Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
File:                     E1647F18303311EA8796D584C4F9AE02.roa (raw, json)
Hash identifier:          KqE4NP0GXCegWdaKQdxPH3myxDzGSDNL2S8PtjJy2Ls=
Subject key identifier:   54:FE:6A:00:17:38:EF:43:BD:74:41:31:A6:3F:93:FF:B6:49:33:77
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0A7F
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
Signing time:             Thu 22 Feb 2024 20:08:27 +0000
ROA not before:           Thu 22 Feb 2024 20:08:27 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.147.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 18:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687 (0xa7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Feb 22 20:08:27 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d7a9bb-b765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:8f:0d:f3:85:f7:68:30:3e:84:0a:fe:13:
                    ae:e5:80:78:54:b0:35:63:e2:1a:d9:49:80:fd:5c:
                    af:f8:c7:20:ee:27:f6:d0:9a:a6:bb:21:04:9a:ec:
                    6f:db:4d:28:88:f0:4d:c6:41:af:1c:ec:2c:8d:58:
                    f4:27:6a:66:f6:51:ac:2f:90:be:75:6c:59:57:79:
                    75:50:57:44:b7:95:c2:34:fa:ef:41:84:50:16:67:
                    42:e9:b8:5e:4f:89:4f:8e:4f:f1:da:16:6e:d8:6b:
                    dc:b2:6f:94:54:0b:f3:ec:46:dc:e3:70:03:5a:11:
                    e7:a9:e8:f5:fc:29:44:58:bd:51:c5:d2:99:fe:70:
                    89:bb:96:b8:a0:5c:4a:93:ab:05:d6:65:bc:83:7c:
                    12:fd:99:11:04:4a:8d:ce:9c:4b:4e:4e:1d:30:16:
                    e8:d1:9a:40:3b:ee:1d:80:97:cf:9c:34:bc:30:b7:
                    11:34:b5:3b:ac:90:84:21:dc:e7:a4:92:4c:70:ae:
                    17:67:c2:be:1f:34:20:5c:88:f6:32:d1:0b:df:03:
                    b5:93:7e:52:aa:ce:f1:27:58:af:5d:cf:4c:01:eb:
                    1e:04:70:da:77:c8:1c:ea:7c:df:53:c6:1c:23:ed:
                    7b:80:69:73:c7:50:28:27:4d:f5:2d:22:22:20:20:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FE:6A:00:17:38:EF:43:BD:74:41:31:A6:3F:93:FF:B6:49:33:77
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:54:91:3a:30:f9:4c:6c:e4:7e:8e:45:fc:8c:b8:29:83:
         e7:a8:cd:19:1a:e3:b0:f0:a0:8b:d5:d6:5d:2f:6b:cd:44:43:
         ec:60:99:f6:4f:f3:c3:1d:26:20:1f:38:fd:87:8a:be:7d:c5:
         ee:0b:2b:42:7e:99:e9:1b:6f:89:94:7d:9a:d2:49:4d:2d:c6:
         27:94:65:a6:dc:dc:86:b1:f7:af:e3:f6:21:95:54:80:90:1d:
         dd:34:f4:e8:fb:ac:fc:cf:ce:57:d9:b5:6a:c6:b7:19:52:3b:
         9e:2f:63:0c:3a:33:c0:05:ec:12:75:18:c6:87:b2:b3:ac:d2:
         fe:04:63:c8:39:20:4b:26:23:4a:05:0e:ba:ee:af:b4:20:5d:
         81:38:f7:33:0a:3d:0d:84:84:0c:b6:99:2e:d7:ec:61:f2:88:
         a1:c0:a4:af:2e:38:c8:d0:bc:e7:75:09:86:14:53:91:3e:db:
         db:35:64:4c:ed:c9:9d:b6:c0:5a:8a:b1:9c:13:d7:d7:b3:d6:
         42:ef:cf:3e:ee:c0:42:7b:3c:19:6c:d1:e2:b0:e1:ce:15:89:
         4f:28:f4:af:db:90:9e:b9:09:a5:f6:9c:f5:67:a3:d6:19:61:
         55:f0:49:cc:47:7a:3b:a0:71:c4:7a:53:e3:e1:4f:ff:b2:73:
         de:0e:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:18:12 2024 by rpki-client on console-ams.rpki-client.org