Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/E6F6831A26AF11EEA8E86146C4F9AE02.roa
File:                     E6F6831A26AF11EEA8E86146C4F9AE02.roa (raw, json)
Hash identifier:          9CpIxhJpqpZgP/T3ieG0/C13phYUk5BrcepNwd47BAg=
Subject key identifier:   DA:D4:E9:CC:48:4C:25:18:C6:5B:95:03:63:A8:DD:A1:43:18:94:A2
Certificate issuer:       /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial:       08
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/E6F6831A26AF11EEA8E86146C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 03:48:52 +0000
ROA not before:           Thu 20 Jul 2023 03:48:52 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151618
IP address blocks:        103.239.172.0/23 maxlen: 23
                          103.239.172.0/24 maxlen: 24
                          103.239.173.0/24 maxlen: 24
                          2001:df2:b6c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
        Validity
            Not Before: Jul 20 03:48:52 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64b8aea4-c6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1f:f2:cb:68:14:be:ba:78:3f:9c:a4:b8:2d:
                    3b:13:f8:f3:8f:ac:5e:4a:86:5f:3f:36:a9:e7:2b:
                    50:0d:5b:99:25:0e:c2:98:07:1c:5f:91:6d:97:b7:
                    6e:b9:4f:a3:3d:d0:2e:12:56:29:de:d8:2f:d9:53:
                    0f:d9:50:fe:e3:0f:19:ed:e2:d0:60:22:1b:1d:ee:
                    64:0b:09:7a:8c:40:21:80:2f:16:cb:25:b2:fd:23:
                    21:b0:59:d7:5e:41:ac:e9:5f:95:87:de:d4:e6:f4:
                    fb:49:ea:00:3e:61:81:55:3e:ab:9f:13:01:de:be:
                    cb:9f:a8:1a:d9:0a:30:41:91:f8:2e:9e:52:0c:67:
                    3d:7a:6d:50:6a:07:b5:af:ca:28:25:f3:c8:76:36:
                    4d:e6:af:e7:d8:89:30:86:4e:8b:ec:5f:c4:a3:16:
                    c7:51:70:10:32:e6:fe:5d:05:de:a6:71:67:a1:2e:
                    86:8f:64:d2:5b:72:95:89:74:bb:f8:69:46:88:8b:
                    4d:52:f3:97:ed:b1:ec:66:f1:3e:2b:d5:a6:79:a4:
                    a0:9e:12:7d:8e:73:62:5e:f7:6e:3b:f5:a6:05:90:
                    c0:58:89:35:4f:4d:2f:6b:96:ae:b2:d1:a8:a1:1d:
                    dd:4a:69:0d:42:4f:9f:18:20:b2:86:d0:ae:d3:ed:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D4:E9:CC:48:4C:25:18:C6:5B:95:03:63:A8:DD:A1:43:18:94:A2
            X509v3 Authority Key Identifier:
                keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/E6F6831A26AF11EEA8E86146C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.172.0/23
                IPv6:
                  2001:df2:b6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:a6:67:b9:f1:f6:43:8d:c2:55:72:c6:c9:05:89:e2:a9:
         7f:93:30:39:2a:36:f8:cb:5d:89:49:6c:57:86:06:d6:f3:8c:
         d8:3f:30:0b:b7:55:f3:b0:b0:0e:c6:4e:17:eb:8e:fc:7c:55:
         2c:fb:75:51:91:dd:59:b8:89:de:5f:e0:a0:45:2c:ff:f8:38:
         7a:42:91:f3:80:ec:a7:a0:05:40:c5:6c:c9:53:de:e2:ff:45:
         64:60:37:f4:94:c0:97:3d:a6:2b:50:a4:8d:ea:d9:3a:7c:bb:
         ce:ad:3a:cd:3f:49:4f:6d:4d:65:71:04:2e:2f:ab:3f:2a:21:
         d9:42:b5:60:06:99:1d:bf:f7:78:60:be:60:cd:96:78:32:f8:
         2c:39:d9:c4:61:0b:ca:06:3b:31:21:3a:9b:48:f3:89:03:69:
         97:0c:b0:7d:96:0d:9a:20:19:d4:ee:59:5b:8a:fd:6a:dc:92:
         dd:49:38:f4:fa:d6:e0:ff:8f:8c:30:4f:37:ec:e5:c9:8a:a7:
         61:52:41:11:3b:75:35:c6:11:ae:67:3b:02:f2:cb:82:4b:2b:
         ac:56:45:91:d1:64:6b:72:b9:64:fd:ca:4c:fa:83:61:d0:af:
         10:a9:55:68:7c:72:ac:0a:46:2d:f8:e8:7e:10:67:c5:76:35:
         12:95:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:31 2024 by rpki-client on console-fra.rpki-client.org