Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
File:                     EF1E7F70E82411EE9005BA2DC4F9AE02.roa (raw, json)
Hash identifier:          KVqkwqdGo/3PNFQ8iCFTLDUstBCh3y661cBvY2zZpr4=
Subject key identifier:   A0:C9:2A:9A:C6:34:1C:00:54:21:FB:69:15:81:9E:3D:F1:74:0E:7C
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       08
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
Signing time:             Fri 22 Mar 2024 08:21:32 +0000
ROA not before:           Fri 22 Mar 2024 08:21:32 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 09:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Mar 22 08:21:32 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65fd3f8b-448c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:70:6a:00:2f:a2:29:00:66:9d:fe:5c:77:
                    bb:19:07:8a:26:b8:cf:d1:d8:78:a5:2c:6f:e2:b1:
                    fc:e1:41:fa:fe:fa:fb:a8:0d:2c:72:5a:29:f2:7c:
                    69:34:c3:97:b5:db:b5:6e:91:09:46:2b:86:e0:3a:
                    3a:8e:ed:e6:b5:b0:0b:3f:a4:6d:3f:ba:d8:9a:28:
                    d2:cd:bc:47:a8:98:9e:16:3f:85:ca:b1:2e:3f:8c:
                    39:9a:bf:58:44:9a:2d:99:ea:0d:c7:11:23:5f:3e:
                    f5:69:d6:5f:82:53:69:52:10:87:2f:7f:f3:18:39:
                    57:c9:fa:48:4a:58:6f:48:12:e0:3d:4f:88:24:a6:
                    27:b0:30:c0:4e:00:bb:99:66:a2:ad:5b:58:06:1b:
                    25:30:f9:24:ff:e1:c3:d5:e2:8e:83:37:1b:1a:e6:
                    9f:7f:fb:c6:b0:0a:8c:f1:be:57:b1:bc:28:81:d5:
                    33:b7:0d:10:02:23:40:bd:29:d5:bd:c5:22:dd:7b:
                    21:09:b4:78:4a:fc:6b:59:9b:5a:0e:76:15:71:93:
                    40:fe:7c:de:fb:ef:68:52:d8:d6:57:23:6d:04:fb:
                    fd:04:8b:34:5b:4b:ed:a1:4e:6b:db:d5:d6:a4:5f:
                    41:08:72:76:06:7d:59:5e:25:3a:57:44:f7:e9:6f:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C9:2A:9A:C6:34:1C:00:54:21:FB:69:15:81:9E:3D:F1:74:0E:7C
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:ac:ac:83:c4:b5:2a:3f:1d:10:d0:d4:78:d4:ef:8a:7b:1c:
         8a:bb:2d:1b:f9:32:ae:29:3c:a1:8b:df:77:26:6b:ad:e4:f8:
         1f:fd:b9:b4:60:f7:13:67:cf:ae:53:9f:9b:87:08:eb:37:b6:
         83:81:aa:09:b9:9e:0b:24:e9:09:ad:b2:8b:89:ac:66:17:23:
         e7:7f:87:af:ff:6d:c2:5c:f7:0a:8f:6d:46:f8:21:0b:27:6d:
         af:cb:d0:8d:be:9c:7a:6c:1f:3b:1b:cf:fb:95:37:bf:2e:8f:
         bb:f6:92:9b:df:ad:c8:1a:91:4f:49:bc:73:bc:32:44:36:09:
         9f:b1:4d:fd:2e:c5:8f:99:3e:78:11:17:2c:c5:a9:33:75:fd:
         2a:59:f4:eb:db:d8:85:b4:ef:b3:77:63:fb:4a:96:64:d9:af:
         be:f2:58:6c:e2:e7:2f:b6:48:30:34:8c:12:2d:07:2c:6c:19:
         12:1d:89:22:6b:42:9a:5d:e9:8f:a5:03:60:15:70:e6:8d:ac:
         56:ae:33:f3:c5:48:c6:52:0d:5a:c4:d8:b8:f4:dd:5e:e9:ce:
         b4:44:77:93:22:bc:d9:6d:12:0a:3e:cc:cd:6a:4d:b2:f7:2a:
         ae:ea:aa:d8:b6:a1:c2:8d:04:c6:d2:72:9e:93:b3:90:5b:c0:
         fd:82:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:04:15 2024 by rpki-client on console-ams.rpki-client.org