Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa
File:                     1BDBCE5013A011EE91039C41C4F9AE02.roa (raw, json)
Hash identifier:          INeGiGvtWUNvN/8qvcL38WjDdtA6rWDDaUJdGibX87s=
Subject key identifier:   E4:F7:1D:05:92:34:51:C8:D6:97:8E:39:E2:E7:D7:1A:2F:DD:F8:3B
Certificate issuer:       /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial:       2B
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa
Signing time:             Thu 17 Aug 2023 05:25:15 +0000
ROA not before:           Thu 17 Aug 2023 05:25:15 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     18081
IP address blocks:        125.2.64.0/18 maxlen: 19
                          2404:ec00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
        Validity
            Not Before: Aug 17 05:25:15 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ddaf3a-067d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:5b:9c:86:6a:36:d0:f6:98:98:f4:e7:30:
                    ac:03:70:d8:4a:4b:a6:1f:19:c6:22:76:d7:96:a8:
                    1c:60:96:48:12:8d:09:03:5d:6a:56:41:4c:eb:5a:
                    70:ea:69:85:d7:4a:73:80:44:88:b5:40:5e:ff:2f:
                    e2:81:9a:eb:8b:1f:2b:6f:25:e1:da:6e:aa:3c:c1:
                    6e:54:30:e5:41:1d:a2:6e:30:c5:5b:9c:ac:f9:6b:
                    a0:ca:70:8f:38:e8:eb:76:4e:42:6a:39:a2:84:22:
                    c3:28:c4:ca:b3:e6:81:1e:5d:99:d0:a0:46:ed:f9:
                    da:7d:f0:98:e1:01:68:4c:cf:3f:73:f6:43:8b:80:
                    ac:2f:bf:d9:38:d3:bb:8e:87:0a:bc:a3:75:97:7c:
                    eb:1b:92:dc:70:b2:ea:cb:f4:f7:0a:18:bd:48:76:
                    bf:17:00:f8:d2:e7:bc:98:a4:8d:5f:82:59:19:af:
                    cc:ef:68:9b:02:79:c3:d8:43:fb:d4:a7:17:40:70:
                    8e:d4:a3:a7:12:8f:2d:24:e0:d3:b3:3e:00:1b:50:
                    07:28:30:1d:64:34:a0:ca:09:66:16:82:2b:85:67:
                    28:11:a3:ff:98:5a:6a:84:cd:4f:de:aa:6d:c6:a6:
                    e3:6d:f3:18:0b:12:fa:d6:26:d0:e8:d4:04:b5:64:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:1D:05:92:34:51:C8:D6:97:8E:39:E2:E7:D7:1A:2F:DD:F8:3B
            X509v3 Authority Key Identifier:
                keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/1BDBCE5013A011EE91039C41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.64.0/18
                IPv6:
                  2404:ec00::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:0a:8d:1b:74:df:47:ec:6d:3c:37:6f:b4:56:72:2b:50:
         e6:37:a4:7b:5f:d2:8e:f4:47:f9:87:a8:47:7b:62:f0:7c:42:
         ef:19:2c:ca:28:72:ca:7b:a3:8c:ab:06:e3:f9:c9:93:62:4b:
         9c:16:41:7c:07:35:47:ee:f6:47:3f:4e:ad:5e:b6:ce:0a:fc:
         5b:d7:7e:f1:03:1c:3f:97:53:c5:8f:91:9e:4e:85:7c:0e:f9:
         72:2a:84:95:00:df:50:ff:dc:8f:d7:01:7c:91:70:e9:9b:6d:
         bb:58:bf:96:70:c7:8f:1e:f7:4e:b0:e6:ac:f3:15:3a:bc:89:
         d6:53:b1:36:fb:d2:0f:8d:1c:a2:9c:16:be:1d:0a:6f:f7:27:
         31:e1:c1:1e:e9:f9:cb:fd:67:1f:73:e7:b8:68:d2:6c:70:5b:
         74:03:68:4a:5d:eb:3b:5d:8e:1e:92:cf:31:2a:f0:9a:be:95:
         0b:f1:07:c5:b1:df:c5:31:85:c2:3a:54:73:ae:ca:2f:c3:04:
         67:4e:47:64:f8:39:fe:30:ac:57:16:53:04:67:9d:5a:db:e8:
         92:67:32:84:b6:b6:d8:c8:3c:b1:2d:16:a6:ee:ee:14:46:15:
         44:d8:68:c8:f3:ca:37:61:ed:9f:26:41:b7:aa:63:70:ff:34:
         13:8d:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:32 2024 by rpki-client on console-fra.rpki-client.org