Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
File:                     E7EBC9003EE411ED905A3415C4F9AE02.roa (raw, json)
Hash identifier:          xx+PBcR35lYfvVhYY3jCSIatuhW5Ou+Pfl4qfbk9F1w=
Subject key identifier:   B8:D8:35:FF:49:AF:CF:B0:28:27:41:61:EA:1A:1A:D7:8C:A5:B1:68
Certificate issuer:       /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial:       06AA
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
Signing time:             Thu 28 Sep 2023 21:59:32 +0000
ROA not before:           Thu 28 Sep 2023 21:59:32 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     3491
IP address blocks:        103.155.8.0/23 maxlen: 24
                          2406:60c0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
                          rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1706 (0x6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
        Validity
            Not Before: Sep 28 21:59:32 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6515f744-11c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:4e:10:55:7b:af:d2:77:28:22:78:62:97:
                    2f:aa:c3:4f:2d:69:a6:b4:55:a3:3b:f2:03:db:a8:
                    55:70:74:17:c6:3b:ba:cd:62:0d:9b:48:30:01:ab:
                    aa:e6:76:17:7b:93:eb:77:a4:01:6c:5e:42:0d:a2:
                    8e:5a:fd:94:f0:7d:de:ba:b1:71:23:e6:54:24:ad:
                    85:a3:51:24:97:3a:00:34:a5:61:f7:5b:88:50:d0:
                    97:ff:03:bd:da:5e:e6:ab:0b:2f:f7:78:34:cb:d6:
                    a9:5c:ca:48:29:84:9a:b0:d7:e8:89:9f:49:6a:01:
                    a0:1b:f2:84:28:e4:5b:5b:77:52:b2:a9:20:e2:bc:
                    c0:78:47:08:5d:8e:19:2a:3d:2b:9c:fe:4c:af:3e:
                    91:cd:dc:d8:96:6f:53:21:ce:ac:0a:0b:b2:c8:9a:
                    18:3e:88:64:69:57:63:34:89:0c:50:4f:e0:d6:a7:
                    7c:53:b6:05:7b:c2:a0:41:0b:6e:28:e1:50:be:3d:
                    12:fb:fa:72:9b:f4:86:ea:38:1c:3b:de:29:44:43:
                    78:f8:96:91:91:3a:cf:9d:96:e5:ff:a1:aa:59:a8:
                    e5:5e:b2:67:bb:46:1a:d1:45:3c:30:d1:03:5a:1f:
                    0f:b6:1f:da:71:c7:45:a3:8e:c8:41:13:10:c5:2e:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:35:FF:49:AF:CF:B0:28:27:41:61:EA:1A:1A:D7:8C:A5:B1:68
            X509v3 Authority Key Identifier:
                keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.8.0/23
                IPv6:
                  2406:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:fc:ad:af:0b:0e:a0:70:2b:5a:82:bc:44:c5:f1:41:01:
         9c:d2:09:13:6e:6e:7d:07:0d:c8:ea:df:a0:07:a1:15:0a:92:
         ff:31:55:7b:6c:b0:1c:29:b6:c7:a8:03:18:3c:42:05:43:d7:
         d2:c4:ef:82:fb:49:51:e1:ef:a1:f6:9e:b0:ed:6f:2a:0b:b8:
         8d:92:41:ce:94:a5:10:7a:dd:73:0e:aa:e3:c6:bb:70:61:bd:
         aa:66:96:22:5f:3c:b1:d7:8c:88:8e:bf:c5:a4:49:bc:dc:04:
         e8:8a:80:82:32:1e:ca:a7:b9:37:07:a3:3d:7a:57:08:23:97:
         01:5c:04:ce:60:8e:08:46:b0:5f:d9:51:2a:0c:d7:38:f5:44:
         63:aa:81:97:fc:8e:d3:44:e1:2a:ad:1d:38:f9:5f:5c:ea:68:
         7e:f0:d1:5a:11:6d:d8:f4:aa:d7:d3:b8:dc:c2:0f:a3:fd:44:
         29:c4:2e:15:fe:3e:4b:da:0f:32:ef:60:2f:f7:38:2b:7e:8e:
         b7:19:e0:a1:ea:1d:25:0d:fa:3c:73:5f:ec:b2:97:b9:cc:f7:
         29:ec:e0:fc:8e:e4:24:ec:d9:68:1b:b5:1f:93:a1:cb:59:ba:
         e4:2a:cf:59:44:f9:4f:20:60:c7:a0:33:06:06:71:86:19:bf:
         4f:da:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:12 2024 by rpki-client on console-fra.rpki-client.org