Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
File:                     C00CB30A87A711EA94E5CF22C4F9AE02.roa (raw, json)
Hash identifier:          aB/oE2OnnyN0W6HaDv8npp8QZbqOPeG0ULRgF9RjBlg=
Subject key identifier:   D3:76:B8:5A:77:93:3D:D6:A7:B2:AF:8A:C0:3B:44:D8:64:08:38:9D
Certificate issuer:       /CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
Certificate serial:       180C
Authority key identifier: EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
Signing time:             Fri 12 Jul 2024 17:24:28 +0000
ROA not before:           Fri 12 Jul 2024 17:24:28 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136794
IP address blocks:        103.96.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl
                          rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6156 (0x180c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E504/serialNumber=EB0EBB6651BDD00627396742FF1A0B4EA0FDE2E5
        Validity
            Not Before: Jul 12 17:24:28 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669166cb-1445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:8c:58:7f:6c:ac:8d:b9:3c:5a:ee:15:00:
                    ca:dd:ef:e1:7f:fb:63:36:f1:83:92:ef:51:cd:15:
                    59:26:5c:93:44:1c:4f:c6:14:9f:03:ee:d0:d8:da:
                    e3:61:cf:04:c3:dd:4b:8e:6b:da:76:0a:c4:83:68:
                    e3:50:27:6d:55:e1:47:9d:02:8e:d4:de:b8:60:0c:
                    e3:0d:2d:e2:13:fa:c5:79:13:e5:52:a1:9e:a0:e5:
                    bc:7f:aa:3e:19:47:f4:4f:3b:9d:02:85:d7:e0:7a:
                    67:af:04:ba:cd:cc:9a:36:3e:ee:f0:41:7f:55:54:
                    90:01:b9:52:b0:f9:0c:de:50:4a:33:ac:64:63:51:
                    1d:1d:47:92:f1:5d:22:0d:d0:fc:f1:21:5c:ae:6d:
                    33:59:13:26:dc:e0:64:ec:5f:a4:22:d9:d4:79:83:
                    c1:9f:c0:55:66:81:f0:92:cc:aa:be:f0:c5:92:3c:
                    73:65:80:4a:76:c7:60:f4:e4:9d:28:0a:22:ea:fe:
                    fa:cb:a2:b4:d5:a0:f8:64:49:04:85:4d:a8:e1:64:
                    0b:13:9b:d1:bd:64:b1:d4:0d:3c:94:9b:32:df:0e:
                    87:57:69:99:43:27:76:f4:c8:e9:0d:bd:c1:a4:21:
                    73:09:d2:31:37:e3:33:03:bd:fa:29:80:51:49:40:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:76:B8:5A:77:93:3D:D6:A7:B2:AF:8A:C0:3B:44:D8:64:08:38:9D
            X509v3 Authority Key Identifier:
                keyid:EB:0E:BB:66:51:BD:D0:06:27:39:67:42:FF:1A:0B:4E:A0:FD:E2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/6w67ZlG90AYnOWdC_xoLTqD94uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6w67ZlG90AYnOWdC_xoLTqD94uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E504/A08A2C76983D11E7A37FD478C4F9AE02/C00CB30A87A711EA94E5CF22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:07:cd:56:32:a7:4f:96:72:c4:5d:f7:c0:05:b9:07:14:
         8e:73:11:92:a1:4b:a9:95:21:70:40:2e:c7:4f:c5:27:38:3b:
         83:0b:94:13:55:4a:98:81:0b:0f:ae:e4:49:a4:40:af:7c:bf:
         c8:5c:3c:b9:c1:2d:38:d0:c5:f4:cf:b3:55:85:43:8f:4c:36:
         3d:1d:29:ab:59:45:8c:f6:be:7d:df:98:09:cb:7b:e9:12:b8:
         fa:64:fb:51:6f:fa:a7:c7:08:79:7d:7c:91:6a:40:eb:68:af:
         ad:73:b5:4b:3b:60:a3:d9:b1:90:a5:e2:6e:55:c7:7b:8f:c2:
         a6:c9:97:0b:a5:13:81:ae:83:8d:7b:23:30:24:a3:93:29:d9:
         b4:78:5b:f3:d0:e5:84:63:17:38:90:ff:f6:9c:b4:41:a6:75:
         7b:d5:a7:e6:6c:f2:40:07:10:5a:27:53:f3:29:a9:95:8a:df:
         1d:b1:5f:0e:51:d1:52:46:07:0c:7f:d6:ae:de:97:54:aa:47:
         30:9e:0d:3f:02:97:9d:fa:85:38:2b:3f:9e:85:e6:a8:69:45:
         b0:53:53:df:f9:4c:55:73:d5:71:5d:fe:9b:d9:8a:9f:da:72:
         5a:cd:c2:30:d4:72:54:cf:5b:b6:cc:cc:13:e3:f6:5b:bc:9b:
         34:2e:8c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org