Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
File:                     5C1E69E043E011ED96455A4BC4F9AE02.roa (raw, json)
Hash identifier:          sbleGqo/DdYIp5Ax7ayTihZizo/GfHslCHOhMT0l4Ys=
Subject key identifier:   F9:C6:F3:1C:B8:F0:3F:89:83:8F:E2:BB:19:65:B1:27:DC:A0:E8:5D
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       0668
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
Signing time:             Tue 28 Nov 2023 23:11:08 +0000
ROA not before:           Tue 28 Nov 2023 23:11:08 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141234
IP address blocks:        103.156.244.0/24 maxlen: 24
                          103.156.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Nov 28 23:11:08 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6566738b-d127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a0:19:50:1c:59:6f:d1:8d:84:89:eb:8e:7f:
                    50:cf:10:dd:50:a3:7f:d5:0e:e7:5d:21:c0:b1:08:
                    04:b7:44:0d:87:18:c6:f0:40:88:96:22:c3:83:c1:
                    a5:50:61:ac:8d:a2:c8:6b:f6:36:be:64:d2:22:c0:
                    c8:6a:73:e6:02:80:b2:83:9f:54:b0:f3:c5:1f:e3:
                    1d:c3:da:65:06:ee:a6:61:dd:2b:74:12:87:dc:a7:
                    75:da:2b:b6:9e:67:80:c5:da:65:1f:12:4b:ea:d2:
                    ab:62:81:38:30:b9:5c:e6:d2:06:ea:58:38:68:f1:
                    31:16:ae:d0:a4:16:cb:c9:b6:b3:b3:ae:ea:94:a3:
                    79:cb:4d:9d:77:b2:f6:8d:74:28:e8:35:4c:fb:dd:
                    79:7b:41:b8:be:a3:72:ee:26:3d:f5:8c:cf:54:88:
                    8f:fa:71:1d:37:41:8d:69:a8:d3:6c:cb:79:ad:2a:
                    20:db:b5:c2:3b:b8:77:38:7d:8e:bf:30:d3:7f:64:
                    df:3b:49:44:79:c7:31:9f:ef:a7:4b:25:88:97:c9:
                    87:74:56:9e:9e:cc:ea:d2:2a:73:a3:e7:90:69:7f:
                    3e:ad:7d:1d:15:95:7b:de:d1:58:08:c0:9b:b3:9a:
                    0a:37:91:50:3b:bb:34:51:59:30:f0:f8:df:f6:97:
                    a2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:F3:1C:B8:F0:3F:89:83:8F:E2:BB:19:65:B1:27:DC:A0:E8:5D
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/5C1E69E043E011ED96455A4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:4c:cb:42:96:c3:8f:d9:65:f6:f9:70:5b:bc:92:70:4c:57:
         b2:9d:a3:bf:da:67:65:f8:73:68:76:6b:c1:7d:e0:5d:37:05:
         39:f2:63:07:c6:b8:5d:aa:f3:77:72:14:aa:d1:2f:41:0a:cc:
         3f:86:33:6b:96:28:fb:fa:b5:a0:91:e4:23:c8:50:48:01:f8:
         cc:8c:fb:25:93:d8:ed:37:45:8d:e4:20:98:bf:18:64:6c:58:
         aa:f0:56:53:da:b9:5f:42:ed:33:6b:6e:4c:4f:78:53:58:67:
         8f:0b:e1:d4:cb:0c:2b:6f:c3:15:b1:57:c8:5f:c4:f7:fb:56:
         3e:01:17:c9:12:19:4f:83:a6:b2:b9:e9:e6:8e:b5:bf:ed:26:
         93:fd:f7:92:0d:de:2b:ed:42:92:a8:26:e1:8d:ae:69:0f:12:
         6d:0a:fe:aa:7d:e3:7d:65:ec:0e:5e:f2:c6:43:29:c0:30:c5:
         da:1a:5d:28:8d:c2:19:a0:24:53:f1:5b:ad:3b:ef:aa:4e:c6:
         10:04:77:3c:1d:b7:ab:29:ab:75:d5:93:81:4d:7f:0c:5e:d9:
         53:8b:17:2c:76:bd:74:72:c3:51:df:80:3c:45:3c:c9:2a:3c:
         c7:4b:b0:5c:41:12:ca:0b:3e:3e:9b:2e:a8:16:95:d2:7c:9f:
         70:b3:45:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org