Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/E6ECE6E6104C11EC9074E586C4F9AE02.roa
File:                     E6ECE6E6104C11EC9074E586C4F9AE02.roa (raw, json)
Hash identifier:          Ne3CcwgOXN/mdehtqmtNbBIn0UEd64uENfNzu9II+34=
Subject key identifier:   8F:5F:E5:DE:27:E0:28:11:ED:5F:7B:F0:E5:42:B4:CE:22:63:AE:5C
Certificate issuer:       /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
Certificate serial:       04BE
Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/E6ECE6E6104C11EC9074E586C4F9AE02.roa
Signing time:             Tue 05 Sep 2023 00:11:21 +0000
ROA not before:           Tue 05 Sep 2023 00:11:21 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     142056
IP address blocks:        103.166.31.0/24 maxlen: 24
                          103.166.31.0/27 maxlen: 27
                          103.166.31.64/26 maxlen: 26
                          103.166.31.128/25 maxlen: 25
                          103.170.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl
                          rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 00:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03
        Validity
            Not Before: Sep  5 00:11:21 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f67229-d23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:8a:90:72:83:1c:6e:13:f9:9c:10:e9:60:
                    a6:05:b1:05:f4:76:6f:14:34:18:de:a0:54:77:8d:
                    78:a4:0c:3b:09:84:c4:63:49:92:99:d5:14:28:dc:
                    b4:a1:30:74:67:bc:81:af:40:aa:b0:96:01:56:35:
                    ae:cb:43:0e:44:6b:0b:b0:94:d4:e9:97:d4:c3:aa:
                    57:8a:53:98:78:0a:e5:8c:c2:93:9c:40:b1:53:ff:
                    5a:d2:fe:3a:c9:ae:c3:eb:22:dd:09:0f:3e:76:4c:
                    14:7d:58:f5:b1:df:4b:b7:93:55:c7:29:f7:6f:04:
                    4c:15:15:c6:db:bd:c0:d0:bb:9c:61:ff:98:d9:de:
                    74:ef:b6:41:56:44:84:36:52:5b:a7:66:e9:b7:9a:
                    96:a7:7a:0e:23:8b:86:99:b6:23:dc:dc:8d:8e:7d:
                    80:26:6c:b5:e9:c2:2d:49:d4:d6:d0:88:73:48:e0:
                    4f:58:07:f9:8e:4f:23:c9:ac:d9:b0:2f:0c:37:f9:
                    ff:6d:25:cc:36:e4:59:74:60:ef:5b:ad:5b:f7:eb:
                    bb:b7:42:c9:2a:7f:fa:14:a5:49:38:c3:98:74:f7:
                    bd:26:df:b5:f8:a3:3e:6f:4e:8f:87:76:b4:0e:9c:
                    19:e1:3f:94:30:54:f7:5a:05:8b:f3:99:5c:a0:b4:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5F:E5:DE:27:E0:28:11:ED:5F:7B:F0:E5:42:B4:CE:22:63:AE:5C
            X509v3 Authority Key Identifier:
                keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/E6ECE6E6104C11EC9074E586C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.31.0/24
                  103.170.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:4c:05:63:b1:3a:60:76:cb:e4:30:35:86:d3:e1:2e:66:
         07:61:67:f3:25:66:13:f3:eb:dd:d7:fe:aa:be:df:57:d8:a0:
         87:6c:3f:6d:23:84:33:78:4f:ff:f4:4d:30:2c:24:25:dc:95:
         46:99:7c:ce:1a:f2:c9:8f:d7:0f:cd:3f:eb:bb:35:e2:79:7e:
         ca:ae:5b:f6:2b:3e:6b:2e:63:27:e7:b6:bf:bd:91:42:10:9c:
         26:03:f8:da:e2:99:77:e0:9f:8c:c4:41:7f:e7:0b:07:6a:3e:
         fd:95:fe:38:78:56:7c:30:f2:ce:bd:74:2f:56:0b:21:e7:b5:
         92:46:92:96:5e:15:52:bc:b2:6f:fc:f0:cb:ad:71:90:fe:6a:
         ec:5c:87:23:00:34:ce:e9:cf:bd:93:14:95:2e:76:f5:a8:4d:
         57:fd:7a:8f:f4:25:7e:bd:53:66:81:ab:27:3e:4d:fb:52:96:
         a1:31:4d:bb:62:f2:95:7e:61:e2:69:44:e6:00:5d:8b:df:05:
         51:c4:d4:f1:0e:8a:33:2c:32:4f:fe:1d:5e:25:c5:94:73:29:
         c4:10:82:89:ed:34:ea:a5:82:ba:87:c0:65:73:fe:63:27:b6:
         5f:04:b0:2d:cd:26:9d:21:b7:9e:b0:f5:9c:6a:cd:f2:5f:65:
         f8:24:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:40:28 2024 by rpki-client on console-ams.rpki-client.org