Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
File:                     36FC37FABF3111EE886C313CC4F9AE02.roa (raw, json)
Hash identifier:          Oi/wjO5pl87EaRKCP4x5ACCYkYXxBJycl7Ltw0ZviNE=
Subject key identifier:   8D:50:FB:0A:BF:A7:71:B1:91:9C:D5:F5:5D:9B:BB:B9:1F:DE:D0:D3
Certificate issuer:       /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial:       02
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
Signing time:             Tue 30 Jan 2024 05:34:19 +0000
ROA not before:           Tue 30 Jan 2024 05:34:19 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     152449
IP address blocks:        157.15.60.0/24 maxlen: 24
                          157.15.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
        Validity
            Not Before: Jan 30 05:34:19 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65b88a5b-b8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:93:60:6e:c9:e9:a5:d5:78:da:f6:6c:8b:
                    33:4e:34:91:0a:d2:9a:a5:d9:43:bb:fe:ca:6a:95:
                    54:9b:21:87:1f:e7:64:7c:3b:6c:ea:4e:e1:36:57:
                    77:4b:7a:ca:db:51:af:d9:4b:ab:31:33:ad:38:3e:
                    59:f4:fa:c0:3b:93:37:c0:0d:a5:22:3f:f5:78:57:
                    6c:db:96:ef:5b:c0:23:79:75:83:b5:91:af:3d:e5:
                    91:b5:10:91:e8:45:96:d0:8d:82:46:fa:b6:8c:fa:
                    54:05:28:b1:0a:79:25:55:0f:76:56:cf:4b:57:bc:
                    b7:b6:2e:4b:52:11:8e:0b:d1:8d:42:e4:59:28:8b:
                    07:14:de:d0:c5:8d:d5:dc:a5:0f:fc:29:09:23:12:
                    44:9d:f2:84:6d:d7:33:d2:7e:63:5d:a1:8a:fb:39:
                    fb:c1:3a:39:8c:73:1d:b7:91:3b:70:92:8a:05:a5:
                    d9:d8:84:2c:71:c2:82:a6:29:15:88:fc:d0:2d:77:
                    57:48:cb:72:2a:bf:8a:29:28:5f:f1:31:8d:c8:46:
                    ea:12:fb:7a:4e:38:df:5a:f2:d8:c5:65:9c:07:7d:
                    86:57:2f:7c:36:a5:50:6c:9f:2c:54:c8:df:20:36:
                    94:d3:c8:51:6a:7f:ff:e5:d0:b3:e5:25:7b:45:ee:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:FB:0A:BF:A7:71:B1:91:9C:D5:F5:5D:9B:BB:B9:1F:DE:D0:D3
            X509v3 Authority Key Identifier:
                keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:21:41:f8:52:33:a3:1b:47:56:52:5f:85:7c:fa:e6:1f:73:
         90:0d:2b:fc:e5:e7:48:63:d0:4e:60:6f:0a:f6:ee:ad:d3:9a:
         a6:ef:92:44:23:6b:58:0d:8d:91:c7:de:7d:6f:a1:d8:64:45:
         f9:2c:e0:cc:74:c6:c2:b1:9e:31:07:35:60:00:26:9c:b7:c2:
         81:06:48:bb:4c:c2:45:7d:b4:f7:73:cd:12:99:f5:45:74:47:
         ee:b4:11:d1:46:be:c8:87:a7:28:aa:f0:df:71:5b:77:7b:f2:
         53:1f:9c:2a:ec:ed:09:5d:a3:c7:19:f4:34:60:a4:0b:d0:2e:
         5e:6d:7a:85:8c:33:ec:24:5b:b3:7e:1b:1e:5b:d3:1a:bb:49:
         2c:4a:ea:a6:4a:f7:06:23:e0:78:99:65:b6:9e:c4:25:eb:a9:
         8d:fd:91:e5:63:a6:b7:d7:54:81:37:93:be:45:84:df:1b:75:
         54:49:1e:a6:7b:e2:5c:0a:70:af:13:0c:5d:86:be:7b:a9:2c:
         98:c8:13:73:b8:1a:8a:21:25:6c:3b:19:21:07:5d:23:05:47:
         8c:25:9e:19:35:a1:e6:7e:4d:48:f7:c4:ff:23:7d:f9:ef:f2:
         28:49:83:d0:11:06:23:f9:b0:a1:d5:36:8d:52:73:af:16:bf:
         fe:68:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org