Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/9EF724BE2A4911EE81BCF50FC4F9AE02.roa
File:                     9EF724BE2A4911EE81BCF50FC4F9AE02.roa (raw, json)
Hash identifier:          lYHiXvFHN0sTytXedz8N6c1+rrVDTpUOGa3q1hnyBeQ=
Subject key identifier:   31:01:4C:A3:6B:A8:74:76:48:8C:88:DF:71:52:B2:63:BA:47:44:FB
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       27
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/9EF724BE2A4911EE81BCF50FC4F9AE02.roa
Signing time:             Mon 24 Jul 2023 17:44:22 +0000
ROA not before:           Mon 24 Jul 2023 17:44:22 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     7720
IP address blocks:        103.213.4.0/23 maxlen: 24
                          2401:5a0:1000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jul 24 17:44:22 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64beb875-240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:01:84:00:b2:a2:5c:9d:e0:cc:f5:ea:00:
                    3e:08:00:95:13:7a:84:5f:67:7b:57:3b:64:79:4b:
                    e7:c1:c2:ea:52:67:5a:6c:07:43:bf:6a:a0:e9:4c:
                    77:9f:82:61:96:7a:78:74:3f:ec:dd:0b:b8:4c:94:
                    72:74:db:b6:89:89:43:ea:bd:19:f8:e9:fe:0a:12:
                    ce:93:fa:4b:ef:a2:97:c4:cf:6d:11:9f:f1:3e:b6:
                    a7:8f:19:a3:e8:2d:57:db:da:1d:bb:d9:39:a7:51:
                    1a:6e:ef:2e:69:94:d5:87:c8:31:60:50:2e:ab:75:
                    e3:4b:bd:fb:28:1f:8c:d2:4d:9e:10:a1:ad:6c:ea:
                    77:f5:4f:a1:cd:d0:89:c5:89:c1:5b:10:7b:73:d5:
                    dc:63:8a:b3:18:e6:e9:e2:2d:58:67:bc:7e:d6:c4:
                    53:28:f9:4f:7f:d3:80:d0:10:58:1b:1f:bf:db:5b:
                    28:7d:4c:35:b4:e3:eb:02:68:0f:fe:61:d8:37:6f:
                    26:9a:1e:55:88:32:7c:a8:18:cb:f3:d6:4d:79:f8:
                    7c:17:ec:f7:d9:9b:29:d8:ae:99:52:69:16:b8:92:
                    d5:80:f0:16:b6:a1:64:41:0d:66:2a:2b:fb:a3:0d:
                    76:e5:8a:5c:03:3c:a6:6b:cb:7e:c5:f8:18:d0:1f:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:4C:A3:6B:A8:74:76:48:8C:88:DF:71:52:B2:63:BA:47:44:FB
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/9EF724BE2A4911EE81BCF50FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.4.0/23
                IPv6:
                  2401:5a0:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         e1:e3:d2:71:44:46:48:f8:39:18:73:67:6f:62:d0:bd:9d:e9:
         38:44:2e:3f:e6:bf:c5:d5:b9:83:5f:11:11:dd:d5:99:00:c0:
         b8:9d:e9:28:24:d0:9c:ca:af:28:fe:6c:6b:13:39:b4:33:f3:
         91:fe:90:6a:7a:1b:fb:b4:05:21:87:fe:16:d6:d8:d1:34:be:
         90:02:f9:57:2e:e5:36:5e:43:9c:a6:87:62:90:f8:e0:4b:49:
         31:ce:6a:8b:6f:b2:88:bb:d6:06:d8:48:85:d6:69:46:52:0a:
         76:76:b7:64:2e:1b:11:a5:e6:d6:45:83:f9:56:2e:27:c2:ae:
         0b:d2:b2:32:23:46:a6:a3:5a:ae:fc:59:da:dc:e6:a7:3b:95:
         9e:39:03:8f:e6:89:2c:d4:49:06:91:1d:46:69:27:5d:8c:10:
         12:42:94:47:75:74:c4:a5:f2:cd:2e:ab:b0:a9:9e:76:93:8b:
         f1:25:01:a3:5a:78:6c:e2:64:34:0f:28:bc:1f:00:3d:0e:4a:
         3d:f8:46:e2:10:be:20:48:35:7b:ee:ca:aa:bd:a6:4f:78:5f:
         03:36:b0:87:d8:8f:26:e9:eb:65:2b:61:00:73:21:5a:06:8c:
         db:df:63:2a:28:cd:eb:9a:ad:1e:c9:ee:b8:0f:40:cd:b8:d1:
         cd:f7:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org