Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/7355FB264B5711EEB497B483C4F9AE02.roa
File:                     7355FB264B5711EEB497B483C4F9AE02.roa (raw, json)
Hash identifier:          UOs65azh/J+jMFbCyW2WjCiYbiBhZY+08e14Q9+oVFo=
Subject key identifier:   72:BA:6D:D2:2F:FA:30:03:42:F2:0E:1A:BA:65:F8:24:DA:24:68:76
Certificate issuer:       /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial:       06C3
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/7355FB264B5711EEB497B483C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 21:59:09 +0000
ROA not before:           Tue 12 Sep 2023 21:59:09 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     140962
IP address blocks:        103.156.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
        Validity
            Not Before: Sep 12 21:59:09 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6500df2d-9a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:e8:82:9d:bd:47:dc:ac:99:08:e5:c9:3d:
                    76:01:88:2b:4c:f5:7f:63:da:c3:71:b9:32:30:a8:
                    ff:39:42:d9:48:1d:76:9b:68:0a:a8:51:66:e2:7e:
                    b2:5d:eb:02:b0:7d:93:94:8c:67:d5:95:e8:14:37:
                    c1:39:b4:ab:a1:93:20:b3:dd:02:68:58:55:02:27:
                    b2:93:67:96:e3:90:08:e7:5b:32:ee:65:52:f9:60:
                    8c:8d:33:d3:15:2b:62:fc:fd:31:a5:b6:7c:d5:d5:
                    a5:96:16:59:c3:b4:d4:ee:45:fb:54:b9:e1:0e:f5:
                    f0:3c:c3:91:6a:b7:57:19:8c:18:51:1f:bf:c3:77:
                    1f:e6:cf:76:6d:bf:72:1a:38:1c:69:fe:cd:ef:56:
                    18:d4:8e:b0:d3:53:9f:6c:3e:33:be:22:c9:86:35:
                    b1:6d:78:97:f5:06:a8:15:01:09:d3:c7:a7:3c:62:
                    f5:5e:2c:8b:b9:19:8d:47:83:8b:18:e7:dd:e9:c6:
                    cb:fa:bd:2b:be:40:86:21:82:0c:ce:a8:9b:4d:25:
                    8d:3c:3c:19:68:6b:cc:1c:65:e0:c8:8c:d9:16:0d:
                    9f:9b:b9:6b:08:7a:67:fa:56:6d:ab:af:14:c0:77:
                    be:74:4e:06:10:b0:a6:73:ea:29:87:1b:5d:65:d1:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:6D:D2:2F:FA:30:03:42:F2:0E:1A:BA:65:F8:24:DA:24:68:76
            X509v3 Authority Key Identifier:
                keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/7355FB264B5711EEB497B483C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         eb:8d:1d:29:d0:71:d8:89:49:4e:17:06:55:f1:4a:50:6b:f5:
         66:6e:fd:2c:79:db:74:4d:58:f9:f6:7c:46:48:a8:a3:94:ce:
         66:65:f2:7e:b8:2d:9e:dc:25:d6:36:4f:b0:9a:ca:64:f6:71:
         78:0d:fe:17:cd:2f:3d:9a:90:e8:1b:85:be:ad:48:15:5d:bf:
         6c:88:9f:82:e5:f3:f4:ac:a2:07:41:ea:10:91:ec:48:d9:2b:
         cf:c4:c5:1c:04:66:33:a3:1f:b2:d2:b1:84:1c:da:bb:3b:82:
         bd:80:38:ca:92:0a:7a:9e:c7:22:cd:2e:bb:b3:6e:65:ee:27:
         96:67:88:61:42:e7:cd:38:fe:a4:71:15:05:0e:a4:c7:11:b1:
         30:6f:4e:fd:78:38:f5:87:e0:4b:df:cf:ad:ae:63:2a:e1:11:
         43:02:8d:e8:d9:85:46:23:2e:e3:8d:4f:93:23:64:92:a3:2f:
         5f:19:6d:a1:1e:10:81:f4:b2:9e:d6:e0:14:0f:2c:30:c8:9a:
         20:b4:85:f0:b9:1c:86:85:2f:f7:a6:a1:1f:fa:8b:d1:15:78:
         0c:a9:1d:29:e9:82:42:c9:bf:13:54:93:3c:48:14:18:a5:26:
         00:3c:ed:ca:1e:d0:b5:7a:01:7e:9f:b9:25:83:d7:1c:35:fd:
         47:44:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:29 2024 by rpki-client on console-ams.rpki-client.org