Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa
File:                     807EEE68281011ED9C81C50DC4F9AE02.roa (raw, json)
Hash identifier:          gbqTZqsJRhsghBBqQMo7mTiCeJA+l20Ke4Ubm2eHRvw=
Subject key identifier:   7C:D5:A0:B1:EB:FD:CC:E4:6F:08:A1:8C:7E:4E:26:2C:64:72:15:BD
Certificate issuer:       /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial:       01DB
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa
Signing time:             Sat 23 Mar 2024 04:06:24 +0000
ROA not before:           Sat 23 Mar 2024 04:06:24 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9716
IP address blocks:        203.18.236.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
                          rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
        Validity
            Not Before: Mar 23 04:06:24 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65fe5540-5d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:27:af:c8:c9:b0:7f:50:65:08:e4:f8:bd:
                    57:71:17:38:76:36:86:23:43:01:b9:5f:a1:06:d2:
                    57:36:a4:33:fd:1d:a1:45:f9:b7:1a:58:90:7b:95:
                    52:36:5f:5f:0c:bd:0d:01:54:ef:f7:77:00:df:91:
                    ce:5e:25:03:86:1f:73:3b:85:43:f5:35:75:9d:41:
                    8d:c1:71:c3:a4:54:7a:1f:2a:14:a5:de:f9:9e:35:
                    3e:a7:85:d5:56:50:a8:d7:83:14:14:9e:8c:43:0a:
                    d6:a4:9e:e0:11:4e:83:43:6f:05:9e:90:dc:91:10:
                    2e:53:3a:d7:d0:66:f6:e2:e7:1f:c5:86:a1:e1:cb:
                    a6:48:c1:2c:53:fa:7d:e1:60:0f:f3:27:b8:eb:23:
                    9a:0d:97:00:8a:f2:bc:9e:91:40:d3:a8:1d:0a:7e:
                    d7:cf:c9:5b:56:86:94:72:ed:53:65:ef:e9:a3:0e:
                    b5:ed:5f:43:13:cc:98:0f:64:b9:8f:d0:45:b9:8f:
                    fe:5d:ab:ed:e4:9b:9f:ca:f3:28:0d:90:30:b6:58:
                    12:0d:3f:a9:4b:37:62:bb:14:5f:1a:80:44:c8:7e:
                    de:5c:2a:89:f2:40:4a:a2:5c:c4:84:64:df:a2:51:
                    8d:86:3f:ac:4d:1d:a8:ac:0b:5a:f2:51:1f:68:95:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:A0:B1:EB:FD:CC:E4:6F:08:A1:8C:7E:4E:26:2C:64:72:15:BD
            X509v3 Authority Key Identifier:
                keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:b6:50:2b:d4:9c:94:e4:75:a8:61:47:91:bc:40:d0:62:
         84:d7:0b:25:0c:9d:fd:ee:85:1d:39:fe:fc:db:c7:00:a7:2f:
         7c:d9:ce:69:95:fd:27:82:99:00:ab:0b:a5:49:5e:11:5d:a8:
         12:4e:29:82:85:63:e1:b8:7a:bf:a8:c3:83:de:df:85:6d:df:
         7a:52:8a:a5:31:29:fb:08:cc:c4:cc:de:97:9d:31:9e:aa:3e:
         a8:e2:f2:12:84:3c:0b:af:8c:21:50:d6:b5:e0:7a:df:f5:8b:
         9c:e4:2d:9b:b4:41:f8:d2:a1:de:2b:36:a7:11:05:26:2f:9a:
         51:fe:13:fb:c2:61:0a:fd:eb:9a:a6:8a:6f:92:05:5a:9b:72:
         6b:98:12:4c:ad:5f:45:c2:92:03:9e:9d:83:4b:f4:61:3a:64:
         a9:65:b0:63:97:40:98:e6:a8:e8:55:e1:38:0d:31:63:3e:c3:
         39:b0:25:2b:1e:81:12:16:ad:69:51:c4:7c:f1:63:04:2d:c7:
         89:27:2b:f3:55:e0:5d:67:00:7e:9e:b2:f4:44:3b:46:5b:d2:
         7e:07:e2:85:48:8d:d7:53:46:06:b4:e5:cb:e0:dd:f1:6d:3d:
         0f:e7:42:b5:e0:73:87:af:01:32:8e:86:1b:39:f9:bb:d4:56:
         95:93:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:56:55 2024 by rpki-client on console-fra.rpki-client.org