Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa
File:                     5D822954368F11EAB3D4CE7FC4F9AE02.roa (raw, json)
Hash identifier:          go5b9JQLRtmjb3/gk281iNywfXjdvNyFGIICk9aPtfw=
Subject key identifier:   40:41:44:30:BC:03:20:C4:56:E9:D1:C0:BF:6F:1C:CA:19:C9:13:1A
Certificate issuer:       /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Certificate serial:       0A09
Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa
Signing time:             Mon 04 Sep 2023 20:07:26 +0000
ROA not before:           Mon 04 Sep 2023 20:07:26 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     132683
IP address blocks:        203.161.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
                          rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569 (0xa09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
        Validity
            Not Before: Sep  4 20:07:26 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f638fe-06b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:29:0e:1a:13:a3:11:eb:d8:b5:20:6a:d0:
                    93:e1:7c:38:27:b1:7b:a3:e3:32:c7:5a:6c:2f:23:
                    a5:41:97:e7:39:51:3c:b9:2e:b4:90:f3:f2:4b:34:
                    af:91:50:ea:50:d9:05:ae:e1:b0:b5:ef:b2:aa:42:
                    9a:00:92:a5:24:1f:fd:d7:ee:86:74:52:f8:39:41:
                    db:85:4c:fb:a4:e2:a9:13:45:99:f6:19:92:2b:3b:
                    72:92:c7:f5:69:3d:81:56:66:37:8b:b2:45:c5:d3:
                    f8:84:dd:ad:1b:7c:0a:32:19:e0:e6:f3:56:3c:2e:
                    bd:2c:b4:ec:22:f1:15:fe:6f:66:aa:48:33:d7:e6:
                    4e:aa:c8:5f:53:43:67:79:4b:cd:5b:c5:6b:81:8c:
                    d0:d3:5e:b9:7f:de:35:fe:04:53:bb:fb:dd:7b:9c:
                    20:ac:0d:7a:4d:f2:8b:4d:b9:8a:6f:8a:36:a4:27:
                    a8:62:d7:52:17:32:a6:ff:41:63:4f:a2:04:5c:49:
                    6b:73:91:e7:13:05:ff:b2:4c:91:71:ca:3b:a1:32:
                    3b:5d:1f:d2:ee:9f:29:d4:26:98:4b:ab:c0:0b:e3:
                    7e:ab:83:65:95:1b:0e:d3:a7:f8:9e:32:e6:0b:da:
                    5e:47:71:81:c3:fc:dd:80:61:d5:67:20:03:01:e9:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:44:30:BC:03:20:C4:56:E9:D1:C0:BF:6F:1C:CA:19:C9:13:1A
            X509v3 Authority Key Identifier:
                keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:cb:6a:67:57:0f:5c:32:fc:2c:50:c0:9e:9b:00:dd:b1:
         72:72:ad:9d:bc:3e:0f:e4:43:4f:b7:9b:80:22:e3:0f:6f:5a:
         bd:5d:73:b3:1d:6b:5f:ed:b8:cf:eb:5f:e0:ea:1e:4d:9f:20:
         30:2d:8e:b1:01:ab:e2:2a:3d:35:15:b5:9e:c4:64:3a:eb:24:
         75:df:fd:4e:75:66:dc:a7:4c:ba:06:9e:a0:41:2e:32:b7:e6:
         50:0f:33:33:f6:46:f2:ee:c4:df:42:f3:e4:ba:99:cf:98:11:
         a6:83:d2:10:db:ea:88:a5:5e:2a:53:c4:2e:ad:fb:36:a8:95:
         67:e3:cf:e0:43:f4:92:57:de:77:58:19:76:57:b2:59:66:10:
         62:51:1b:17:44:e3:1f:4e:78:fa:72:51:91:67:ca:37:e9:21:
         64:42:07:3f:71:ce:7b:a3:77:af:ca:4c:47:15:82:10:a4:68:
         02:1f:05:fa:2a:a5:b2:0d:91:22:86:70:6f:55:a8:bd:2a:65:
         1e:4b:ba:86:9c:ef:4e:37:cb:92:8a:f0:a9:43:70:65:1c:27:
         fd:b7:f1:85:df:c9:1e:58:eb:71:10:c4:68:68:30:b9:8a:47:
         6b:96:b0:66:d8:70:9c:90:67:71:64:ab:d6:e0:bd:15:5e:67:
         83:8d:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:43 2024 by rpki-client on console-ams.rpki-client.org