Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa
File:                     E331E83206CD11EBA6A91612C4F9AE02.roa (raw, json)
Hash identifier:          McmqPkZiC0Dcs2DMydhDCPJxSh64MkkJT3vmji/H8eI=
Subject key identifier:   23:F7:2C:57:51:0A:E7:81:BC:9D:2A:DF:D4:2A:B3:31:CF:70:40:37
Certificate issuer:       /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial:       064C
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa
Signing time:             Thu 10 Aug 2023 22:18:56 +0000
ROA not before:           Thu 10 Aug 2023 22:18:56 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     140918
IP address blocks:        103.153.118.0/24 maxlen: 24
                          2001:df4:4480::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
                          rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
        Validity
            Not Before: Aug 10 22:18:56 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64d5624f-e018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:21:9e:c4:7a:2a:ad:c2:d0:61:47:15:61:
                    46:4b:18:cd:3f:85:9b:da:59:43:78:6d:b7:7c:d1:
                    da:17:98:13:94:89:e1:97:c1:b6:6d:3d:00:48:bf:
                    e4:df:bc:ea:18:4e:2f:d3:f5:6f:7d:5a:8a:d2:49:
                    cc:c8:63:94:fe:62:ed:b4:3d:3f:3a:89:27:71:30:
                    07:25:1c:be:8c:15:81:71:b5:34:5d:8e:99:b4:12:
                    06:24:ea:19:b9:d9:7f:8c:1f:d5:93:04:93:53:9b:
                    4c:cb:a9:9a:b4:14:c5:8c:f2:a9:c6:4f:97:66:11:
                    3c:08:c5:e1:0e:d6:2e:18:f6:55:aa:7d:ac:7b:c7:
                    6c:7f:56:cd:e6:76:cc:cb:c8:32:4d:6d:01:c2:a7:
                    65:57:b9:5c:17:be:13:86:cc:b6:9a:ee:04:76:31:
                    b2:d6:bf:a9:98:05:0e:10:4c:d4:0e:20:d5:92:e6:
                    89:2d:eb:af:30:5b:9d:8b:c0:36:8d:10:c7:dd:7e:
                    84:1b:c9:76:60:ff:99:7e:ec:23:2b:12:63:be:32:
                    af:3f:db:10:ce:5a:48:68:7e:ef:50:96:67:93:36:
                    45:5f:aa:39:9e:a8:a8:86:eb:8a:09:98:aa:d4:4c:
                    4d:3d:e5:d1:99:96:5c:06:dd:e4:63:3c:03:f8:6e:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F7:2C:57:51:0A:E7:81:BC:9D:2A:DF:D4:2A:B3:31:CF:70:40:37
            X509v3 Authority Key Identifier:
                keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/E331E83206CD11EBA6A91612C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.118.0/24
                IPv6:
                  2001:df4:4480::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:19:96:b9:93:47:b8:4c:3a:28:b5:39:91:ef:37:1a:06:7b:
         08:cc:50:8d:39:49:fa:02:e6:6b:85:22:8f:ea:3a:3f:2c:18:
         47:25:14:a2:bc:40:09:bb:7c:3c:13:f2:ca:41:4d:e6:fa:8d:
         cb:b9:84:37:ac:29:d9:74:e8:82:52:e5:a7:97:3d:48:07:cb:
         eb:47:42:05:06:04:d0:f2:d9:72:1c:3f:23:df:cc:61:f8:66:
         a6:4f:29:4a:91:47:f0:7e:f6:a1:80:49:ae:96:a3:de:82:26:
         24:f3:95:19:d7:8a:db:fa:5e:7a:ec:e7:f3:cb:16:a4:4b:e0:
         31:56:ec:df:a8:a0:9a:34:08:47:7e:7b:95:9a:d4:6b:3b:e5:
         49:e4:c7:42:87:11:6c:70:f2:6a:59:f7:de:52:95:ac:bd:a2:
         3d:a2:5e:b9:5d:fc:d2:56:81:61:c3:c2:52:38:83:00:9c:d0:
         82:e5:69:13:49:69:df:b0:19:d5:3b:0b:cf:9e:00:5c:d2:14:
         bb:f3:a9:37:66:48:e3:a9:ef:ee:bc:3f:a4:42:c1:03:de:48:
         1a:f8:9c:42:ad:af:0d:6c:c0:26:84:a5:38:9c:61:37:88:80:
         a7:50:e0:fc:a1:a1:e5:4f:d6:7b:17:c1:0d:3a:73:52:57:6d:
         a7:5f:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:41 2024 by rpki-client on console-fra.rpki-client.org