Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
File:                     4C0C96C6022E11EBA920EA37C4F9AE02.roa (raw, json)
Hash identifier:          2kBYgdZl3hVxu8zPpH1HxwexzmAAANsCHNQJmD009aM=
Subject key identifier:   6D:44:40:A3:23:E0:0C:18:60:05:EE:03:5D:64:C9:13:C6:88:9E:66
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       1639
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
Signing time:             Fri 26 May 2023 17:57:26 +0000
ROA not before:           Fri 26 May 2023 17:57:26 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     9263
IP address blocks:        203.198.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 17:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5689 (0x1639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: May 26 17:57:26 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6470f306-2058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:c0:3d:11:a3:5a:39:fd:43:b9:93:39:4b:
                    c9:bf:e9:bc:5b:48:6e:d1:9a:49:4e:f4:e1:cb:d9:
                    e7:d1:02:c1:89:a7:75:b7:45:41:fa:4b:d9:1e:85:
                    64:f2:19:49:8d:88:24:19:4d:9e:d6:d0:cf:0d:d1:
                    8f:8e:e1:1a:dd:f0:70:1b:50:f5:71:bc:65:db:a9:
                    41:1b:64:01:de:24:2f:71:60:24:0a:44:b0:db:90:
                    f9:ac:ff:fa:51:16:6c:0b:07:8b:fa:b1:b7:a6:32:
                    b7:02:fe:bd:ab:38:07:27:63:9e:1a:d8:3b:1c:15:
                    f8:80:2f:4e:16:84:99:30:4c:34:d6:05:bd:92:34:
                    f0:ba:5b:2d:da:0b:d7:61:04:1f:03:91:13:a1:c3:
                    24:4c:84:d7:a1:76:16:49:88:a1:18:15:00:42:85:
                    3e:ae:52:cb:7a:d6:b2:a8:7c:c8:25:79:f6:f7:3f:
                    40:ab:f7:ef:a6:38:fa:98:37:55:c6:7f:9b:b0:6b:
                    03:5a:e7:38:39:d4:6d:e9:bd:1b:31:1a:eb:f0:cc:
                    70:f3:41:08:b3:fa:b7:13:f4:f6:04:fc:b7:46:4a:
                    e3:c2:cd:dd:70:8f:b9:60:fc:a0:80:ae:10:2d:3c:
                    ad:5b:5a:12:5d:d7:b7:25:27:da:fb:55:d9:74:16:
                    db:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:44:40:A3:23:E0:0C:18:60:05:EE:03:5D:64:C9:13:C6:88:9E:66
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.198.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:27:1a:64:b1:00:74:4d:f1:44:e4:f4:dc:76:38:d7:68:99:
         52:40:12:46:72:60:99:b1:fe:30:a7:a0:62:83:12:12:2b:fa:
         26:21:5e:36:49:36:ec:4b:c0:68:c6:c4:d4:d1:8d:7b:f3:f0:
         83:9d:82:31:d0:18:e3:44:8f:52:b2:e5:fd:84:03:60:56:66:
         64:0a:95:af:8b:f2:d7:a1:11:a4:d4:e0:ca:d4:44:2e:a3:07:
         32:87:f5:a6:3b:6c:61:4d:26:82:bf:4b:2c:c5:70:2e:9e:08:
         ee:bf:c6:2c:3a:44:5c:7a:af:81:8e:b2:d1:50:29:e8:ca:eb:
         6b:ed:e5:e4:81:6d:c1:a5:93:0b:68:25:a8:c3:3c:0b:e7:e4:
         72:c4:99:82:73:4a:9e:3c:e9:f6:cb:87:69:69:e8:82:c4:aa:
         60:70:96:10:38:0c:ea:b6:df:47:92:1e:22:31:f9:c1:c5:47:
         45:d9:eb:89:8a:dd:05:50:53:73:42:b2:6f:39:e8:43:f0:c2:
         cf:07:29:95:15:d6:de:e1:2b:b9:41:7d:7f:f7:57:02:87:e5:
         49:45:3e:ae:2e:17:55:c3:cc:7c:d6:5f:ce:64:8b:f1:4d:60:
         fc:9f:2f:60:c0:1c:5b:19:f2:ce:1a:a0:af:91:3b:11:1e:6e:
         e8:15:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:51 2024 by rpki-client on console-fra.rpki-client.org