Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
File:                     CB3F39368F9711EE927E086FC4F9AE02.roa (raw, json)
Hash identifier:          AguLE/HmwEVbN7uy5eqqWPWSWQb5ceMGbuL5MEXYPLA=
Subject key identifier:   71:59:9A:28:C7:EF:5C:4C:F0:5E:B1:F3:76:01:26:CB:62:A2:24:C5
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       06A4
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
Signing time:             Thu 30 Nov 2023 15:47:41 +0000
ROA not before:           Thu 30 Nov 2023 15:47:41 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     137526
IP address blocks:        103.156.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 22:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Nov 30 15:47:41 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6568ae9d-799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:98:ac:22:e4:24:db:df:7c:55:f8:ae:03:
                    d7:aa:aa:f4:bb:ca:aa:38:62:e1:c3:6f:33:55:6d:
                    67:d5:77:e2:60:fe:80:f9:30:c9:c2:88:d7:88:fd:
                    9b:ca:9e:3b:26:bc:a2:fd:d7:65:75:d2:f1:cb:bf:
                    f3:30:0c:f7:7c:9b:3b:70:05:d2:81:4c:fd:c9:65:
                    71:16:80:7a:94:c4:06:6c:bb:cc:7c:33:15:89:c7:
                    57:e1:c0:f2:1c:63:56:90:57:af:50:23:23:97:c1:
                    02:e1:d1:c1:00:82:bc:80:12:85:71:2a:79:d5:25:
                    b3:88:f7:23:d0:2e:38:0c:5a:6d:fb:4e:5e:27:08:
                    bb:81:9e:1e:04:12:4a:46:bc:00:c1:48:1e:30:9b:
                    58:01:0e:5e:70:15:45:a1:c7:28:a8:69:c7:49:44:
                    4f:fc:62:82:90:07:12:2a:44:3c:c5:93:ed:9e:1f:
                    73:f7:b5:de:9a:3e:68:cc:e2:0b:77:92:20:a1:4d:
                    3e:10:ba:28:ca:08:3c:83:08:b8:8d:bd:74:2c:27:
                    2f:0b:85:8c:3b:c2:49:c0:b0:d2:fd:11:89:3e:e1:
                    85:3f:35:d5:87:5b:29:53:ab:20:bb:e7:35:f6:e1:
                    61:97:e9:f2:58:27:de:17:a1:65:7d:86:bd:b6:6a:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:9A:28:C7:EF:5C:4C:F0:5E:B1:F3:76:01:26:CB:62:A2:24:C5
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:d1:51:e1:d2:6a:d3:c7:fc:f3:1f:6c:78:d3:14:8d:1b:
         61:2b:70:43:c2:b8:44:75:53:e4:2d:65:6b:c7:14:85:d7:57:
         83:57:f9:6c:8f:ac:68:e1:93:5d:23:bc:93:c1:40:aa:66:66:
         f4:83:56:e6:fc:ba:bd:b0:1a:55:1f:da:d9:6e:da:f9:3e:fc:
         15:86:bd:7e:e5:8f:e6:86:6d:61:1f:3d:e1:58:65:10:b1:95:
         64:fc:e7:10:ef:06:7d:67:cd:60:af:e4:a5:0f:c0:de:31:b9:
         b3:fe:eb:4e:b9:0c:00:b0:0a:e3:85:bb:88:ff:7f:e8:50:9e:
         dc:fc:12:c0:fd:ff:05:1f:8b:5b:24:a3:67:fa:1c:c9:fd:be:
         ed:ab:42:dd:8f:db:4c:25:11:d9:1e:1c:c8:4f:51:c2:5c:44:
         3b:ec:f9:21:2d:55:6c:27:ff:77:3c:e8:c4:93:b9:8a:c9:42:
         07:27:1f:41:77:01:d2:7d:72:9c:eb:a2:4b:e7:41:49:e2:b2:
         da:46:4b:b8:41:83:6e:58:72:ad:a5:ab:39:22:27:ad:25:f2:
         b7:38:ac:6c:01:a6:a1:57:51:39:69:3d:18:c5:6c:ab:97:e2:
         61:ca:e5:93:fb:17:d5:8e:72:ed:ef:70:f2:0b:17:41:24:bd:
         57:b6:7f:a3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNCMDcxMTAvBgNVBAUTKEU2REY5NzYwQkNEMUExNTk2NjUxMkNENDdCNzI5NEMw
NkMwMkVFQ0YwHhcNMjMxMTMwMTU0NzQxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY4YWU5ZC03OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDCYrCLkJNvffFX4rgPXqqr0u8qqOGLhw28zVW1n1XfiYP6A+TDJwojXiP2b
yp47Jryi/ddlddLxy7/zMAz3fJs7cAXSgUz9yWVxFoB6lMQGbLvMfDMVicdX4cDy
HGNWkFevUCMjl8EC4dHBAIK8gBKFcSp51SWziPcj0C44DFpt+05eJwi7gZ4eBBJK
RrwAwUgeMJtYAQ5ecBVFoccoqGnHSURP/GKCkAcSKkQ8xZPtnh9z97Xemj5ozOIL
d5IgoU0+ELooygg8gwi4jb10LCcvC4WMO8JJwLDS/RGJPuGFPzXVh1spU6sgu+c1
9uFhl+nyWCfeF6FlfYa9tmqnvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHFZmijH
71xM8F6x83YBJstioiTFMB8GA1UdIwQYMBaAFObfl2C80aFZZlEs1HtylMBsAu7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IwNy9FRDlEM0RFODAy
RjUxMUVCQkNCOTEyMEJDNEY5QUUwMi81dC1YWUx6Um9WbG1VU3pVZTNLVXdHd0M3
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV0LVhZTHpSb1ZsbVVTelVlM0tVd0d3QzdzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNCMDcvRUQ5RDNERTgwMkY1MTFFQkJDQjkxMjBCQzRGOUFFMDIvQ0IzRjM5MzY4
Rjk3MTFFRTkyN0UwODZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnnLUwDQYJKoZIhvcNAQELBQADggEBAKsm0VHh0mrTx/zz
H2x40xSNG2ErcEPCuER1U+QtZWvHFIXXV4NX+WyPrGjhk10jvJPBQKpmZvSDVub8
ur2wGlUf2tlu2vk+/BWGvX7lj+aGbWEfPeFYZRCxlWT85xDvBn1nzWCv5KUPwN4x
ubP+6065DACwCuOFu4j/f+hQntz8EsD9/wUfi1sko2f6HMn9vu2rQt2P20wlEdke
HMhPUcJcRDvs+SEtVWwn/3c86MSTuYrJQgcnH0F3AdJ9cpzrokvnQUnistpGS7hB
g25Ycq2lqzkiJ60l8rc4rGwBpqFXUTlpPRjFbKuX4mHK5ZP7F9WOcu3vcPILF0Ek
vVe2f6M=
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:21 2024 by rpki-client on console-fra.rpki-client.org