Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E517C17C976311EBBFAF1C11C4F9AE02.roa
File:                     E517C17C976311EBBFAF1C11C4F9AE02.roa (raw, json)
Hash identifier:          ZXgjA/UZ4LJVoou2tHUjM7CWZVyNnz1L//2wughBBAM=
Subject key identifier:   48:41:74:54:D3:E7:AA:AB:26:35:2E:C9:54:2E:34:FB:C7:B2:8C:27
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6F00
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E517C17C976311EBBFAF1C11C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:36:41 +0000
ROA not before:           Wed 10 May 2023 16:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141797
IP address blocks:        103.165.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28416 (0x6f00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc819-59f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:59:86:37:c9:a5:d1:b6:73:dc:fb:e4:dc:
                    58:02:3a:d3:b0:c6:49:67:54:5a:60:85:99:8e:0c:
                    eb:7b:99:a6:a1:31:62:33:fb:9f:a9:d3:7b:87:dd:
                    2a:aa:79:75:3e:d0:8c:56:2f:f8:cf:d6:fb:e9:01:
                    15:e2:a7:62:db:93:e1:95:e0:d9:ce:3e:51:2b:49:
                    c3:15:f1:1b:ae:1e:47:ec:da:74:75:ec:a0:fe:9b:
                    22:99:0b:2f:36:54:6e:eb:22:10:8d:28:20:0e:58:
                    5f:44:43:02:a7:04:cf:73:57:21:b3:a1:4d:b5:e4:
                    b4:87:83:c5:79:4e:b3:4e:65:8f:8f:62:b4:e6:8d:
                    2f:08:be:8d:1a:9c:04:e7:2f:b6:d9:bf:ba:dd:c5:
                    24:4c:6c:fd:33:d4:63:81:c5:e0:53:43:5b:06:12:
                    6c:90:e8:50:5c:92:fa:3e:b0:cb:9f:f2:ca:a0:19:
                    d5:0e:ae:24:26:86:96:09:7f:51:85:45:93:ab:36:
                    65:8f:17:e1:9a:67:66:00:b1:fd:61:3a:10:49:5f:
                    3a:0c:5c:5d:81:92:21:51:b1:70:72:83:7d:03:bf:
                    cb:0e:22:fa:61:6d:06:dc:4d:37:e7:b1:82:36:a2:
                    57:4c:fb:9a:5c:fa:52:f5:71:bb:5d:23:ab:2d:dd:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:74:54:D3:E7:AA:AB:26:35:2E:C9:54:2E:34:FB:C7:B2:8C:27
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E517C17C976311EBBFAF1C11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:dd:8f:e0:f6:3a:ab:34:9f:fa:9e:05:76:fb:e6:70:8d:d0:
         77:0d:bd:08:3b:f4:76:e3:55:97:55:1e:2c:71:01:c4:43:69:
         2b:fb:46:ba:4c:fb:d8:61:c5:fc:15:db:ec:3d:5a:8c:8f:49:
         e5:59:ba:1a:e1:8b:97:7c:0d:14:c7:59:5a:49:bf:91:84:c1:
         8a:34:81:c7:7a:b8:ee:94:17:9d:77:00:e7:3a:bc:14:39:b2:
         fd:a8:74:e8:23:43:0d:c9:18:ae:a8:06:62:aa:95:7d:2f:01:
         a5:2d:8e:59:37:43:00:9d:86:d2:31:4d:d7:25:08:f8:73:2d:
         51:87:f8:82:b0:86:7c:40:8b:e0:2a:12:bd:f1:d4:59:eb:e5:
         da:a7:6f:9b:13:a5:99:81:aa:50:d3:de:d6:16:c9:2f:9c:aa:
         61:b8:f0:72:b2:91:b8:8a:d0:11:61:5f:bf:ac:ab:ba:97:f4:
         70:99:d7:d1:a8:ad:8a:b2:0e:4b:ac:23:b4:e1:e9:50:f7:64:
         42:c5:19:78:39:e1:7a:d4:3f:f0:0e:ca:76:3d:78:e0:d9:dd:
         10:e5:d6:a7:1c:84:19:c8:4a:36:da:15:2a:7b:4e:86:16:92:
         18:e2:c1:26:10:49:62:de:d6:90:ba:c0:89:0f:e8:f5:b6:83:
         95:16:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org