Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa
File:                     1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (raw, json)
Hash identifier:          VHWFb8Z2Eu6wi8MvhvaLD3Xh92wBU8OtO+jqiGApjkg=
Subject key identifier:   F5:14:65:1B:14:77:0C:51:E6:4B:AB:F2:E3:42:98:29:D9:BA:9F:EB
Certificate issuer:       /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial:       07
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa
Signing time:             Fri 12 Apr 2024 14:22:39 +0000
ROA not before:           Fri 12 Apr 2024 14:22:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135337
IP address blocks:        203.134.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
                          rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
        Validity
            Not Before: Apr 12 14:22:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661943af-8946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:d4:56:e7:e3:8b:78:36:97:59:04:58:e5:
                    5e:28:cd:82:34:52:d7:cc:29:3f:da:17:f9:87:b6:
                    7b:8b:99:f0:7c:e2:2d:b6:b4:33:3a:dc:08:a5:34:
                    c3:f6:2f:a5:a7:53:9f:1f:1f:86:50:ff:72:d2:e1:
                    b5:0d:f7:31:5f:99:ea:8f:92:d4:19:4b:b1:7b:06:
                    2e:f1:c3:88:1e:45:27:76:4a:0d:63:19:60:a9:41:
                    de:67:d0:28:d8:6f:a0:cc:45:6b:51:1b:2a:1a:88:
                    4e:19:67:8d:ab:3f:cc:7f:a7:45:d9:02:2d:88:1b:
                    b4:03:ec:47:96:1e:7c:84:7b:a2:84:b6:6c:f8:b4:
                    1b:be:72:f6:a8:ed:25:cb:bc:f5:cb:cc:c3:e8:66:
                    40:3c:45:11:c1:39:3a:05:ef:20:39:92:44:87:86:
                    83:36:6b:c5:77:68:10:8a:09:6d:4b:7f:2a:ae:bc:
                    46:d5:9c:d2:5e:60:27:66:6a:45:d2:3d:31:9b:d9:
                    5a:96:bd:42:9e:6c:eb:ed:5e:b7:35:e0:06:1c:4a:
                    71:23:01:46:8e:83:f6:c5:a4:02:39:e7:70:ce:4b:
                    f9:89:19:53:4a:d8:39:1f:2f:ce:33:2b:7e:00:88:
                    3c:0d:8b:8a:85:99:62:85:f1:1d:de:10:3f:dd:8d:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:14:65:1B:14:77:0C:51:E6:4B:AB:F2:E3:42:98:29:D9:BA:9F:EB
            X509v3 Authority Key Identifier:
                keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/1DC7647CF8D811EEBBE6CE09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:91:c1:70:49:89:62:b3:6a:d3:7c:a8:e5:53:0c:e3:cb:
         7a:5c:09:d0:9e:ae:27:38:d7:14:43:13:3d:1f:7a:9e:08:5a:
         eb:57:79:49:40:0b:62:d2:8a:a6:fd:55:44:ac:c4:48:51:46:
         56:d3:a2:b8:6f:bf:91:b7:81:b9:82:7a:ff:aa:c3:5a:eb:d9:
         ed:99:b6:8a:17:e5:d4:fd:47:54:d5:b7:09:fb:ee:6e:64:21:
         60:56:6f:2b:06:ef:70:c5:3b:32:87:68:5a:02:94:3e:b7:7f:
         50:c7:55:2d:58:54:3a:9d:f0:5d:3b:e9:35:9b:77:69:04:db:
         93:8d:c0:cb:44:e8:a5:4e:a7:03:7d:2a:48:c2:2b:25:5f:e3:
         61:3a:af:d1:ef:af:12:d5:fc:79:ea:ba:80:97:89:dd:fc:38:
         a1:ce:f4:e1:4a:d5:b7:00:1b:be:9d:10:b4:c1:90:c2:6d:ce:
         37:7c:4d:02:34:76:73:14:4f:b5:d0:47:a6:50:a2:24:44:d1:
         6b:3f:f9:a8:c9:00:6b:24:23:64:5d:d4:de:b0:b8:3f:c0:a8:
         15:40:f0:3b:0d:ad:c1:a2:fe:46:f3:38:a7:23:e1:3a:2a:ba:
         63:b6:58:30:5c:7d:a7:41:98:f4:46:1e:a0:cc:f3:6b:09:13:
         16:ef:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org