Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/897785E099AA11EE9E218060C4F9AE02.roa
File:                     897785E099AA11EE9E218060C4F9AE02.roa (raw, json)
Hash identifier:          v2YCUma9+Ek5/JTF669zJJNXKmUm6oXf6zp8xdPYnO0=
Subject key identifier:   DD:0E:24:10:3C:EB:F9:4F:33:02:49:49:40:F2:93:9B:86:B6:6E:C6
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1812
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/897785E099AA11EE9E218060C4F9AE02.roa
Signing time:             Fri 12 Jan 2024 17:04:47 +0000
ROA not before:           Fri 12 Jan 2024 17:04:47 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     4775
IP address blocks:        118.214.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Jun 2024 17:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6162 (0x1812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan 12 17:04:47 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a1712e-b7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:36:f8:ef:82:1d:20:58:be:ec:ce:92:81:
                    0d:8d:ad:cd:51:84:5d:63:6c:29:9a:ce:47:db:b0:
                    70:30:c9:05:3c:6c:15:8a:f0:4a:88:b8:b0:88:4d:
                    6a:e3:f5:e4:fb:33:6c:f4:b3:cb:1c:9b:60:47:ca:
                    d1:e7:a1:7f:2c:3c:ec:da:0a:19:b4:bd:17:17:54:
                    21:fc:77:60:02:99:d0:4d:90:8c:29:fb:0b:15:1c:
                    d3:63:83:a2:5c:ea:b3:db:d2:05:7c:70:d7:54:83:
                    ee:e7:9c:22:b5:2a:48:e2:52:8a:71:17:56:96:be:
                    c8:ba:e2:58:11:78:88:5a:99:2a:23:ee:14:47:d1:
                    3c:b3:21:45:ae:83:31:2e:bb:93:8c:6d:4a:b1:f0:
                    89:f4:dc:8b:74:cd:a6:e6:20:06:30:81:30:61:52:
                    30:03:62:82:91:2b:6b:47:44:8e:03:9b:6c:e6:21:
                    3a:00:5a:be:96:f4:00:3c:92:88:67:e2:91:55:b8:
                    e5:dc:51:89:02:8c:89:b3:87:03:9e:ce:f3:1a:91:
                    8f:7b:4d:6a:15:07:73:6a:98:6b:31:da:13:d2:03:
                    dc:d4:1d:ea:12:27:ad:21:c3:fb:56:99:41:ec:fd:
                    fc:fa:3a:01:85:c1:8c:56:e9:e8:ad:57:fc:32:b1:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:24:10:3C:EB:F9:4F:33:02:49:49:40:F2:93:9B:86:B6:6E:C6
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/897785E099AA11EE9E218060C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.214.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:3e:23:2e:6a:bd:c3:e2:75:36:8d:3c:3b:07:e3:7d:31:
         a3:7e:69:f7:fd:02:a5:58:02:0b:66:bd:7f:b1:73:75:5d:27:
         c7:dc:4a:a8:07:c0:96:c7:4b:ec:c3:89:35:74:58:03:57:96:
         96:9a:83:6c:51:10:cb:18:7e:37:a1:62:60:05:38:c7:d6:da:
         dd:1a:b8:d4:94:a0:80:d6:c8:8a:4e:0a:8f:62:ee:26:ee:bb:
         4f:f0:eb:2e:42:a1:4f:b2:44:22:e6:b4:5b:67:c9:ec:05:ee:
         83:fa:a1:d8:fd:d2:ea:5f:d4:25:76:96:8b:ae:86:be:02:d4:
         0c:fe:32:54:d6:dc:0b:58:f1:31:9a:68:dc:8f:5d:c2:c5:ab:
         ab:f5:c2:b1:ee:46:94:ee:31:2d:68:7c:6c:33:b4:ed:44:72:
         97:3b:66:06:a2:37:8d:da:aa:6b:18:f1:6d:a1:a1:9d:21:61:
         91:ed:c0:85:b1:9f:21:44:77:19:c5:8f:a0:99:43:a9:ea:f1:
         10:f8:a7:9e:4d:33:ce:79:25:0c:34:c0:24:8c:d3:8f:00:53:
         49:34:87:b8:92:c7:67:2d:54:af:ca:19:78:43:6c:f6:fa:58:
         ac:0b:f8:27:7a:5b:85:e5:f7:73:39:95:36:d2:9d:43:89:b4:
         55:75:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:59:43 2024 by rpki-client on console-fra.rpki-client.org