Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
File:                     E6054D96F3CB11ECA86DCE60C4F9AE02.roa (raw, json)
Hash identifier:          g4gsuu+wZs7S9/X3SadaC88LlRSG0KHzSqpbvhD9A5A=
Subject key identifier:   A1:86:F0:B7:3A:F4:14:35:A9:88:71:40:F2:72:8E:E5:BF:0F:54:53
Certificate issuer:       /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
Certificate serial:       01F5
Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
Signing time:             Sat 09 Mar 2024 03:55:37 +0000
ROA not before:           Sat 09 Mar 2024 03:55:37 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        36.255.97.0/24 maxlen: 24
                          103.209.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 04:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9
        Validity
            Not Before: Mar  9 03:55:37 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65ebddb9-4c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:cf:01:a6:ae:0f:d0:92:e5:82:8e:a3:aa:
                    54:1d:5b:1d:5e:3d:2b:77:e6:d1:af:fc:e4:4e:fe:
                    ed:5b:fd:1c:41:ba:88:87:c4:91:c8:31:f5:08:25:
                    ce:be:52:9d:18:b0:73:4f:35:9e:a4:6b:a6:b5:b9:
                    97:d7:e6:0b:a6:85:1e:e1:0b:fc:f5:64:90:20:ca:
                    b8:00:fc:25:f7:ec:46:e6:6d:d8:87:21:75:af:41:
                    72:9b:48:44:eb:09:dd:8f:60:50:c2:74:1c:5f:95:
                    f2:c0:3b:c8:56:94:55:9d:02:01:8c:f3:30:9e:47:
                    7b:d6:e9:1b:29:e3:54:36:e1:90:44:f0:78:05:1c:
                    23:74:25:ec:cd:42:58:c6:49:b4:84:e8:ba:fc:62:
                    61:70:d0:db:41:9c:76:c2:67:62:bc:1a:13:67:d9:
                    95:ee:6d:33:1e:17:9f:42:58:9d:58:c7:99:2f:68:
                    72:d2:e1:ce:9a:f0:de:b3:7d:d2:f2:d2:bd:4e:90:
                    dc:87:03:7b:7c:30:1a:e4:5f:10:6b:ed:c3:14:ff:
                    83:90:8b:bc:65:ea:c4:3b:e8:40:e7:86:f6:5c:a4:
                    77:10:0b:06:ad:e5:0a:7c:f5:08:a2:31:de:9e:95:
                    62:01:eb:32:99:5f:15:e1:7a:4b:78:11:88:ae:29:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:86:F0:B7:3A:F4:14:35:A9:88:71:40:F2:72:8E:E5:BF:0F:54:53
            X509v3 Authority Key Identifier:
                keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/E6054D96F3CB11ECA86DCE60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.97.0/24
                  103.209.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:ee:cc:ee:67:8d:73:91:b0:af:85:84:c5:7b:f8:42:6f:
         83:62:bb:ae:e1:fc:59:8e:3c:8e:82:6c:48:dc:12:07:6c:f4:
         c9:49:ef:e7:ce:d2:8a:bf:49:b5:e5:5d:dd:10:20:43:29:de:
         a2:8f:62:b8:ae:9f:18:dd:5f:3c:73:c5:80:4d:b6:57:f9:bd:
         80:e6:b2:6c:54:7e:e8:55:c7:99:d2:0a:89:80:91:37:83:d7:
         11:3f:79:c4:6d:04:2a:5f:0a:3c:6f:e2:5a:1b:c3:f6:01:13:
         25:2a:96:cc:b4:19:ef:0c:c2:df:a3:a8:7c:54:bd:10:cc:d2:
         77:60:c0:18:ca:6e:99:7a:86:44:85:8f:7a:7a:9c:50:77:09:
         a6:29:5d:7a:47:19:99:91:26:49:6d:dc:fc:43:48:f4:1b:57:
         8f:ac:0f:03:32:de:7c:0d:71:ac:b6:33:17:67:62:ed:c2:b6:
         7d:e6:e5:c8:e4:83:59:51:24:5a:e8:42:8a:03:13:d8:e0:7b:
         62:05:56:f3:eb:01:d9:b0:34:7c:45:f0:b7:02:1b:bf:9f:f5:
         59:b8:5e:c6:ed:87:b7:73:b2:e9:d9:ea:6d:7c:78:5e:2d:b8:
         49:d1:38:b6:97:dd:60:15:d0:47:e7:42:9a:4c:c2:97:f1:0c:
         a3:cf:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:37:01 2024 by rpki-client on console-fra.rpki-client.org