Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
File:                     518165E2081B11ED8C0F9244C4F9AE02.roa (raw, json)
Hash identifier:          +9bgfNQpZ62CZzQ6UN1cKANqETpCiYo1TX0bBXc27l4=
Subject key identifier:   F4:3C:8E:91:18:92:A4:E0:79:F4:EF:9B:BC:E9:61:31:55:CC:2D:23
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8CEA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:13:23 +0000
ROA not before:           Thu 30 May 2024 16:13:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     140192
IP address blocks:        103.156.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36074 (0x8cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 30 16:13:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a5a2-cead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:70:13:92:96:6d:5d:5b:f3:88:a6:29:ad:
                    f7:61:48:c4:ad:5a:53:d2:41:cb:cf:41:c9:23:f6:
                    c5:05:1b:78:59:61:d8:a0:a0:ed:ff:7f:cb:14:01:
                    d0:1a:d0:b7:0c:2c:5b:f4:a0:3d:cc:f4:7e:1f:5d:
                    50:c2:17:32:ac:b2:44:ae:0a:98:ee:fe:53:1b:0c:
                    85:ba:ef:17:31:1a:e4:d6:e1:43:5e:62:66:ec:c8:
                    c0:e1:6a:a2:05:a5:1b:af:bd:d7:57:b7:b8:59:32:
                    e0:7f:97:1c:a6:c3:07:19:ec:da:27:8b:30:28:66:
                    8a:2f:74:31:46:49:c9:39:cd:15:89:63:ee:90:31:
                    58:4f:fa:2b:c6:85:ce:4d:79:64:a3:76:62:c2:9b:
                    8b:e0:7b:88:35:13:b9:16:d1:fc:94:5c:f4:5d:73:
                    4f:f3:44:5d:7e:51:98:13:6b:8e:ea:55:a3:5a:1b:
                    4f:dc:84:c6:e0:be:85:cb:78:62:86:e2:9f:d9:41:
                    31:b4:c3:87:c6:a9:a1:bf:bf:60:63:ff:29:0c:ba:
                    a5:f5:4a:69:8b:75:ae:58:3e:c4:d1:90:d2:b9:01:
                    b3:c1:9f:e9:d1:9b:79:52:56:86:21:be:02:5c:3a:
                    cb:a2:29:37:52:58:2e:a1:bf:94:e1:1b:6b:7a:9f:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3C:8E:91:18:92:A4:E0:79:F4:EF:9B:BC:E9:61:31:55:CC:2D:23
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/518165E2081B11ED8C0F9244C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:81:b2:dd:7a:79:2f:e5:d0:5c:2d:b2:70:29:6b:fd:5e:1d:
         b3:01:5f:4f:c1:20:d1:6f:a4:6d:73:9a:0c:33:30:ed:32:9f:
         a0:7b:b2:a9:02:73:9d:79:93:d3:81:6a:f7:e1:4c:38:2b:b8:
         47:61:83:84:bf:be:3c:69:43:2a:02:ca:25:7c:73:a4:de:02:
         82:9c:4b:6c:9b:fd:14:bb:ca:19:61:67:29:91:95:20:77:32:
         86:63:78:29:75:a2:5a:38:a5:e0:44:c5:45:50:2f:cd:05:94:
         86:02:6b:0f:0e:a6:a6:ef:e8:37:ce:84:9d:c9:58:30:ce:02:
         db:e3:9e:32:56:f6:12:d9:30:ff:44:bb:c9:68:1b:cd:b3:3d:
         83:b7:e6:c4:c6:22:12:af:9c:bf:51:b1:42:02:20:bc:04:84:
         47:81:c5:82:1f:ee:0a:3b:f2:f8:b8:37:ba:b1:ad:ca:53:58:
         81:8e:20:86:36:95:77:33:03:03:e2:36:c4:44:91:20:d3:5f:
         ee:1c:18:31:a7:b6:05:28:11:92:ca:74:78:5b:8c:73:30:25:
         33:1d:50:f4:96:0a:10:e8:07:2e:ee:a0:61:69:06:44:d7:34:
         3d:73:e5:07:c2:38:97:d5:e6:33:ef:2b:84:fe:c7:52:3e:74:
         9e:7d:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:37 2024 by rpki-client on console-fra.rpki-client.org