Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
File:                     57A4B0D884D411ED9A812F73C4F9AE02.roa (raw, json)
Hash identifier:          0lwWUBTWP74AVWS9xJtV9HjhxuqVsYVWRKwJwHLHxwo=
Subject key identifier:   0C:F7:85:14:03:B8:54:84:FA:54:EB:7A:9B:B6:E1:5F:6B:9F:43:F9
Certificate issuer:       /CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
Certificate serial:       07FC
Authority key identifier: 54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
Signing time:             Sun 18 Jun 2023 21:53:10 +0000
ROA not before:           Sun 18 Jun 2023 21:53:10 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     17995
IP address blocks:        123.253.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl
                          rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 21:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
        Validity
            Not Before: Jun 18 21:53:10 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=648f7cc6-256b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:ba:44:a6:7c:1c:0f:a8:4b:f2:2a:01:c9:
                    42:3c:06:10:43:59:37:67:d4:0a:45:43:9c:66:79:
                    02:af:90:b0:2c:d2:89:28:36:c6:f1:e0:57:a5:7d:
                    e8:fc:72:2d:60:ee:e7:88:17:f8:4b:d9:5d:0d:7c:
                    21:51:1a:81:6c:bd:cf:e3:a2:f5:ca:bd:3c:c6:aa:
                    c5:0c:7b:79:05:cc:e3:1d:77:58:e9:62:0a:e9:c6:
                    48:9e:c3:92:dd:2a:d6:cd:6d:22:48:24:6e:95:d9:
                    7d:58:0c:cf:a8:e9:13:3d:b2:6a:4a:72:b3:e2:81:
                    68:b4:aa:b5:4a:00:fa:22:76:f7:46:20:78:bd:21:
                    6e:d0:bd:9f:5b:9f:57:d3:d2:6a:8f:10:68:35:5c:
                    6d:8b:53:60:fd:de:78:bb:f7:7f:0f:9d:01:7c:bf:
                    b2:08:a7:b1:94:83:86:62:7d:8c:ff:d8:39:24:6a:
                    ae:f7:3b:eb:19:f4:70:32:8b:61:88:2b:23:37:c8:
                    28:d4:19:70:43:de:75:13:ca:26:42:a4:e1:50:0b:
                    83:07:54:8d:4a:88:f6:e6:c0:0b:db:ce:f1:64:45:
                    97:ba:2d:d7:aa:49:ae:c0:b7:b6:8e:ae:b2:4e:f9:
                    d7:49:fc:c3:d3:07:9c:f4:e4:2f:3e:fd:d6:b2:0c:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:85:14:03:B8:54:84:FA:54:EB:7A:9B:B6:E1:5F:6B:9F:43:F9
            X509v3 Authority Key Identifier:
                keyid:54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/57A4B0D884D411ED9A812F73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:de:94:07:0d:b4:de:ea:0b:3f:31:a1:07:45:2c:15:8a:3e:
         19:4d:9b:8d:9c:c6:cd:9f:6d:43:5f:e8:c5:14:76:dd:a9:d8:
         c3:e2:97:9d:dc:e5:27:5c:74:86:25:0e:15:84:ea:fe:01:16:
         4a:7c:fc:bd:34:fa:f8:ce:11:a6:77:dd:31:0b:d2:a5:de:59:
         94:eb:f0:85:7d:5a:33:8b:6d:84:0f:88:88:09:2d:4c:74:d1:
         35:77:63:54:87:ff:b7:12:2a:85:ed:b1:be:33:fd:6f:f8:4c:
         ca:a8:76:8e:3d:73:0b:8e:a6:1d:b5:c8:03:4f:e2:8e:09:d7:
         64:2f:35:72:25:6c:7c:36:25:55:77:ad:d0:30:05:af:8e:03:
         5f:07:54:56:00:a1:13:f5:24:ae:f0:02:27:8d:27:13:c2:fc:
         ad:f1:d0:c1:ac:3e:4b:9c:78:1f:e6:85:04:7e:ed:2c:c8:d8:
         dc:0c:b0:07:57:68:16:57:4d:0b:f7:1a:94:1b:e4:6f:70:d7:
         26:42:a6:2e:93:66:86:17:0e:a2:99:46:58:40:63:ea:e4:dc:
         d5:1a:0a:1e:1b:f0:0c:6f:91:69:d7:9f:05:79:da:4f:6a:f9:
         9b:88:34:86:3a:fa:35:9c:4a:c7:ed:ef:83:51:08:38:34:76:
         c4:b8:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:07 2024 by rpki-client on console-ams.rpki-client.org