Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/4B7DDB34F78E11EAB64C8E81C4F9AE02.roa
File:                     4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (raw, json)
Hash identifier:          qfmqTirp8Zad7k+qaey18cYG4f26i7cc95OJ7RN7ki0=
Subject key identifier:   82:0D:30:26:B7:89:51:5F:08:74:DA:C8:40:B1:4D:E3:F2:B4:63:96
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       30F2
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/4B7DDB34F78E11EAB64C8E81C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 15:52:31 +0000
ROA not before:           Tue 30 Apr 2024 15:52:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     38874
IP address blocks:        203.199.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 15:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12530 (0x30f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663113bf-db85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:2b:ca:fb:05:4a:69:9f:dc:15:35:f6:13:
                    31:0e:6a:58:f0:57:4d:79:38:59:a0:22:36:03:24:
                    44:16:54:57:5d:4a:06:3a:39:b6:0b:7d:cd:69:c9:
                    81:6d:36:52:4f:1c:1f:cb:de:9e:9b:33:36:d2:ba:
                    1e:c8:62:56:2e:f9:99:90:07:ae:a8:0b:0b:63:12:
                    be:00:db:4e:90:89:d3:d7:47:ea:97:83:f4:95:d5:
                    11:63:ad:a4:cf:a9:d1:61:65:f7:35:e7:d1:5b:d2:
                    b8:5c:2d:aa:cd:58:66:4c:4c:7d:bb:ce:10:b9:04:
                    6a:8a:2e:a7:e0:ff:33:53:ef:f4:4b:d4:33:14:cd:
                    be:39:e8:8c:e8:7e:e3:58:3d:14:82:42:5c:35:a4:
                    bb:a8:b9:45:7c:0a:fd:eb:29:dc:c6:b4:49:5a:76:
                    d7:e0:14:ed:30:d8:e8:bc:f3:4a:f1:5a:d8:28:46:
                    64:17:54:07:4f:6d:6b:6a:cd:fb:af:00:ec:b7:db:
                    58:7c:74:ec:60:02:e5:df:b7:88:1f:d9:d1:51:3f:
                    6a:10:43:4b:82:29:83:c4:58:d3:21:d2:2e:d8:2c:
                    51:89:56:be:71:71:2e:1d:c8:a9:3d:8c:76:11:85:
                    72:51:88:ab:47:dc:cb:82:c7:61:b8:bf:e4:0a:24:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:30:26:B7:89:51:5F:08:74:DA:C8:40:B1:4D:E3:F2:B4:63:96
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/4B7DDB34F78E11EAB64C8E81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.199.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:24:54:c2:b4:a7:30:73:80:cb:09:42:e4:5a:af:2f:d3:15:
         77:33:ae:ee:bc:18:93:b8:ce:5b:c6:ec:97:ff:80:37:6e:0b:
         f3:dc:13:61:98:68:b1:96:f2:22:88:23:c6:e0:ad:4b:fa:77:
         ba:4b:2d:ca:de:48:b4:95:66:81:72:47:58:45:f8:e8:52:1a:
         66:f5:45:13:1c:fe:9b:c1:9a:7d:d2:0b:06:5b:c8:26:3d:15:
         36:fc:5d:55:57:72:7d:be:f3:78:39:45:76:95:5c:46:31:3b:
         c9:60:c1:18:72:5b:a7:42:98:9f:bb:90:41:ed:29:f5:18:0c:
         f8:80:63:90:f8:0e:d2:74:e9:c2:7c:ca:d7:f3:ac:2f:2f:95:
         81:1f:98:bc:d2:c8:8f:0a:b9:e8:95:06:41:9d:76:06:8f:33:
         4d:e3:71:82:46:1f:d3:b0:65:ee:20:2c:b1:0e:86:d8:90:a2:
         23:d8:d3:84:ba:95:9f:ee:37:f2:ef:f7:da:12:d8:9b:a0:d0:
         a7:4b:ec:31:9a:b5:a7:f0:b4:0d:1b:4e:c6:31:23:ac:43:d0:
         d3:55:bf:10:50:af:c1:c1:f6:9b:33:59:ce:48:ac:41:0f:6f:
         d3:f5:34:72:32:d8:b0:ed:a9:82:20:7a:01:1e:5e:b2:9c:03:
         cf:c9:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:37:15 2024 by rpki-client on console-fra.rpki-client.org