Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa
File:                     44B42A0EFDE511EEAD5A6432C4F9AE02.roa (raw, json)
Hash identifier:          j8TVDnQNxdrKAo9n6JHtnB5eeit+C4Hgh115UzRpapo=
Subject key identifier:   EC:8E:05:89:CA:B5:56:D3:3D:46:3C:C1:B3:5E:0A:8C:AE:AF:6D:64
Certificate issuer:       /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial:       02
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa
Signing time:             Fri 19 Apr 2024 00:39:24 +0000
ROA not before:           Fri 19 Apr 2024 00:39:24 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     132584
IP address blocks:        203.16.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
                          rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 09:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
        Validity
            Not Before: Apr 19 00:39:24 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=6621bd3b-29cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:7c:bb:ed:5f:cf:f2:c6:13:27:d1:60:68:
                    20:16:2f:ae:e1:aa:3f:b7:e1:20:1c:30:d6:75:03:
                    5f:f2:00:87:3a:99:c7:c4:52:12:29:b1:c2:68:14:
                    6d:87:1b:63:2f:9c:b7:98:b7:8b:3b:e2:ad:8a:01:
                    57:03:d1:ee:45:ec:25:dd:7d:74:aa:b4:1f:90:20:
                    f3:9c:63:53:26:2f:44:cd:5c:2a:cd:ec:54:3d:2b:
                    68:e0:dc:98:3e:fd:f2:1d:45:d3:a1:93:8d:78:93:
                    0a:aa:2b:11:df:5b:98:fe:b2:7b:a4:7e:c8:d4:b8:
                    39:21:06:d2:0d:2c:c7:35:dc:9e:ff:2a:77:72:6a:
                    b5:07:0c:29:09:22:4d:55:1c:e8:18:f5:4d:ee:bc:
                    62:37:1f:34:d3:9b:1f:bf:b7:50:52:73:0c:07:57:
                    1a:4a:13:53:31:cc:37:49:e2:32:4b:09:1a:d8:cf:
                    4f:c0:fe:25:6a:32:57:a2:2e:19:46:af:e5:0e:78:
                    44:40:08:d9:ff:bc:c2:70:1d:0a:f8:aa:f1:22:87:
                    e0:dc:ea:e5:3f:cb:d1:b8:6d:96:51:a8:40:b5:a9:
                    1c:05:c9:3d:9a:ec:db:37:7d:c8:8c:81:92:10:1e:
                    9d:b1:d7:a0:87:61:0a:ca:8b:95:79:3a:06:19:ba:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8E:05:89:CA:B5:56:D3:3D:46:3C:C1:B3:5E:0A:8C:AE:AF:6D:64
            X509v3 Authority Key Identifier:
                keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/44B42A0EFDE511EEAD5A6432C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:96:45:64:41:cf:df:0d:c7:81:5f:67:64:16:2d:82:ca:
         47:a6:f1:85:14:f2:31:79:b4:9a:8c:22:c1:c8:2b:35:f3:0b:
         64:30:cc:57:7e:03:af:3d:8b:c6:4e:f5:06:60:37:0e:56:9a:
         bd:3f:e7:ca:e0:ca:0f:db:9b:a4:6d:41:d7:40:0b:0c:21:34:
         42:26:de:e3:d0:71:3f:7d:de:d8:65:49:fa:a2:4d:3f:9c:5f:
         eb:08:f4:6c:67:d3:bb:0b:41:97:f4:09:bd:e4:52:d9:92:bb:
         b8:27:9c:fc:54:d5:09:00:3b:4e:46:5b:93:ec:a0:1a:1b:0f:
         08:b2:19:f8:74:10:fe:80:55:63:8f:29:d6:ef:78:36:a5:3c:
         0c:a5:71:20:e8:91:be:8c:df:b4:09:eb:0a:e6:85:d7:93:5f:
         4e:04:63:8a:fe:70:c2:94:ff:b3:58:db:f8:0e:45:1f:50:26:
         50:b7:af:ec:c5:6b:94:8a:7f:41:ce:7b:5e:8b:cc:f2:0e:60:
         69:54:b6:f6:23:6b:2d:95:04:56:d4:c5:c8:b5:bc:4e:04:b7:
         d7:1b:3d:a6:3f:87:e1:25:13:b8:57:b1:79:bf:29:db:0e:d8:
         e1:52:1c:a8:32:19:53:4d:15:f6:a0:30:48:d2:ab:d3:f0:0a:
         89:70:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:04:14 2024 by rpki-client on console-ams.rpki-client.org