Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/736816B806CB11EBB9A51287C4F9AE02.roa
File:                     736816B806CB11EBB9A51287C4F9AE02.roa (raw, json)
Hash identifier:          mnRywCOvlKSMzMEwT6a/uyPxhXI/A+zzNgPeDhshPxQ=
Subject key identifier:   C0:DE:2B:3E:90:F4:94:C6:7C:DD:08:93:E4:7C:24:E2:36:5B:48:5E
Certificate issuer:       /CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
Certificate serial:       02
Authority key identifier: 70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/736816B806CB11EBB9A51287C4F9AE02.roa
Signing time:             Mon 05 Oct 2020 05:27:25 +0000
ROA not before:           Mon 05 Oct 2020 05:27:25 +0000
ROA not after:            Sun 01 Dec 2030 00:00:00 +0000
asID:                     141195
IP address blocks:        103.156.52.0/23 maxlen: 24
                          2406:7dc0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl
                          rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E077/serialNumber=7086A1BB30311683AE6DA60DDF97CDF7337CB66F
        Validity
            Not Before: Oct  5 05:27:25 2020 GMT
            Not After : Dec  1 00:00:00 2030 GMT
        Subject: CN=5f7aaebd-a2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:db:d4:1b:ca:27:d5:e5:15:87:67:89:21:
                    6e:8c:7d:37:f1:62:03:0d:e0:22:b8:ed:22:88:80:
                    a1:76:02:10:82:04:d2:c9:6b:15:67:c9:99:34:a8:
                    aa:3f:8b:eb:5b:cd:54:ee:12:30:0b:06:72:d9:b7:
                    af:32:0e:d0:a8:1a:cd:95:c1:2a:69:91:eb:bc:fe:
                    da:9d:40:53:c0:c5:12:76:b5:0b:35:c5:e7:7b:e6:
                    8a:4c:02:c9:ab:2d:cb:d5:59:d9:70:77:56:c3:0d:
                    6c:0e:cb:f1:54:da:ec:18:0f:3d:f3:61:51:d2:9f:
                    bb:97:94:19:5d:b6:e7:26:83:f3:bf:9a:3b:88:f8:
                    bd:9d:cc:d7:7f:1e:6f:52:a7:d3:b3:84:2b:9b:9e:
                    6f:06:e9:6f:4f:8e:c1:05:c4:56:56:13:c7:b4:1e:
                    af:a3:74:be:fc:47:dd:c7:06:27:06:e1:59:e7:87:
                    73:0f:c3:4d:86:42:70:e1:e0:86:24:53:ae:3c:47:
                    d3:80:02:87:b0:bd:28:d1:24:ea:00:17:bf:78:fe:
                    45:e0:48:6a:d3:1a:1d:79:1b:5b:ff:3a:be:34:7e:
                    43:36:f7:45:50:9b:ec:42:51:91:62:8f:ee:da:5b:
                    79:a6:82:86:7c:b6:65:72:47:0e:de:1d:87:90:c5:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:2B:3E:90:F4:94:C6:7C:DD:08:93:E4:7C:24:E2:36:5B:48:5E
            X509v3 Authority Key Identifier:
                keyid:70:86:A1:BB:30:31:16:83:AE:6D:A6:0D:DF:97:CD:F7:33:7C:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/cIahuzAxFoOubaYN35fN9zN8tm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIahuzAxFoOubaYN35fN9zN8tm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E077/7876A0CC06C911EB97689484C4F9AE02/736816B806CB11EBB9A51287C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.52.0/23
