Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
File:                     7E156BA0D46511EDBFC00C87C4F9AE02.roa (raw, json)
Hash identifier:          kq6uKx75WLXR0akV5GBjKknlyNJFdlLTGI8PryJ3Oqw=
Subject key identifier:   47:81:D3:D7:0F:E2:14:72:25:4A:12:A6:9E:23:75:B8:A4:7B:11:E0
Certificate issuer:       /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
Certificate serial:       CC
Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
Signing time:             Sat 27 Apr 2024 06:20:39 +0000
ROA not before:           Sat 27 Apr 2024 06:20:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     4739
IP address blocks:        203.15.107.0/24 maxlen: 24
                          203.15.107.0/26 maxlen: 26
                          203.15.107.64/26 maxlen: 26
                          203.15.107.128/26 maxlen: 26
                          203.15.107.192/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl
                          rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
        Validity
            Not Before: Apr 27 06:20:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662c9936-8a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:e2:b0:2f:47:39:11:6f:63:b7:df:7c:8a:
                    ae:2c:1b:cd:f8:a8:48:6c:c3:d9:b9:71:51:a3:70:
                    34:d4:dc:ea:0b:af:b7:70:ba:c0:1a:a3:48:89:bc:
                    57:c3:14:b8:10:a6:0f:70:74:ee:a5:d5:2c:49:56:
                    8f:b5:81:37:c9:97:c0:f3:d0:57:ed:4a:6a:2c:17:
                    3e:04:3b:34:c5:83:44:49:75:22:37:69:54:71:9c:
                    ad:78:68:e1:99:85:6e:51:99:5c:6f:a7:15:ea:52:
                    17:ca:05:b4:7c:75:6b:b9:85:8e:9e:58:69:c0:a4:
                    a4:f4:24:cd:ff:7c:b8:c0:19:1c:dc:03:de:ce:6a:
                    9b:08:93:d5:22:5c:d6:9c:e2:b7:b4:0b:62:83:da:
                    81:0e:e7:0a:81:69:57:86:ea:eb:03:ef:9b:3c:7a:
                    84:a3:4c:aa:51:91:6c:7c:07:df:5b:5c:3e:b4:db:
                    d5:f2:3b:ad:00:8d:2d:1f:42:e8:f9:24:cd:af:43:
                    73:d0:39:4b:ae:30:c4:c1:74:90:e4:f9:b1:ae:b7:
                    50:f2:c3:fd:92:5f:6f:5f:0f:e1:1f:2f:78:a3:b5:
                    00:be:d8:8e:9e:8d:13:a2:97:aa:64:5a:18:e5:72:
                    88:f2:94:30:c5:c4:6a:1a:d3:65:d6:81:4d:c0:14:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:D3:D7:0F:E2:14:72:25:4A:12:A6:9E:23:75:B8:A4:7B:11:E0
            X509v3 Authority Key Identifier:
                keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.15.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:af:85:d2:c0:77:01:cb:c1:4f:37:b3:17:80:9a:14:ca:b7:
         45:05:b9:7b:17:37:ab:06:32:14:25:bb:7e:01:8e:ea:41:de:
         b0:80:dc:c9:fa:33:27:3e:2a:d3:97:c9:fd:d1:89:66:3b:aa:
         ce:2f:6c:a4:bd:18:3e:be:90:a2:7d:83:e6:75:28:06:f9:12:
         e4:4e:dd:f9:ec:7f:85:f6:df:a7:4f:02:bf:8d:ed:f7:c0:01:
         88:4f:ad:7b:cc:a6:51:74:23:dd:c9:17:d6:f4:45:ed:d1:9e:
         b4:76:63:f4:75:70:9c:0a:2e:ee:6d:f7:94:64:23:58:05:2b:
         7d:45:0a:88:c0:d8:74:9a:e7:ea:51:0b:7c:00:f7:a7:e1:62:
         cc:ca:b3:e6:7f:b2:da:39:fe:a9:b9:0b:23:02:c4:17:7f:83:
         79:17:ef:3f:41:90:09:f4:2f:ef:d1:ea:32:79:c8:fd:6a:e5:
         56:52:75:c4:f5:bf:19:81:7a:44:ac:82:d1:6f:4d:fd:55:cb:
         16:a5:f4:4c:2d:e7:b4:24:6d:27:78:c4:a9:58:36:d4:36:5b:
         b0:b3:cc:7b:cc:c1:d1:59:a9:5f:12:b6:42:cc:d5:85:24:e6:
         b9:e3:b2:75:1b:65:ba:d2:a3:aa:85:44:af:4e:20:39:0f:d4:
         05:01:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:52:50 2024 by rpki-client on console-ams.rpki-client.org