Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa
File:                     97285ACA5BB111EEB6671243C4F9AE02.roa (raw, json)
Hash identifier:          jGbYSk9KdMSBjG+BeH7pkeg3xid/VEVNnqkWWM42xDY=
Subject key identifier:   B8:42:AB:26:7A:1A:51:D3:17:14:DF:F6:62:DA:81:35:4C:CB:ED:E2
Certificate issuer:       /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial:       0A30
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa
Signing time:             Mon 25 Sep 2023 14:41:20 +0000
ROA not before:           Mon 25 Sep 2023 14:41:20 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     4787
IP address blocks:        123.253.128.0/24 maxlen: 24
                          123.253.129.0/24 maxlen: 24
                          123.253.130.0/24 maxlen: 24
                          123.253.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl
                          rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 20:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608 (0xa30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
        Validity
            Not Before: Sep 25 14:41:20 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65119c10-a281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b7:e7:54:e7:10:c1:4f:60:26:e7:34:f7:53:
                    32:c3:35:3c:bf:61:91:f1:26:6a:12:ce:a9:fb:d7:
                    2f:fc:2b:05:79:73:87:75:8a:89:70:f1:82:77:2e:
                    a1:42:24:fc:ba:64:e7:42:47:bb:a3:4f:a6:23:81:
                    8d:af:d6:c6:4a:fc:f9:d8:d8:e0:cc:9a:73:22:71:
                    28:15:23:ab:32:18:61:a0:db:bd:27:67:92:05:1e:
                    8b:8b:86:8e:81:92:5f:90:7f:e2:dd:62:c2:e1:09:
                    4b:b1:ac:2c:fe:44:22:11:b1:ac:d5:39:7f:f3:1b:
                    23:85:cf:b6:73:3b:ab:29:cd:27:b4:c7:b1:3f:69:
                    a7:c0:ba:7e:53:1c:1d:6a:40:f8:3e:18:f2:28:a9:
                    73:75:c5:58:04:de:a0:1d:0a:85:c0:d9:44:2e:d2:
                    ac:8b:cb:75:0d:9e:4d:92:c8:17:25:d1:73:8e:fe:
                    1c:39:54:fb:83:78:a3:4e:6d:f7:3a:8b:8d:4d:ef:
                    a5:96:3d:4e:6e:11:ee:5d:18:8c:a2:5f:3d:f8:44:
                    df:bb:ef:a4:bb:bd:d7:13:7f:cc:60:35:ed:6a:f9:
                    73:4d:82:f1:d7:81:38:0d:ac:d6:42:6e:fd:86:35:
                    43:40:68:eb:ce:3b:fb:04:13:34:b8:94:99:b4:0b:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:42:AB:26:7A:1A:51:D3:17:14:DF:F6:62:DA:81:35:4C:CB:ED:E2
            X509v3 Authority Key Identifier:
                keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:53:83:c9:13:f4:13:fe:c5:ce:a9:7f:0f:51:a2:af:c2:6a:
         0e:d3:1c:45:59:f1:21:f0:81:84:54:7c:29:77:7d:99:50:b8:
         ad:22:ee:28:a2:bc:98:ad:14:b0:ee:f8:20:66:ab:a9:16:c6:
         37:f9:e5:70:bd:8c:5b:13:57:80:89:56:96:bc:c3:e0:36:79:
         db:e4:b6:63:e0:dd:f1:0c:18:fb:5e:77:3c:21:6c:3d:b4:25:
         16:3b:e5:b8:15:13:d2:83:c3:e8:52:c2:4b:c1:67:42:b6:1e:
         15:24:b9:fb:be:c2:bb:9a:4a:c1:5f:cf:fa:a0:d7:3a:27:cd:
         52:93:b3:59:ea:df:87:b8:00:68:d9:4d:ea:21:be:db:5d:fc:
         50:79:16:f2:4b:75:5f:20:c7:2b:a5:7d:c8:cb:31:48:52:01:
         5e:a5:bf:94:73:a8:66:13:df:cf:7b:47:b5:9e:79:31:87:33:
         5f:e1:8b:47:1a:a6:07:52:f1:ff:32:60:2c:f2:e8:41:ac:da:
         ef:47:4e:26:c5:20:db:b6:82:b8:99:33:43:40:60:9a:30:20:
         cc:0f:fb:82:4c:08:f2:a5:7e:6f:bf:22:ca:d1:fc:ea:45:cd:
         06:bb:d0:cc:37:35:8b:a8:b7:e5:ab:5f:f5:ea:60:4e:80:fb:
         98:b3:e5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org