Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa
File:                     A160BBAEC17711EABFFC9E1FC4F9AE02.roa (raw, json)
Hash identifier:          jpSXaqvFDMZt8dpSV1a0hO/a+U/Tjex7ukyDTSO3kCM=
Subject key identifier:   32:1A:1C:3F:1E:32:49:FF:F6:31:EF:44:68:76:5A:26:7F:61:F9:3E
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7BFF
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa
Signing time:             Thu 31 Aug 2023 17:44:42 +0000
ROA not before:           Thu 31 Aug 2023 17:44:42 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     38561
IP address blocks:        202.9.112.0/22 maxlen: 24
                          2402:f00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
                          rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31743 (0x7bff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Aug 31 17:44:42 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f0d18a-e341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:07:44:39:cb:5b:1c:40:37:0c:93:c2:a0:
                    41:ec:c2:d7:fe:aa:a0:02:1f:ed:19:42:cc:ee:0c:
                    1b:54:ff:2b:91:a9:34:aa:d6:06:1f:de:f4:71:f9:
                    f1:fa:83:44:bd:1b:d0:54:47:11:6b:db:a2:c8:74:
                    ef:9c:4a:40:68:1a:33:37:c1:ff:4d:c3:1f:a8:41:
                    80:ec:31:5f:b0:f1:38:2d:7f:90:99:81:56:0f:c5:
                    b0:71:c4:1c:cc:7a:33:65:14:54:79:49:81:1d:3a:
                    7b:4d:b3:92:0a:8f:8e:3c:2b:e4:d9:b5:82:8b:03:
                    8b:23:f4:38:28:1c:51:df:07:ee:42:90:1c:3f:9d:
                    82:fe:00:4e:af:c0:d3:26:50:1b:14:05:b4:af:85:
                    7b:cc:75:5c:62:0c:12:47:00:e3:99:28:07:16:19:
                    53:6b:a7:c9:8f:75:fd:b7:81:af:6a:fb:55:5c:f4:
                    66:bd:78:4f:45:38:c2:2e:eb:00:e8:55:13:f3:56:
                    b0:3b:e3:54:44:b8:d5:84:a4:cb:33:46:d9:3a:70:
                    06:ce:19:ac:da:0d:6d:40:b3:e4:f3:e6:c1:3c:e4:
                    da:ee:4c:07:3d:83:fa:00:c9:ab:76:b7:49:86:d1:
                    99:b0:b2:b4:df:de:5a:dd:a1:f8:c7:cb:f5:60:74:
                    4b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:1C:3F:1E:32:49:FF:F6:31:EF:44:68:76:5A:26:7F:61:F9:3E
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/A160BBAEC17711EABFFC9E1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.112.0/22
                IPv6:
                  2402:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:b4:d8:2a:a7:a2:b9:47:52:3d:70:dc:ba:77:57:56:8f:
         23:24:1c:10:8f:88:99:92:9e:f7:78:04:a4:0c:a6:66:c1:ea:
         11:dd:82:44:49:9e:9f:fa:64:e0:b9:11:f8:c3:88:70:b5:7f:
         3f:57:74:39:40:34:e7:30:71:29:02:39:bc:18:e5:14:34:cd:
         d6:04:01:09:4f:28:36:2b:b5:c1:c6:e5:0b:08:15:d3:4a:f7:
         2b:0d:f6:51:0b:9c:99:87:f3:fd:88:da:db:6a:02:bc:1a:49:
         5c:3d:f5:7d:35:df:e4:f0:e7:67:d3:f0:15:86:a6:98:c6:d5:
         8c:73:02:ba:30:ea:fa:db:f9:24:fb:c2:9e:66:67:4f:bc:ee:
         a6:82:5b:95:34:a0:93:d6:5d:36:a1:72:6a:64:b1:be:cc:ba:
         9c:47:fd:dc:35:ec:8b:73:6a:82:50:90:b4:82:0a:9b:45:15:
         09:7b:05:87:17:42:7a:a4:f2:b7:17:28:1c:38:2b:ca:bc:9d:
         e6:36:33:ef:c3:da:2a:fd:e6:d9:e2:7c:6d:b0:9a:1f:f6:77:
         b3:12:3c:4f:12:d8:2c:22:9c:49:62:4f:5b:8b:25:da:d3:00:
         76:9c:0c:4a:bd:d2:8b:0a:3f:aa:08:dd:2d:1b:77:4f:da:42:
         1a:0b:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org