Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
File:                     CB3F39368F9711EE927E086FC4F9AE02.roa (raw, json)
Hash identifier:          FNwGRYPy9cwA+TIey5E9ATjMEP5oIhq7+WwZv3YLboE=
Subject key identifier:   25:6B:26:34:8C:F3:AC:29:82:6E:CE:06:EF:45:3F:59:4E:B4:A3:10
Certificate issuer:       /CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
Certificate serial:       075C
Authority key identifier: E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
Signing time:             Mon 18 Nov 2024 21:30:23 +0000
ROA not before:           Mon 18 Nov 2024 21:30:23 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     137526
IP address blocks:        103.156.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B07/serialNumber=E6DF9760BCD1A15966512CD47B7294C06C02EECF
        Validity
            Not Before: Nov 18 21:30:23 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=673bb1ef-15d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:46:ec:7d:f1:4a:36:c8:2b:ce:2d:d3:7f:
                    9d:29:73:bb:32:03:ca:0a:c7:c8:e7:8d:3e:7b:18:
                    54:27:ac:aa:89:70:3b:6c:07:68:86:ca:29:01:5e:
                    a2:8a:3f:2f:b4:30:92:7e:c8:ea:7f:52:79:e7:fa:
                    22:f8:c1:2f:72:c7:19:b1:49:67:8f:0b:06:7e:37:
                    ce:83:bd:56:53:de:15:ce:54:cf:94:eb:9f:71:ad:
                    b6:b5:cc:d6:c0:59:68:c8:9d:28:9a:19:10:91:c7:
                    c0:90:d6:fc:f4:51:cd:49:1f:4e:0e:17:66:9d:cf:
                    4c:54:41:b5:7d:40:00:08:ad:b5:cf:6a:e2:85:83:
                    98:10:01:f5:0b:11:c1:07:a1:bc:5e:63:c6:b2:91:
                    3f:4c:78:51:0d:5e:48:44:99:42:25:e8:63:b3:b1:
                    d1:da:19:17:c3:6a:3e:e7:f4:2f:7b:7a:16:e1:68:
                    e7:f8:39:a9:55:79:01:2a:93:1a:6b:62:cc:4c:59:
                    bc:64:50:4e:9d:82:8b:76:bc:2d:46:d2:43:78:7f:
                    3c:16:b9:d9:f2:e3:26:3d:d0:af:7a:85:4f:f9:e3:
                    d2:59:49:45:29:87:56:bf:20:2d:04:fc:cb:d8:c9:
                    a7:33:11:4a:17:24:45:c7:83:3b:e0:ec:a2:d6:7b:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:26:34:8C:F3:AC:29:82:6E:CE:06:EF:45:3F:59:4E:B4:A3:10
            X509v3 Authority Key Identifier:
                keyid:E6:DF:97:60:BC:D1:A1:59:66:51:2C:D4:7B:72:94:C0:6C:02:EE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/5t-XYLzRoVlmUSzUe3KUwGwC7s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5t-XYLzRoVlmUSzUe3KUwGwC7s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B07/ED9D3DE802F511EBBCB9120BC4F9AE02/CB3F39368F9711EE927E086FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a5:f4:f4:35:39:d8:10:b2:44:e1:03:1f:ef:69:24:f1:5f:
         74:3d:79:6a:96:e3:5d:96:58:bd:71:76:93:d9:4d:96:45:71:
         99:62:96:3f:89:19:ec:8b:49:82:45:27:93:3b:ee:11:fa:84:
         27:86:c7:8f:07:8a:cd:7d:1b:f1:81:b7:14:8a:11:9a:87:96:
         30:68:aa:93:28:96:26:2e:f0:98:e5:95:c6:0e:0e:e8:3c:08:
         04:83:35:40:fa:48:b9:48:46:8d:9e:db:d6:bf:af:16:3f:de:
         60:d1:d1:c5:15:d9:6d:d2:cd:99:f2:25:1c:cc:46:d7:eb:4b:
         50:97:0c:5c:c8:7a:d4:73:e2:a2:20:54:a0:a1:90:e6:67:d0:
         4d:74:96:58:01:3f:50:da:ad:c8:b0:27:09:83:34:2f:18:bb:
         b2:c0:00:c7:89:be:17:f7:9f:6f:13:4b:90:3f:29:0c:0c:fc:
         f0:3a:a5:c8:3e:31:f4:69:d2:b6:62:c3:41:53:d0:1d:bd:3b:
         94:0e:96:0f:38:8a:6c:a4:bb:b6:f9:db:74:a2:5b:e9:fd:c3:
         5c:ab:a5:2e:20:63:b7:7c:4c:37:41:58:7d:2c:78:c4:26:0b:
         e3:93:99:c1:c5:c2:94:14:59:50:58:0e:2f:df:51:3d:bf:34:
         a2:8b:38:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org