Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/0EB2F53A59A711EE9419DA2DC4F9AE02.roa
File:                     0EB2F53A59A711EE9419DA2DC4F9AE02.roa (raw, json)
Hash identifier:          9ndai9Bh7MwjRqsGL8uQtqi4fXF17MgE/EuT7D2DzKs=
Subject key identifier:   71:31:FB:6E:66:06:5C:54:D9:B9:6B:32:B5:29:9A:76:96:33:09:B0
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       07
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/0EB2F53A59A711EE9419DA2DC4F9AE02.roa
Signing time:             Sat 23 Sep 2023 00:20:54 +0000
ROA not before:           Sat 23 Sep 2023 00:20:54 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     45208
IP address blocks:        203.189.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl
                          rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: Sep 23 00:20:54 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=650e2f65-7e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:3c:4e:f9:a4:3c:61:af:fc:18:1a:4d:ab:
                    9d:cd:93:ae:59:5f:86:44:8a:e2:fc:ec:d8:85:17:
                    43:d1:3b:a9:7a:8f:dd:25:a6:82:7e:60:25:23:d6:
                    c6:65:c2:40:13:db:4f:bf:01:35:6b:d8:fc:bd:8e:
                    b9:66:15:d7:f7:12:50:4b:2b:6b:88:67:d7:cb:24:
                    10:7a:9a:03:6a:9a:15:f7:2a:62:e0:5d:4c:8d:d2:
                    07:0f:94:ae:d2:f0:d0:3a:ac:bc:c5:50:36:73:ab:
                    e1:eb:09:c6:63:c7:5f:65:bb:ea:29:3d:60:ad:33:
                    c9:38:69:85:f3:58:ff:75:cb:91:5e:6f:5a:43:05:
                    46:8f:59:d3:76:72:99:7b:32:11:4f:f9:b3:83:81:
                    0a:ee:8b:a7:49:db:3c:14:98:32:c3:28:bb:26:62:
                    f6:a5:f9:0c:b3:17:4c:fd:07:d6:d1:56:b1:0a:50:
                    e6:14:8d:68:1c:bb:22:25:29:42:25:6a:dd:71:e3:
                    89:25:38:74:89:a6:cb:f6:5e:1c:59:4c:46:53:95:
                    83:fe:60:37:6b:c4:f1:10:51:b6:2e:42:f5:de:3e:
                    31:bf:3f:be:39:72:60:be:a0:e8:c8:7d:07:30:51:
                    c6:55:26:ea:c9:12:45:61:f8:da:59:1d:95:ba:fc:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:FB:6E:66:06:5C:54:D9:B9:6B:32:B5:29:9A:76:96:33:09:B0
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/0EB2F53A59A711EE9419DA2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.189.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:5c:ab:8f:cf:b9:66:2f:56:d7:b8:93:a2:34:b4:c7:16:
         76:a1:29:6f:7e:c8:04:02:1d:c9:05:b2:41:8c:c3:9b:32:33:
         ab:b3:65:2e:81:52:c8:50:b9:6b:46:17:af:4d:15:7e:5e:c5:
         af:6e:d5:14:fb:6c:1e:8d:5d:c1:33:31:83:22:29:66:a9:39:
         2f:a7:dc:a3:b9:a0:91:23:cf:a4:41:2e:ae:96:7e:8f:9f:6a:
         17:02:ee:13:0b:9a:df:b9:1a:65:44:a4:6e:27:33:f0:2b:fc:
         41:67:5c:32:7a:05:7f:d3:c9:00:fc:88:9f:8f:f2:fa:c4:61:
         b0:1e:11:39:d0:6c:f1:0a:71:4a:d2:ad:c0:d5:b7:bd:3b:83:
         22:26:00:d4:95:e4:ca:11:be:f9:83:3f:3c:ba:4b:4d:0f:57:
         a1:b1:44:b5:05:2c:a2:02:cc:cd:f9:13:5e:26:10:da:ac:ef:
         3b:60:18:33:13:b0:11:82:56:55:1b:be:40:b5:6b:4e:0f:7a:
         69:b3:a9:a4:db:dc:6f:01:aa:c2:5d:65:16:8c:35:85:43:04:
         8f:b1:2b:c1:85:1f:51:94:1a:a9:b4:03:ac:09:87:64:7f:16:
         b5:60:8e:33:c0:a0:c3:13:7a:60:18:a2:d9:aa:b9:67:c1:b9:
         0a:7e:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org