Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa
File:                     671FF3862E9511E9896EFA1DC4F9AE02.roa (raw, json)
Hash identifier:          oflNEo8OK0RgnoyjgICfudRjeQT56u2F/J6ArkU7zhw=
Subject key identifier:   91:AD:4D:ED:99:38:B0:1D:B1:53:D5:62:E6:A4:7E:9A:9F:12:54:75
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2277
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 16:12:55 +0000
ROA not before:           Thu 20 Jul 2023 16:12:55 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     15347
IP address blocks:        203.177.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8823 (0x2277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:12:55 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b95d07-a058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:11:63:34:c5:bd:13:9f:ed:17:81:fb:f1:
                    a5:4b:cf:4a:ce:39:c9:bc:de:f3:8c:db:33:d1:e5:
                    6b:db:e0:e8:44:a2:f9:bc:e3:c0:65:c9:1b:76:df:
                    07:23:0f:f2:c0:6a:9d:ab:1a:02:2b:9a:3a:b9:8b:
                    76:c4:15:80:24:ed:32:79:d5:69:fd:98:4f:b7:a6:
                    c6:45:8c:ab:27:da:e8:84:ff:1f:a4:a6:15:ba:9a:
                    b8:a9:1b:d6:d4:8e:4d:c9:f6:75:6c:53:96:77:d7:
                    8e:9b:a2:ef:ce:a0:20:01:20:0c:6f:f4:bf:0b:c2:
                    21:81:a4:56:58:4f:3d:6b:93:50:74:a0:34:ee:3c:
                    bd:33:69:a7:ee:bf:72:48:74:70:a9:7a:e5:93:1b:
                    78:6d:c8:7f:13:95:b3:f0:4c:7b:26:04:a6:fb:47:
                    07:6c:e2:3c:b1:46:70:8a:6c:83:3f:76:b0:ea:c7:
                    86:62:31:bb:d1:15:71:ac:ff:91:8c:18:de:59:27:
                    c4:c9:49:e0:ea:2d:d2:b6:f3:08:91:92:54:04:7f:
                    c4:e9:49:76:76:ff:7c:d4:36:68:46:a7:8c:98:61:
                    d1:d0:8e:57:a7:34:e2:e1:35:85:dc:92:87:5c:ba:
                    0d:43:10:d5:9e:66:f7:b4:75:81:90:f4:8f:be:88:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:4D:ED:99:38:B0:1D:B1:53:D5:62:E6:A4:7E:9A:9F:12:54:75
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:9a:9c:c0:77:4f:cb:31:00:0d:5c:db:f6:73:54:44:92:
         da:b0:8a:b3:10:d0:c7:1e:82:93:80:f6:79:d4:de:eb:7e:1c:
         50:2d:7e:6f:94:3e:db:fa:a6:10:cd:c9:e8:60:7a:f5:87:88:
         7a:b9:e1:3d:38:27:f9:10:fa:fe:ea:81:7f:19:39:58:17:a9:
         ac:af:35:73:3d:bf:1d:7a:75:e4:00:85:11:48:5f:16:f0:79:
         94:fa:cd:f2:a1:9b:11:49:a2:16:63:fb:43:25:e3:53:3e:8d:
         0f:b3:70:08:0c:b5:40:a1:e0:e1:ff:53:62:4d:2e:c8:e7:aa:
         2b:0a:75:69:63:ad:bd:85:c2:79:45:3e:5f:f8:15:5f:57:85:
         a2:b6:06:6d:56:31:1e:55:80:f7:c3:b3:c4:17:82:ec:c0:64:
         2b:d2:2f:e0:bd:ec:ce:2d:93:3b:a1:6e:10:8a:df:f5:1a:5f:
         8b:bd:a7:12:c9:8c:f8:fc:b7:7a:64:e3:bb:55:b2:2b:ef:8c:
         30:07:08:8a:a0:f2:ed:b6:c4:c8:d6:9e:dd:b6:03:b6:1c:7b:
         11:7d:35:78:c2:aa:55:f1:5b:99:22:ca:92:96:23:53:e7:d5:
         db:98:c7:1d:ca:87:f0:f8:ca:45:32:6b:db:a2:fd:af:5c:15:
         0b:ac:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:44:23 2024 by rpki-client on console-fra.rpki-client.org