Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E35980B0591B11EEB8B55278C4F9AE02.roa
File:                     E35980B0591B11EEB8B55278C4F9AE02.roa (raw, json)
Hash identifier:          L/3/7XflROdpdUXTNoPv1G7bBP729CVgtAC5gKCunp0=
Subject key identifier:   F4:F4:01:97:0D:50:8B:07:33:07:F6:EC:C1:82:6C:93:49:EF:6E:2C
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       0189
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E35980B0591B11EEB8B55278C4F9AE02.roa
Signing time:             Fri 22 Sep 2023 07:44:41 +0000
ROA not before:           Fri 22 Sep 2023 07:44:41 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.190.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl
                          rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 04:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Sep 22 07:44:41 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=650d45e9-667d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:fa:33:9c:2b:fb:97:8f:18:bd:b7:09:43:
                    17:6b:da:6b:b3:d4:81:49:07:8e:5f:53:90:c8:5d:
                    cb:67:68:3b:3b:60:7d:cd:17:41:d5:af:0d:a8:86:
                    f8:40:e3:63:69:3b:41:5e:0e:0a:ba:01:9e:93:9b:
                    d3:7c:44:a2:45:8d:bf:0b:f6:a3:ec:9c:bc:ce:b3:
                    a5:d1:e2:7c:13:cd:38:aa:24:9c:3a:74:82:a7:ca:
                    82:e9:ea:82:d2:31:16:09:a8:c3:b9:62:2f:83:85:
                    d1:79:51:a0:f9:35:d5:15:1b:dc:1c:6f:44:1e:c7:
                    a7:6d:7e:12:73:0a:a4:3e:a3:72:e3:19:ee:2c:a7:
                    6e:73:69:6c:fb:df:97:9c:09:43:30:35:3f:d3:20:
                    c8:21:47:1c:42:95:ae:01:62:88:52:61:2e:25:55:
                    7e:db:47:e4:e1:c2:cd:ab:fe:40:dd:d8:08:71:bb:
                    4a:d3:3d:62:35:5c:e6:12:ab:53:ca:59:61:60:f9:
                    94:a1:45:93:c1:75:70:d3:8a:72:6c:b8:62:64:a0:
                    74:a3:bf:4b:5b:b0:7c:55:89:99:2e:e0:ac:be:23:
                    13:58:68:6d:c9:f2:ca:51:ec:c8:95:b5:04:f9:3f:
                    00:34:14:a1:42:ef:a8:8e:17:1f:7e:6e:c9:e6:7c:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:01:97:0D:50:8B:07:33:07:F6:EC:C1:82:6C:93:49:EF:6E:2C
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/E35980B0591B11EEB8B55278C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:31:53:4f:61:8e:dd:0f:79:3e:fe:99:84:af:b6:5e:9b:72:
         78:41:ce:0a:d0:93:16:56:90:3f:25:18:e8:f9:5e:25:6e:cb:
         ef:40:77:91:50:10:ed:ad:52:08:2f:7e:0e:49:d7:f1:d6:c3:
         ee:51:e7:76:71:ac:ee:a9:09:92:d1:ff:6f:88:a5:12:1f:9c:
         46:0a:7f:a2:38:17:2d:b2:bd:9b:e3:a7:a7:e9:15:d6:30:be:
         fe:42:ea:18:16:4a:ec:64:1b:af:cd:61:99:d1:35:db:b0:9f:
         73:d2:1d:34:ef:4e:0f:42:2b:bd:5f:f7:18:72:ff:24:6d:fe:
         c4:f2:0a:0b:be:8b:d3:e4:a1:c7:e5:80:5c:98:f7:0a:ca:6e:
         5c:c3:4c:d0:b1:88:1b:d0:35:d2:44:5a:53:04:dc:55:28:d8:
         82:c3:5b:f1:2e:cc:a8:2a:cf:7d:45:96:68:07:82:d1:62:30:
         53:1e:35:85:08:b9:be:c5:be:95:10:22:c5:90:cd:16:4b:1c:
         e4:7b:7b:01:09:cc:63:45:f6:62:90:0f:4b:b6:07:c8:ab:76:
         fc:16:15:3c:d6:a7:1c:1e:49:24:23:d0:33:a2:54:c0:3c:9f:
         5e:87:23:19:e7:09:05:52:0a:60:61:ba:b3:46:57:61:2b:d2:
         c8:6a:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 05:07:05 2024 by rpki-client on console-fra.rpki-client.org