Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
File:                     4967F6B8533511E8A678701BC4F9AE02.roa (raw, json)
Hash identifier:          B8MxOAOos5FiZwk93g4tG0xXGYTO5BhdnEixE6lkPAM=
Subject key identifier:   92:54:9F:AD:74:90:D3:27:04:FF:95:22:B1:26:8D:DC:F8:8C:0B:3A
Certificate issuer:       /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
Certificate serial:       13CC
Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
Signing time:             Fri 24 Nov 2023 17:24:59 +0000
ROA not before:           Fri 24 Nov 2023 17:24:59 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133787
IP address blocks:        203.0.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl
                          rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5068 (0x13cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A
        Validity
            Not Before: Nov 24 17:24:59 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6560dc6a-6e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:52:74:58:81:cd:23:32:86:d4:54:e1:76:
                    28:c4:9a:26:b7:f2:fc:f5:da:1f:84:9f:a4:75:16:
                    a1:26:9f:62:a4:0a:aa:dc:89:9b:8b:a0:1e:c7:80:
                    86:fa:7b:36:87:df:6e:e2:41:ef:7f:b2:81:7b:06:
                    82:35:0d:af:7e:5d:99:55:56:fa:20:f0:63:23:fb:
                    76:9d:16:a6:60:28:bc:c5:cb:cb:78:08:79:c6:c2:
                    e1:59:a6:df:ef:01:27:4f:29:a3:08:e0:69:1b:ba:
                    4d:60:99:ed:59:4d:99:73:20:26:b9:27:07:fe:eb:
                    24:2a:cb:d8:55:f1:37:81:d6:90:70:ce:ab:cf:cf:
                    10:88:02:4e:91:74:d6:9e:15:e4:34:f0:1f:32:bd:
                    20:df:ab:9e:36:3e:06:8d:17:3a:e0:36:a5:7e:a0:
                    8b:8b:c5:a4:a1:c8:08:99:da:75:bb:1c:d5:37:0b:
                    73:bd:23:1e:87:d8:4e:fa:8b:bb:94:5f:e3:9c:5e:
                    d1:9c:a9:8a:36:1b:ec:77:4c:60:f1:be:01:93:af:
                    d0:c0:94:ab:bf:59:9a:99:90:d1:0c:2e:e3:83:d5:
                    93:6d:77:74:17:9a:14:27:26:e6:d4:db:29:5d:f6:
                    36:74:5e:21:83:d6:8a:b7:ff:cb:8b:09:8b:78:0e:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:9F:AD:74:90:D3:27:04:FF:95:22:B1:26:8D:DC:F8:8C:0B:3A
            X509v3 Authority Key Identifier:
                keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:16:9b:33:0d:e4:0d:e3:09:5e:01:e3:bb:b2:93:4d:37:
         50:34:48:9a:5b:f2:a7:12:95:e9:e0:b1:a2:23:7a:9c:8a:19:
         9b:bc:bc:30:b4:38:7b:fa:4f:7e:3d:42:de:b4:96:3a:4b:f0:
         a3:bd:16:9d:a4:aa:70:11:85:f1:b1:c5:c7:f5:75:54:e4:18:
         3e:5b:14:ec:de:b3:3f:56:ef:e5:57:2d:78:6f:b5:81:2b:57:
         e3:09:82:77:f2:36:da:0c:fc:83:f9:d0:f7:d2:02:01:2f:9d:
         1b:2d:ea:60:1e:4f:04:7c:14:06:cf:b4:cd:ef:09:ae:2d:5c:
         79:06:3b:71:6e:de:30:a3:3f:29:49:9a:93:9e:34:cf:cf:6f:
         66:0b:77:bb:99:5c:c3:54:97:56:d4:57:a3:78:b5:69:50:53:
         93:bd:ef:c4:80:4b:c8:c3:e2:6e:19:d1:a8:70:d9:91:ee:54:
         97:53:f2:73:45:63:02:43:02:18:b2:8e:24:0f:5d:ff:61:17:
         04:0c:2b:32:87:7f:6d:1c:2b:1e:4f:ae:0f:1f:de:13:8d:11:
         ef:28:19:ef:b7:72:bb:8c:44:da:ce:e7:4d:5a:70:5c:60:c8:
         65:2d:bb:38:c0:81:9f:13:df:7a:76:56:a3:25:5e:0f:a5:90:
         ff:26:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org