Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E0C56878D8CF11ECB773DB2DC4F9AE02.roa
File:                     E0C56878D8CF11ECB773DB2DC4F9AE02.roa (raw, json)
Hash identifier:          bs/wOFEhPz0vJDAp9/x0coSyngJW9Z52QX5k4MGVvvI=
Subject key identifier:   5C:BF:E6:67:65:D2:5B:88:4C:AE:39:05:B9:50:9A:C1:E8:5A:F6:8D
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       280E
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E0C56878D8CF11ECB773DB2DC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:47 +0000
ROA not before:           Thu 28 Dec 2023 16:02:47 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133791
IP address blocks:        49.229.18.0/24 maxlen: 24
                          2405:9800:c929::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10254 (0x280e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:47 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c27-de83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:1b:2b:37:9f:8e:7d:7b:dd:b2:2f:01:cc:
                    ea:dc:f1:79:d1:53:3a:ca:eb:30:86:cc:ef:1d:2a:
                    f4:1c:86:1b:c6:30:09:bc:30:5e:bb:18:3f:18:cc:
                    62:3c:d9:fd:02:f7:1a:59:38:b1:bd:d4:90:fc:03:
                    66:1d:b6:31:e4:09:f6:09:73:18:22:c1:60:47:c5:
                    85:bd:ec:70:c9:15:a8:91:55:6a:9d:3d:70:51:32:
                    a0:2d:83:f2:b2:65:22:ae:67:3c:f6:8a:44:8f:93:
                    b5:48:2e:95:15:dc:87:c2:15:e3:21:57:40:47:69:
                    2b:a7:2c:b2:61:9b:40:75:1b:97:71:68:6e:cf:cd:
                    72:00:27:1a:dd:48:05:03:f4:d3:ae:8b:a8:00:24:
                    d4:78:60:2d:1c:e5:2c:53:e9:b7:be:71:90:be:2c:
                    52:3e:2e:6e:1c:78:6c:e4:ca:98:0d:26:ed:ab:81:
                    7d:c2:1a:60:4d:a1:07:22:eb:90:6a:c4:38:54:09:
                    32:4b:20:1b:41:20:b0:7e:85:9c:13:9c:db:71:5d:
                    ca:d6:f6:83:01:75:ae:58:f8:25:5a:f9:f9:94:68:
                    cb:e1:72:f3:0c:93:6e:9a:99:53:9d:32:80:70:ae:
                    bc:32:06:28:6b:51:14:16:63:75:84:3d:68:35:80:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BF:E6:67:65:D2:5B:88:4C:AE:39:05:B9:50:9A:C1:E8:5A:F6:8D
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E0C56878D8CF11ECB773DB2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.18.0/24
                IPv6:
                  2405:9800:c929::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:9c:f2:01:78:9f:16:eb:25:3d:b4:a2:8a:04:70:1e:a6:
         10:e9:f1:74:85:98:21:f9:af:1e:12:7f:4a:a5:08:fc:48:75:
         23:71:8c:36:f4:d4:30:ac:3f:a6:39:d1:3b:fa:f6:7e:a4:fd:
         e2:2b:bb:7d:a4:74:8a:04:c1:89:54:84:d7:2e:90:61:64:6c:
         74:86:c8:90:20:5f:cb:f8:71:b8:43:d6:67:fe:74:12:e9:92:
         5f:db:55:b8:50:28:53:87:a8:c5:a3:68:c8:00:d8:89:75:91:
         99:a1:57:dc:5b:40:e4:ee:93:ae:49:86:aa:1d:00:6a:12:c7:
         ae:7b:94:a5:b4:ea:19:27:a9:cc:a3:5c:d3:4d:6d:71:c6:44:
         a0:e7:54:6a:7e:f3:a1:3b:88:67:b9:1a:59:06:d8:71:82:db:
         28:53:e3:5d:22:29:86:25:14:5d:ad:ff:4d:15:70:04:66:4b:
         59:54:0d:39:39:72:34:cd:1e:d2:e6:e6:2c:3d:f7:74:6c:a5:
         a1:3f:8f:dc:d0:23:c8:e1:42:20:e3:d1:b8:c7:77:ed:4a:b1:
         c8:85:f0:83:8b:af:12:7e:93:13:29:60:1c:46:16:9d:ae:d3:
         d8:3b:06:fc:28:f4:48:80:83:29:50:f0:1d:df:70:90:56:73:
         1f:cf:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:44:22 2024 by rpki-client on console-fra.rpki-client.org