Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
File:                     B728544E843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          HHabCzaN7G1jH6qYRUCZ3UjwnhtlDwTdKNnKhWcX5tc=
Subject key identifier:   DB:D0:21:1B:E2:8A:04:60:85:34:6F:1A:88:21:B3:51:A7:CB:25:24
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1801
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
Signing time:             Fri 02 Aug 2024 17:06:59 +0000
ROA not before:           Fri 02 Aug 2024 17:06:59 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45454
IP address blocks:        163.53.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6145 (0x1801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Aug  2 17:06:59 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ad1233-f8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:68:5f:c3:94:9f:0b:c8:c6:b7:cb:35:70:
                    83:84:1f:e3:a5:ce:03:da:4f:76:6c:94:1c:e6:a9:
                    99:97:54:99:31:16:b9:c4:43:e9:59:6f:84:3c:c3:
                    e3:33:9b:90:15:f8:28:ad:bf:a7:0a:49:e3:f1:7d:
                    60:fa:de:5e:86:8b:b1:a1:3c:31:09:74:aa:21:88:
                    4f:d2:da:cd:75:68:64:db:c6:0f:9c:cf:a5:b6:24:
                    82:55:a0:08:9f:b4:21:8a:9c:1b:ed:77:d7:b4:40:
                    fa:99:1a:a5:ea:2a:54:9c:d2:0e:ce:e2:9a:23:08:
                    43:8d:e3:69:37:02:58:59:88:d5:66:48:2a:9a:d4:
                    2b:28:d9:df:50:ad:2d:fe:5b:d4:9c:b1:4e:d0:d1:
                    5c:b0:47:ed:15:64:e1:97:71:80:b2:e0:e3:89:e7:
                    9f:83:b7:2b:fa:dc:35:d1:52:62:5c:5b:ca:c6:e9:
                    49:c3:95:50:8d:7e:c5:f3:20:85:80:41:8a:d0:81:
                    14:d4:fd:03:f9:3b:00:2f:2e:cf:a9:7b:a9:93:58:
                    9e:b0:cb:36:4e:3a:5a:c2:36:9a:9f:a5:0c:0f:98:
                    c3:48:a8:d7:ef:18:f5:87:a8:14:6f:81:07:24:7c:
                    43:71:08:c8:11:40:a7:6c:93:02:22:62:6b:7c:c9:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D0:21:1B:E2:8A:04:60:85:34:6F:1A:88:21:B3:51:A7:CB:25:24
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B728544E843011EAB4270B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:19:d5:c1:0c:b4:80:dc:75:0f:c0:00:78:fd:66:ef:0e:73:
         ed:63:0e:d5:2c:eb:27:5b:59:7f:36:ea:10:0c:26:3f:c0:8a:
         7a:a9:0d:0f:84:a2:20:7d:95:18:8c:da:d4:f2:57:2c:a8:ab:
         fd:74:5d:85:df:1e:25:50:2f:b9:dd:43:8f:74:32:6e:e9:21:
         ca:0a:cf:be:83:a1:6d:b0:af:46:58:34:b3:25:62:98:fc:fe:
         55:b5:db:e1:24:de:95:23:49:5e:d1:ed:3d:84:b4:a6:3a:11:
         a3:f8:cd:85:09:33:7f:70:bf:3b:68:85:80:d3:47:81:ae:03:
         0c:43:cd:22:4c:ae:48:94:c1:05:ab:f3:8f:b4:4b:64:f5:fb:
         02:6f:36:ee:7d:36:41:ee:23:8f:31:be:12:48:c1:fa:6c:1a:
         38:54:eb:2f:d4:d6:94:0e:7b:12:7f:ce:ea:b1:34:f9:09:9e:
         e4:8f:2b:08:3f:c4:b7:a9:c1:97:56:e0:e7:ef:d0:db:0f:d5:
         2a:60:a5:ba:31:a9:ff:39:a4:75:a4:04:49:99:9d:9c:a0:ac:
         e4:d6:54:89:34:1c:48:28:f4:3c:7c:ad:98:c8:4d:fd:b6:50:
         43:9a:47:73:86:bb:ce:88:30:fd:1f:fe:40:a6:c8:ea:98:da:
         5b:25:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:07 2024 by rpki-client on console-fra.rpki-client.org