Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa
File:                     EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (raw, json)
Hash identifier:          8Yc+WgLaaoreJ9eKvM0OeJLyMm+xPpLtaXaXyW6wTJ0=
Subject key identifier:   6F:9F:E6:E2:2F:49:BD:F6:AE:E2:27:DB:03:26:C0:8A:67:9C:55:2A
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       07A6
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa
Signing time:             Fri 14 Jul 2023 20:57:34 +0000
ROA not before:           Fri 14 Jul 2023 20:57:34 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     4049
IP address blocks:        103.151.48.0/24 maxlen: 24
                          2001:df3:a780::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: Jul 14 20:57:34 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b1b6be-7132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:56:dd:7a:1a:95:65:c2:4a:6e:b8:84:25:
                    cd:d9:5c:9e:59:af:c7:1e:fe:7f:3a:bc:ab:b4:66:
                    68:69:1b:34:f7:ee:43:4c:47:11:5c:d2:ba:39:51:
                    4c:8c:6d:60:36:df:ed:03:4a:58:2a:9c:7c:af:5b:
                    ff:6c:fd:16:a6:3e:24:fd:e2:99:1d:bd:13:9f:1c:
                    e4:44:b2:d3:d6:43:a9:91:a8:26:04:a4:89:87:f3:
                    ab:e0:a4:25:79:c6:d7:f8:52:23:32:41:09:46:3e:
                    a7:a1:b4:69:bd:b7:6d:83:21:53:ee:96:16:4d:ac:
                    61:00:61:f2:71:da:20:11:c8:61:8d:30:c5:05:c4:
                    ca:22:93:da:f4:5b:37:f5:77:eb:a7:28:d0:30:c5:
                    d2:c1:e4:5e:89:0f:b3:f3:71:21:d7:8c:d4:56:2c:
                    0b:ec:90:4f:45:7d:fe:ef:00:e0:e0:f0:06:cc:1d:
                    85:27:e2:7f:73:1d:08:2a:4b:a0:dc:cb:5b:67:e0:
                    37:67:15:e4:8a:21:f1:61:b7:2f:53:b4:3d:35:22:
                    ff:73:d6:06:63:ad:d7:d7:d1:87:00:01:df:8d:a3:
                    8a:61:df:41:62:ce:83:f8:39:ac:07:6f:a3:a9:a7:
                    82:ee:9e:f8:30:94:d8:34:5f:9c:2b:57:80:f5:88:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:E6:E2:2F:49:BD:F6:AE:E2:27:DB:03:26:C0:8A:67:9C:55:2A
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/EEC7D1CAA6C911EA8079FD17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.48.0/24
                IPv6:
                  2001:df3:a780::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:89:62:22:21:5b:47:4e:a3:6e:37:da:bc:fe:25:7e:3a:
         97:4b:c4:08:67:1b:69:1b:c1:98:9c:19:41:05:e4:10:61:e6:
         b9:bb:51:c4:a7:98:6c:50:83:79:96:19:7f:b0:21:2f:74:47:
         ab:43:10:cc:1f:8a:68:3c:cd:c3:c8:26:3e:e6:2e:54:bc:9d:
         f5:01:92:56:24:b7:88:1c:85:b8:f6:fa:70:29:03:ba:3c:b5:
         58:9e:a8:f3:5e:0c:87:1b:77:cd:ee:14:0f:6b:0b:38:29:37:
         be:85:0f:16:22:71:c1:42:37:f1:74:b4:8f:77:b1:74:a6:e7:
         94:ff:d9:b1:d6:dd:7d:24:33:d7:a8:97:b6:34:e9:e3:f8:21:
         80:05:88:8e:6e:b9:4d:fe:60:9d:6c:02:66:8c:33:e9:14:d3:
         5f:72:a6:ba:5f:a2:a2:8d:27:df:96:ea:9d:99:26:97:51:7f:
         4b:bf:15:91:2b:b7:f9:27:b5:f2:49:ab:06:f1:a9:57:0f:9d:
         f9:4d:2b:dd:38:92:e6:58:4f:55:3e:45:ac:dc:e2:ea:e7:4e:
         96:8a:39:b6:cd:e4:4b:b9:1f:5d:25:4b:32:6d:51:75:71:c3:
         30:a9:e2:91:62:5d:ce:a0:43:4e:8f:17:ff:ab:55:7d:45:8c:
         7a:41:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:49 2024 by rpki-client on console-ams.rpki-client.org