Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
File:                     BC94C436F62711E9AC18E63BC4F9AE02.roa (raw, json)
Hash identifier:          rbIIsTFyLoNHS6SSQCaCLQg8HfLMzeMJdbEth0odGak=
Subject key identifier:   6B:78:AB:DA:6A:DF:EC:A4:ED:54:85:A2:FE:E9:35:02:E2:BE:F2:BF
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3454
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
Signing time:             Mon 14 Aug 2023 14:30:27 +0000
ROA not before:           Mon 14 Aug 2023 14:30:27 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     6619
IP address blocks:        203.126.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13396 (0x3454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 14 14:30:27 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64da3a83-d2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:a8:c6:1d:96:1d:42:23:1b:95:5e:2c:4f:
                    01:e2:04:53:88:64:34:ee:32:ab:e3:5a:73:3b:8d:
                    51:a8:fb:a4:c9:25:ae:9f:e3:56:41:12:39:5e:91:
                    0c:22:81:46:76:fb:4e:be:23:11:63:3a:91:fa:1d:
                    53:08:3c:ee:93:86:be:48:60:65:3a:89:0d:a3:3a:
                    5d:78:0a:99:66:71:8d:d1:e6:50:63:6c:e5:53:af:
                    c5:b4:72:a8:7c:56:bd:e3:20:4f:f1:9d:4c:e1:ca:
                    62:61:21:1c:c9:57:47:ba:c3:bd:67:48:6b:7c:77:
                    9c:4f:21:97:1f:4d:77:eb:20:c1:63:f8:ef:d5:39:
                    36:6f:b0:b3:7d:1e:e9:eb:f3:ab:e9:6b:40:e1:18:
                    f4:4c:02:a4:87:4f:bf:00:9b:e4:d2:d8:d3:50:ef:
                    96:25:41:a6:6e:ea:4c:2c:08:c7:0b:d5:b1:cc:81:
                    82:22:52:aa:66:db:1d:07:19:17:b8:f7:33:d6:d2:
                    00:b8:24:65:35:ff:aa:08:ae:69:ec:30:ff:3c:37:
                    95:00:f1:e0:a9:ed:57:d4:5b:5c:b5:28:46:43:d9:
                    c2:56:06:b1:38:3f:29:64:6f:f9:72:cc:9a:f4:f2:
                    49:57:df:99:f7:62:d7:f5:01:74:2c:55:ec:9e:4c:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:AB:DA:6A:DF:EC:A4:ED:54:85:A2:FE:E9:35:02:E2:BE:F2:BF
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.126.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:81:d9:ef:74:2e:c2:2f:fb:fe:26:97:de:cb:1e:f8:45:
         eb:98:67:cb:b8:22:13:d1:41:77:e2:fb:19:cd:ec:85:ca:20:
         76:70:88:18:6d:8b:6a:3b:ce:55:cf:63:e8:9f:dd:63:e7:44:
         71:0d:9a:51:22:1d:f2:b3:cc:e2:88:10:f9:6d:c9:96:21:6a:
         e5:4f:70:1a:33:3c:2f:f4:0b:75:f1:c4:ab:21:d2:2c:57:2d:
         3d:fe:34:6a:76:13:17:36:09:96:a8:fd:2f:d1:1a:a4:6b:1f:
         8b:2d:3c:a5:8d:e0:7d:db:42:1d:89:7c:e3:54:b3:b0:69:87:
         5c:ad:b7:15:3e:c6:50:20:d2:31:64:f8:20:a3:f3:55:d6:7b:
         e0:17:b0:0f:f5:f0:52:1e:ea:30:73:b9:d1:2c:ad:4c:f2:90:
         32:ee:1d:f8:37:2b:8d:3e:06:20:fd:cd:dd:cf:f4:b9:47:3d:
         5b:5d:ba:8d:fd:0f:ef:fa:97:dd:30:35:7a:fa:2d:6c:5e:83:
         7f:2f:bc:52:c1:e2:e8:e7:22:8f:4a:fe:a5:16:d6:51:08:4a:
         b3:ef:58:47:23:85:57:9a:77:80:a6:be:15:27:ab:62:10:da:
         cc:90:ff:b0:e5:35:7f:68:97:02:dd:34:1a:3b:59:b9:29:67:
         9b:b2:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:09 2024 by rpki-client on console-fra.rpki-client.org