOzFQVuL0KPaP7LIPmbpKOdD9p6sOCjrEPdPpzI60tyYmJfF
CANgCIzb1ltger/BPmeN78sZE4wCVRJpuLfj+1ELx53s1kK5po/GtMua7y6KqrzR
gxp1kOVTvuFkv+YI++pUdo7DCS3zWvyur2KaHZ+Az7jtRA3tuIW37ywD1+J9MHuy
GVA3v3UvvuFZiQZ3yV5hYO05lv6X4+t8/PZMItYf9jvLwjXXklT5/vvhHJ0LRtRK
mkx3uQWu8i7UOmPyFbdxvLerKfdpjZ+kXoLWA79cSZqgve0P6B/V/VaZEl0ZXuKc
c3001SrZwqUCXXQmGijVQcq5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ62wk4oF
ZTlwsCN48WBMgEW9E7EwHwYDVR0jBBgwFoAUezpr3tL3tMBYRWjAZKuANDKHI6Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MTkwLzBCQjM5NjUyMDQ5
NjExRUVCRDMxRUQzMEM0RjlBRTAyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZXpwcjN0TDN0TUJZUldqQVpLdUFOREtISTZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9FRjJEMEFCODRC
QzYxMUVFQkZGRDRENzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdFOTANBgkqhkiG9w0BAQsFAAOCAQEAKZMQk9yCpDRCT5Ta
uAHZpmgLO2r8kH/rdB7UiUOJ8eArmTvkc1lZGUyZmZqhuv5XAzuHyaSnNrEQ3ADY
+y8f6YHd83J91vtexdawyxORI9X4D9blKDceXcDY/PiEzHw5xi9IaEmtZLfKoGVE
UDcrXEguG5dOY49cUGaGAES9+GA9KBY+R2JmGFvmAIab4TPs+tVKhFpa15CEi7m1
1ekiwKQcg9SaOUhZmQqTR6hnLFCSOJSXdmzp4eaalX17r4ULa26XFS91u0dwP01z
kIJBZf9lPs+8mFRK+if5GVQDQNaeEfKUywztjL3hwj6UGwCWP9+mnlDo+dzFy3W4
+qwNOQ==
-----END CERTIFICATE-----
Generated at Mon May 13 07:29:13 2024 by rpki-client on console-fra.rpki-client.org