                IPv6:
                  2406:7dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:a0:d3:9c:49:41:dc:7c:2a:e4:4a:2b:80:e3:94:e4:dd:37:
         3e:f0:e5:c6:75:2a:a9:3e:f3:76:7a:5f:d0:ab:26:fd:fb:26:
         13:97:32:1e:ba:32:fa:f1:d6:80:9c:84:62:9d:e5:0e:d6:fe:
         50:8c:b1:74:87:7d:76:33:b7:e1:fa:3a:60:8f:b9:6e:ab:dd:
         6d:c5:8c:72:a7:52:6e:ef:1f:50:ea:aa:a3:c0:a0:78:f2:8c:
         ef:de:44:6d:ab:41:be:0e:e7:20:4b:78:2f:e8:c7:cd:bb:ac:
         d5:61:58:2f:5b:ec:ca:bf:11:20:df:4b:f8:df:41:2d:86:6a:
         dd:8f:35:d5:cb:20:d3:c3:8a:da:86:ba:b8:6f:6f:f4:af:be:
         52:97:78:cf:fc:59:35:4e:41:53:2c:19:63:43:69:ff:18:c7:
         5d:fa:01:4b:f4:2a:0c:e5:81:cc:7e:d5:7c:67:7e:6e:e1:66:
         ab:3b:69:29:4a:50:92:98:9f:7d:30:f9:b9:1c:28:bc:c3:30:
         f9:47:18:28:50:4a:ce:0b:00:a7:f5:14:54:9c:fc:cc:60:9b:
         d7:bf:56:e1:2f:d5:23:5c:3e:15:29:f6:dc:86:45:56:96:80:
         2f:58:c9:0a:75:5b:40:6f:e4:80:3f:5d:87:7c:b7:71:6a:c8:
         fc:08:ec:1a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTA3NzExMC8GA1UEBRMoNzA4NkExQkIzMDMxMTY4M0FFNkRBNjBEREY5N0NERjcz
MzdDQjY2RjAeFw0yMDEwMDUwNTI3MjVaFw0zMDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTVmN2FhZWJkLWEyZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHfdvUG8on1eUVh2eJIW6MfTfxYgMN4CK47SKIgKF2AhCCBNLJaxVnyZk0qKo/
i+tbzVTuEjALBnLZt68yDtCoGs2VwSppkeu8/tqdQFPAxRJ2tQs1xed75opMAsmr
LcvVWdlwd1bDDWwOy/FU2uwYDz3zYVHSn7uXlBldtucmg/O/mjuI+L2dzNd/Hm9S
p9OzhCubnm8G6W9PjsEFxFZWE8e0Hq+jdL78R93HBicG4Vnnh3MPw02GQnDh4IYk
U648R9OAAoewvSjRJOoAF794/kXgSGrTGh15G1v/Or40fkM290VQm+xCUZFij+7a
W3mmgoZ8tmVyRw7eHYeQxVFDAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUwN4rPpD0
lMZ83QiT5Hwk4jZbSF4wHwYDVR0jBBgwFoAUcIahuzAxFoOubaYN35fN9zN8tm8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDc3Lzc4NzZBMENDMDZD
OTExRUI5NzY4OTQ4NEM0RjlBRTAyL2NJYWh1ekF4Rm9PdWJhWU4zNWZOOXpOOHRt
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY0lhaHV6QXhGb091YmFZTjM1Zk45ek44dG04LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTA3Ny83ODc2QTBDQzA2QzkxMUVCOTc2ODk0ODRDNEY5QUUwMi83MzY4MTZCODA2
Q0IxMUVCQjlBNTEyODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWecNDANBAIAAjAHAwUAJAZ9wDANBgkqhkiG9w0BAQsFAAOC
AQEAtaDTnElB3Hwq5EorgOOU5N03PvDlxnUqqT7zdnpf0Ksm/fsmE5cyHroy+vHW
gJyEYp3lDtb+UIyxdId9djO34fo6YI+5bqvdbcWMcqdSbu8fUOqqo8CgePKM795E
batBvg7nIEt4L+jHzbus1WFYL1vsyr8RIN9L+N9BLYZq3Y811csg08OK2oa6uG9v
9K++Upd4z/xZNU5BUywZY0Np/xjHXfoBS/QqDOWBzH7VfGd+buFmqztpKUpQkpif
fTD5uRwovMMw+UcYKFBKzgsAp/UUVJz8zGCb179W4S/VI1w+FSn23IZFVpaAL1jJ
CnVbQG/kgD9dh3y3cWrI/AjsGg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org