Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/2EE29686B57211EEBB68526DC4F9AE02.roa
File:                     2EE29686B57211EEBB68526DC4F9AE02.roa (raw, json)
Hash identifier:          BG/zDo1cSCOTw266ZMrM5hfmA9Sms2OMI9PbacT/1BI=
Subject key identifier:   27:D1:B5:56:E0:BC:B8:1C:B8:B2:5B:70:67:8B:E8:0F:3B:D7:25:40
Certificate issuer:       /CN=A9197277/serialNumber=7AE9D5AC5B3D06725951C1DDA544EFD2B8EF6EEB
Certificate serial:       02
Authority key identifier: 7A:E9:D5:AC:5B:3D:06:72:59:51:C1:DD:A5:44:EF:D2:B8:EF:6E:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/2EE29686B57211EEBB68526DC4F9AE02.roa
Signing time:             Wed 17 Jan 2024 19:54:11 +0000
ROA not before:           Wed 17 Jan 2024 19:54:11 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     6461
IP address blocks:        103.139.130.0/23 maxlen: 23
                          2001:df0:7c80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 08:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277/serialNumber=7AE9D5AC5B3D06725951C1DDA544EFD2B8EF6EEB
        Validity
            Not Before: Jan 17 19:54:11 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65a83063-0f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:b9:9a:ad:0f:43:82:3b:ff:54:02:6a:f4:
                    31:3e:17:80:2a:cc:52:35:95:62:1c:26:d8:23:45:
                    a3:2f:b6:d6:15:4a:fa:89:9b:e7:53:3d:19:e2:97:
                    ae:8d:f1:a5:a0:91:6c:2c:6d:2a:7b:8d:69:cf:18:
                    f9:a4:84:12:00:41:5d:9c:a5:73:e3:f1:1d:7b:5d:
                    6e:15:19:15:a7:09:f2:6c:44:68:9e:a9:8f:82:82:
                    3d:54:a8:be:14:5f:06:5e:1f:88:fe:17:32:19:e3:
                    d4:cf:bc:b2:97:b0:57:7d:70:f4:60:45:0b:73:77:
                    0d:24:29:70:6f:a3:6d:c1:75:b8:a6:b1:94:38:ce:
                    8c:b8:60:82:49:20:b0:50:fd:39:c3:b5:0b:70:39:
                    9a:02:fd:79:fe:72:01:16:f8:d5:43:65:8a:a7:19:
                    32:38:af:79:62:a4:e1:7d:41:ec:74:f9:de:f5:d2:
                    e6:3e:de:21:13:fd:2a:20:30:2e:60:b8:e2:e2:c7:
                    e0:17:2b:96:cb:c4:f1:52:96:e7:ca:d4:5b:fa:d5:
                    01:52:d0:31:f7:2e:f3:90:de:e1:2e:4c:2b:fb:54:
                    16:df:7b:b5:b4:fd:b9:f4:a9:50:8e:68:49:f9:2a:
                    c7:f9:eb:d7:62:44:f3:38:93:f4:b1:9d:dd:93:5a:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:B5:56:E0:BC:B8:1C:B8:B2:5B:70:67:8B:E8:0F:3B:D7:25:40
            X509v3 Authority Key Identifier:
                keyid:7A:E9:D5:AC:5B:3D:06:72:59:51:C1:DD:A5:44:EF:D2:B8:EF:6E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/eunVrFs9BnJZUcHdpUTv0rjvbus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eunVrFs9BnJZUcHdpUTv0rjvbus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/4CE0EB36B56011EE911C5D4FC4F9AE02/2EE29686B57211EEBB68526DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.130.0/23
                IPv6:
                  2001:df0:7c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:94:d1:34:c7:69:29:b8:b8:84:e7:19:29:d8:59:f5:08:67:
         0f:d7:8e:a2:ef:fa:a1:bc:e1:79:7f:b6:e1:d7:57:aa:15:03:
         83:4e:00:a8:48:9c:20:53:7f:85:ec:0a:b4:6c:8f:a8:86:5b:
         3d:a3:46:df:e6:17:41:8c:46:60:b0:c9:c9:ea:20:df:9c:e9:
         62:45:59:f5:c4:03:28:ac:5b:11:a1:00:58:f2:88:d2:6c:90:
         97:ba:79:64:fc:c2:df:b0:23:dd:b8:54:b3:2e:fc:98:58:3b:
         c3:2e:41:d5:cf:6a:3c:a4:a6:a5:ba:28:0b:21:58:4e:d5:b8:
         c9:34:6f:3f:5a:b0:4a:aa:de:e5:26:93:01:08:7d:94:2c:29:
         44:c8:06:35:ea:5e:5a:2e:12:58:69:0e:0a:30:46:db:2c:96:
         94:5c:33:86:3b:19:ff:4d:f0:09:04:44:8b:61:57:9e:f6:43:
         25:22:1f:a5:25:4d:a1:ad:02:1b:d1:6b:5a:c0:d1:e9:32:e3:
         ae:89:dd:e3:64:40:aa:ac:dc:9e:9b:a7:97:6c:96:91:b1:36:
         7d:80:3b:31:19:38:cd:5f:2d:d7:b9:a0:52:e7:ff:97:99:5e:
         2e:c8:f2:94:ad:7f:04:6f:1f:08:77:2b:2f:41:40:12:ca:1e:
         4a:32:50:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:34:09 2024 by rpki-client on console-ams.rpki-client.org