Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
File:                     01553E10396311EAB24C5A5FC4F9AE02.roa (raw, json)
Hash identifier:          rs0VbwQOx7elbsUZDFIThAHCStbl8j3g8d0JAoWIucc=
Subject key identifier:   0B:A4:6B:88:A2:D6:BC:E5:21:08:60:14:FE:30:25:22:77:29:86:9D
Certificate issuer:       /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
Certificate serial:       0A73
Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
Signing time:             Tue 16 Apr 2024 20:29:25 +0000
ROA not before:           Tue 16 Apr 2024 20:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     55497
IP address blocks:        103.4.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl
                          rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 20:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675 (0xa73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC
        Validity
            Not Before: Apr 16 20:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661edfa5-054a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:a3:ff:29:b2:d0:dd:5d:f3:d9:9c:46:e6:
                    7c:d1:d0:99:3d:a5:20:92:39:89:f8:ca:40:8c:a1:
                    b2:a9:97:8e:f9:5b:2e:88:58:68:e1:68:3b:df:31:
                    89:62:e1:4a:01:f6:c4:34:97:19:d3:f3:63:1f:6b:
                    13:8f:bb:dd:46:ef:80:53:24:6f:d0:19:1f:70:05:
                    87:17:11:dd:37:44:8d:b1:8d:1c:18:3a:f5:48:7a:
                    96:13:b3:c0:9a:1b:f2:32:3d:f7:81:90:b8:a5:f7:
                    fb:f1:1c:7e:b9:e5:d2:39:40:50:b0:69:5c:4f:8c:
                    2e:ef:96:93:93:51:4f:7f:7d:b7:69:51:a4:75:ef:
                    d6:ab:b9:80:48:0a:55:99:88:9e:bd:12:e2:9f:86:
                    c5:8c:f2:ff:b6:9e:69:5f:c3:bb:89:c0:26:f2:04:
                    df:c3:f3:7a:33:db:73:18:4a:5d:5b:49:95:73:66:
                    90:2b:7f:0d:7c:5e:4d:a0:46:d7:2c:2b:43:52:56:
                    87:ab:29:d2:2c:5b:73:d9:4c:ba:37:27:27:0f:42:
                    ba:9e:a0:84:25:f1:86:38:7a:01:e7:f2:65:6a:e8:
                    b7:33:2b:ae:b9:1b:fb:63:0f:ee:55:c8:3d:75:20:
                    09:ea:40:d0:1f:c4:d6:fe:84:74:0c:d6:a1:8b:65:
                    ef:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:6B:88:A2:D6:BC:E5:21:08:60:14:FE:30:25:22:77:29:86:9D
            X509v3 Authority Key Identifier:
                keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/01553E10396311EAB24C5A5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:f7:8a:90:3b:b7:cb:59:44:09:33:03:80:a9:c8:a4:8d:
         ab:6b:fb:d0:6c:ce:86:c0:45:cc:a0:d7:c3:7f:e3:c9:9e:0a:
         e2:ba:3b:2a:f6:07:7c:1b:62:bb:10:f3:6e:68:9c:4a:7c:ed:
         b9:e8:a1:72:7b:d9:05:91:87:11:f1:25:10:34:54:67:71:ef:
         d6:88:bd:18:3d:35:29:f8:97:34:7e:d2:43:59:70:d0:85:f7:
         d5:26:7e:7f:30:12:a6:00:bf:06:27:ae:a9:b7:e4:b0:b4:4e:
         59:79:c6:7d:ea:9b:17:a0:20:d6:e8:d1:ca:28:86:81:7f:e7:
         f1:98:96:ee:1f:3f:4e:c9:62:84:fc:70:31:e7:f5:05:de:8f:
         7a:ed:23:36:91:db:be:49:22:ad:be:14:80:61:1c:de:45:a8:
         d3:4f:d9:5d:09:15:5d:f7:7c:55:32:f8:b0:80:37:ad:a0:2d:
         7d:a6:0c:5d:fe:f9:91:c3:06:c9:9d:0d:89:da:9c:76:eb:bf:
         2f:12:70:ca:5b:38:41:26:72:48:e6:4d:88:41:f5:29:00:9d:
         76:d6:ca:c1:4b:5e:f0:74:de:4e:e5:f9:1a:12:bf:2b:5a:94:
         c6:43:83:73:61:a8:7f:45:36:6f:bc:08:37:a1:4f:ae:e6:a1:
         51:0c:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 22:38:26 2024 by rpki-client on console-fra.rpki-client.org