Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
File:                     32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (raw, json)
Hash identifier:          07/F1aHDAYXUjzB8zYEAlz46gjU5LaVVvzFxFx7Zi20=
Subject key identifier:   5C:5D:63:46:97:FF:54:F8:B2:7E:7F:04:9A:1D:A3:A4:E2:88:CA:4E
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       15
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 05:45:44 +0000
ROA not before:           Tue 29 Aug 2023 05:45:44 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     10116
IP address blocks:        203.145.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Aug 29 05:45:44 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ed8608-1553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:32:4b:ae:80:7c:c0:1e:be:82:54:c0:4f:2f:
                    3b:3e:85:e5:7c:84:f1:ac:92:8a:6e:6b:7f:a1:14:
                    86:7e:0b:76:bd:8e:ce:03:e6:38:3c:f9:ab:1e:e3:
                    f0:34:82:01:17:e2:68:1f:ce:c9:32:2f:b5:5e:fe:
                    30:5f:10:2d:84:33:d7:2a:08:9b:fa:fd:de:c0:52:
                    26:50:32:dd:3d:ae:6a:ce:13:ce:2c:7d:07:23:99:
                    b2:e2:8f:d2:f8:b4:cc:24:0d:43:36:57:fd:9e:c2:
                    a2:5c:52:cb:f8:63:3b:0a:d6:20:56:07:a3:87:be:
                    fe:cf:21:14:38:c6:a0:c4:fb:d9:61:e2:9d:f3:5e:
                    7d:d1:96:83:d6:fa:25:81:7d:e2:ca:97:ca:b9:3d:
                    4e:ee:57:c4:5a:57:25:14:50:04:2f:2a:77:26:9b:
                    f4:31:0e:8b:d4:23:02:72:05:f4:b4:7e:1e:ae:c1:
                    06:81:cf:03:eb:c2:39:b7:2b:22:39:b9:06:00:7f:
                    2c:8f:bc:1a:62:33:50:a4:58:19:51:b3:25:cb:ad:
                    73:29:1a:e1:42:98:4c:52:c4:a7:26:85:b9:7e:52:
                    05:10:3a:f4:05:b9:e5:34:40:ec:2b:0a:0e:9b:76:
                    4d:e6:b9:a9:63:87:1f:ab:b4:0a:aa:ee:15:92:79:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5D:63:46:97:FF:54:F8:B2:7E:7F:04:9A:1D:A3:A4:E2:88:CA:4E
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/32B9FB9C42FD11EEBC3A6810C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:76:fa:8a:83:23:ff:0a:88:ea:2f:5a:f2:f0:fe:52:fc:
         f9:88:95:6c:79:42:d0:c9:af:82:bb:a7:0f:ef:55:12:58:87:
         a3:0d:c5:14:0d:ea:d2:36:43:3c:3c:ba:90:bc:be:fd:f8:3c:
         c0:96:1b:64:bd:e7:4a:b9:d4:cd:e6:0c:0d:1b:ca:36:4b:03:
         8a:c5:f7:e2:ce:00:12:3b:22:b1:7f:61:07:6d:61:ea:2d:54:
         83:17:26:97:0a:b5:b8:fb:e0:a4:ca:ef:9c:a3:6d:30:4e:b7:
         50:bd:9b:c6:5e:a7:75:ec:5e:17:30:6a:01:57:9a:45:a7:d7:
         e5:e4:b5:ce:fe:b9:f1:6f:51:7c:1c:1e:27:30:36:41:38:00:
         f9:cb:de:3c:ae:0b:54:af:06:1b:0e:22:a2:07:7f:24:f7:77:
         7e:cd:29:40:5c:ca:fe:9e:d0:a8:b0:99:5a:d8:7f:6e:4d:60:
         1a:5c:2c:21:7c:1f:f1:cf:bf:8a:14:2b:7a:c4:d7:d6:aa:b3:
         b5:a7:c1:81:23:64:f7:63:41:6b:66:a2:c2:51:4b:09:24:37:
         d3:67:9a:fe:6c:6e:6f:ce:90:b9:71:98:a8:ef:c8:62:cc:5f:
         9d:62:fb:96:0a:15:e9:94:39:47:ea:0b:0e:eb:63:4b:a8:ae:
         d4:79:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:16 2024 by rpki-client on console-ams.rpki-client.org