Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/FC4EA8D8918511EDB3CBB378C4F9AE02.roa
File:                     FC4EA8D8918511EDB3CBB378C4F9AE02.roa (raw, json)
Hash identifier:          yzf22K7EnSlmVHqoQcRGMzXUw4PfoD+04UKawnxyLI8=
Subject key identifier:   8B:EB:B2:2D:5F:33:4F:AD:34:A9:19:BC:D2:75:06:78:8B:86:CE:07
Certificate issuer:       /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial:       06A0
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/FC4EA8D8918511EDB3CBB378C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 22:50:51 +0000
ROA not before:           Tue 31 Oct 2023 22:50:51 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134450
IP address blocks:        103.156.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
                          rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 22:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
        Validity
            Not Before: Oct 31 22:50:51 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654184ca-ae49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:00:d1:74:2e:44:b5:d7:6a:31:7a:75:4d:
                    52:61:f6:cc:ca:03:23:75:a9:19:39:ac:0d:76:e3:
                    67:32:9d:fd:e0:82:b0:6a:cc:da:1b:89:ee:82:99:
                    c8:b7:29:f6:5c:be:40:74:ce:80:16:a7:ae:aa:af:
                    cf:e2:66:03:cf:59:e7:e5:2c:30:6f:b1:ec:5a:b5:
                    4c:31:85:6b:d0:01:20:80:80:c8:3c:78:76:b9:87:
                    c5:71:a1:f1:46:a5:85:05:84:43:9d:a3:52:d4:26:
                    42:de:86:db:59:99:be:85:1f:df:6d:80:95:c5:a8:
                    5d:9e:84:8e:c3:6f:93:8f:05:07:fc:db:bd:55:86:
                    55:0b:76:19:04:cb:ee:4d:04:ce:f8:33:ee:00:a3:
                    52:41:18:c3:62:83:05:c1:1b:b9:3f:29:6f:fd:f5:
                    6d:00:b0:80:53:85:dd:88:44:aa:37:24:5f:86:ae:
                    df:97:b0:ec:8c:fb:98:5a:d9:61:77:f1:76:41:c9:
                    b2:68:72:2b:d3:75:7f:37:42:31:92:83:41:40:43:
                    c0:b5:1f:3d:22:b0:cd:fe:03:62:36:5c:73:46:6b:
                    89:f5:76:2a:38:0b:9b:7f:0e:a8:fb:b6:2b:0b:e5:
                    b3:9f:f2:48:1f:cd:aa:01:33:8a:30:00:a3:a3:0c:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:B2:2D:5F:33:4F:AD:34:A9:19:BC:D2:75:06:78:8B:86:CE:07
            X509v3 Authority Key Identifier:
                keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/FC4EA8D8918511EDB3CBB378C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:8f:a5:bb:29:8a:55:b6:79:c9:48:ac:26:a1:1f:6e:b1:
         1d:48:4a:e8:a5:34:17:7f:7c:4f:84:b0:b1:8d:d5:ff:1c:44:
         8f:c5:68:8d:97:d1:da:8b:08:fb:1b:0c:36:d2:0a:09:0f:3a:
         a0:a1:9d:19:18:95:ff:00:a6:f1:d4:f6:0b:36:84:03:16:9c:
         e7:2d:a6:72:8f:b0:60:19:a5:6a:2e:02:a9:21:be:03:d2:15:
         8c:e2:df:69:92:ad:84:65:be:1d:cf:1b:49:4c:68:4b:79:b6:
         42:a8:4f:17:df:76:d9:30:27:cc:75:35:ba:c8:61:b2:94:17:
         2b:ff:0a:2b:2e:a6:6b:56:29:ae:c4:1b:cb:73:e8:4d:77:ad:
         26:d7:05:25:17:00:d8:9d:bd:75:fa:42:b2:4b:80:9d:1c:41:
         83:f0:ca:0f:dc:ad:e3:5d:4d:37:38:e0:18:d3:13:13:8b:3e:
         49:e0:e7:57:66:d9:8a:b2:cd:f5:04:8b:0b:de:7e:15:d0:b6:
         a5:6a:ae:3c:3a:81:96:15:f3:9c:1a:16:90:09:69:5b:cf:e1:
         9f:a5:b4:67:ee:f5:98:05:09:8e:7a:f5:05:40:9d:a2:9a:4f:
         d7:9f:87:cd:a6:a3:ea:36:43:ba:57:e9:44:54:97:89:d1:ba:
         4a:24:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:52:08 2024 by rpki-client on console-fra.rpki-client.org