Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
File:                     E69DB7E67F7911EC86DE4B56C4F9AE02.roa (raw, json)
Hash identifier:          rZC8SWsdSZa+0Z4sByJs9WyDe0koVPrw0IvazT8IwQI=
Subject key identifier:   C6:2F:E6:CF:4A:58:8B:E7:92:45:45:92:4A:B8:EC:2C:9D:EC:8D:F5
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       0304
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
Signing time:             Thu 29 Feb 2024 02:45:10 +0000
ROA not before:           Thu 29 Feb 2024 02:45:10 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     149445
IP address blocks:        103.179.150.0/23 maxlen: 24
                          2001:df0:4f40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Feb 29 02:45:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65dfefb6-92d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:03:ee:70:45:01:9c:e3:75:63:99:6a:1c:
                    6d:eb:a5:0e:d5:24:70:a8:5b:0c:69:89:49:77:46:
                    7f:11:17:50:ad:57:7d:dc:49:dd:b6:e4:78:f4:7f:
                    ec:88:b8:f3:ea:92:6d:51:0d:17:a7:c9:43:27:87:
                    73:fa:e6:5d:47:c4:1a:a3:b8:83:39:5c:e4:1e:ea:
                    ae:f2:86:36:4a:49:0b:02:ad:8f:1f:c4:40:22:63:
                    98:5c:6e:25:73:96:fc:ae:4e:e5:3f:ed:7d:cd:85:
                    e0:24:55:a0:f7:c1:e6:ff:b9:25:41:f6:1a:3e:b6:
                    89:1b:8f:12:d6:40:64:ff:ee:46:02:66:f0:af:e8:
                    bb:7e:95:da:75:be:49:92:56:2c:17:a1:cd:0c:8e:
                    58:7a:bf:b0:60:df:6d:83:58:a1:3d:53:4b:fb:0a:
                    f6:22:13:6b:87:cf:1e:ab:a7:62:12:0d:90:99:73:
                    ec:40:04:78:be:3a:1f:0b:83:2d:90:58:85:5f:0d:
                    b0:9b:48:f6:18:a7:60:8d:01:eb:7a:8a:02:47:9f:
                    f1:55:04:28:1e:97:4a:32:60:6f:b1:a7:50:d4:4d:
                    e6:8e:d4:20:9e:aa:6b:5e:fa:54:49:2c:3d:9b:13:
                    3a:5f:8c:c6:c9:56:43:7f:24:82:98:dc:a1:d5:7b:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:E6:CF:4A:58:8B:E7:92:45:45:92:4A:B8:EC:2C:9D:EC:8D:F5
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/E69DB7E67F7911EC86DE4B56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.150.0/23
                IPv6:
                  2001:df0:4f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:e3:81:be:42:ac:7d:7e:f9:2c:8a:26:de:da:bc:de:02:f0:
         14:3b:91:f3:e4:7c:e4:a2:44:55:09:5c:61:bf:ba:a2:15:71:
         b2:72:48:c3:fc:f0:47:96:34:30:0f:38:ae:16:8d:d0:dc:0c:
         25:c7:da:6b:c3:c5:e1:7f:ce:f1:79:22:eb:a0:86:a8:f6:4a:
         07:f2:e2:06:86:32:b4:6e:e8:6c:8c:8b:34:9e:ab:14:b5:bc:
         ca:9d:57:37:a8:46:19:19:d2:9a:99:b8:13:ae:50:62:26:3c:
         8e:a3:cb:cd:9e:27:f8:0c:0f:17:a9:28:18:e9:c0:a0:81:f2:
         77:be:6b:b9:db:9e:c6:c1:d2:97:68:06:c5:b7:6d:6e:8a:a1:
         96:90:6a:6e:d4:10:d8:5e:ad:94:f7:21:be:fe:9b:f2:e7:02:
         74:27:b9:f0:42:60:05:a9:99:00:a3:91:dd:b5:d1:24:e1:08:
         04:24:e0:d1:2f:20:36:bf:55:17:d4:fb:fb:f9:50:cc:e2:6e:
         31:8a:d3:5b:ae:59:16:13:f8:f2:7e:de:e3:9d:ea:6d:15:fb:
         ed:9d:21:c4:69:bd:5b:be:8c:4f:c3:8d:13:b7:34:f3:16:b2:
         99:d3:7b:c0:39:00:14:97:3b:74:6e:b5:32:0f:e7:df:33:66:
         2e:20:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:39 2024 by rpki-client on console-fra.rpki-client.org