Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
File:                     7AC60C48CEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier:          Y3iS5VpFUc/8nPHXLw4F8oIqQSYEqcr5KXrjmB0CWFc=
Subject key identifier:   A4:B2:74:F1:5B:70:B5:AE:B7:72:15:55:1D:6B:A9:E0:7A:DC:B2:88
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       0531
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 23:30:17 +0000
ROA not before:           Tue 04 Jul 2023 23:30:17 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     38465
IP address blocks:        210.215.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 23:30:17 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a4ab89-2faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:1b:b4:8d:d4:15:f9:3b:e9:a1:24:0c:66:
                    0e:09:89:e9:b3:38:16:a5:39:29:fa:8b:3c:01:fc:
                    b8:08:24:af:39:96:8b:52:dd:45:58:33:be:d0:3f:
                    c3:12:47:1a:b2:9f:a6:aa:47:5d:46:09:6a:97:c6:
                    66:cb:82:ec:3f:c3:91:00:ac:d5:7c:d7:89:f6:8a:
                    be:70:74:af:d2:90:7d:99:84:9f:c7:23:75:d1:88:
                    89:e4:eb:99:b3:21:49:3b:10:31:2b:b6:e0:e9:36:
                    9e:d5:55:13:08:f9:85:18:41:d0:0c:a4:3a:34:12:
                    c9:e9:e6:10:a1:ad:70:de:2a:8c:51:3d:cd:db:74:
                    ce:e0:5d:f3:1a:35:d5:64:36:8c:5f:e6:bf:10:70:
                    4f:f4:6d:0f:26:18:a7:57:74:e4:34:ff:87:a6:b2:
                    7f:ab:f2:ac:03:83:cb:a1:3c:e5:3c:3b:fc:81:6b:
                    38:6e:0d:81:70:86:e2:63:05:d1:db:5a:4f:b2:7c:
                    7a:b7:f4:2e:3b:1c:e8:d5:93:21:9e:41:0f:4d:5b:
                    64:48:83:1c:b8:5b:c4:71:27:e7:90:6a:b8:23:e4:
                    b0:cb:cd:3c:0d:ce:21:46:e3:e5:22:67:ce:49:54:
                    e5:26:0c:a8:da:1d:2d:29:11:bc:4b:67:cd:ca:e2:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:74:F1:5B:70:B5:AE:B7:72:15:55:1D:6B:A9:E0:7A:DC:B2:88
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.215.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d0:7f:6c:79:b3:0d:2b:10:6d:4f:a5:6b:53:7c:8e:7e:72:
         80:72:41:b0:5b:61:28:53:07:d1:d8:43:cf:7c:08:61:01:7f:
         c1:fa:82:34:f9:d8:e2:67:18:41:3d:37:98:38:24:f4:20:7b:
         22:2d:1b:e3:42:2e:c0:a1:95:28:97:5b:39:30:ab:09:f6:62:
         87:19:47:d3:a4:e0:fc:79:fb:d3:5e:29:fb:25:47:42:8d:58:
         93:c4:f8:ed:64:4b:7c:78:b9:3b:d8:2c:ed:8e:b4:cf:7f:60:
         7a:3c:cf:f2:b3:95:de:d8:33:9a:7c:95:02:d7:c5:4f:c1:19:
         56:2f:37:47:b1:ca:e4:7d:be:d9:e1:46:20:38:a5:b4:a2:1a:
         48:83:43:22:ac:57:4d:b2:bf:7e:64:ca:74:eb:41:c5:1d:38:
         df:4a:01:6b:18:d1:b7:f6:06:bf:6f:f0:9f:04:59:76:f1:55:
         14:6f:80:84:83:83:8e:09:90:41:4b:61:c1:0c:03:d1:07:e5:
         ec:ad:a2:65:58:7e:3d:fe:5a:6f:68:70:fb:c7:df:9d:37:f7:
         f7:de:17:ad:10:ad:35:9e:4e:31:65:a0:66:dd:bb:0e:c6:2f:
         00:43:37:1b:b8:11:01:91:51:3a:3a:84:d8:11:85:31:d3:a0:
         80:23:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 00:57:50 2024 by rpki-client on console-fra.rpki-client.org