Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa
File:                     A2C8B57074B711EB8491BC63C4F9AE02.roa (raw, json)
Hash identifier:          yDQjOUjGcunB6duVn3zydfP1G2ygbd94HiU5YEy6a48=
Subject key identifier:   D8:B5:7C:A9:D9:48:11:FC:58:DE:90:12:3A:B7:2E:29:CC:43:81:21
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       1634
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa
Signing time:             Fri 26 May 2023 17:57:20 +0000
ROA not before:           Fri 26 May 2023 17:57:20 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     134963
IP address blocks:        203.198.4.0/24 maxlen: 24
                          203.198.7.0/24 maxlen: 24
                          218.102.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5684 (0x1634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: May 26 17:57:20 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6470f2ff-5b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:56:ff:be:25:31:56:40:42:64:26:07:c2:
                    95:01:a3:18:78:45:fb:54:06:29:90:7c:b3:11:e4:
                    62:0b:21:67:91:a7:21:6b:48:75:05:c1:e9:ca:20:
                    19:e4:88:5d:c5:da:f8:f0:36:b6:2c:a5:84:45:81:
                    c1:bb:81:55:42:15:3c:ef:88:e8:41:2c:c1:3f:92:
                    39:8c:f2:d2:1a:b3:89:88:f1:90:a9:51:a2:ac:af:
                    89:1e:1b:da:fd:4f:23:23:c3:7c:bd:ac:04:77:65:
                    e6:52:0d:23:94:94:85:21:4c:95:61:77:d0:ca:a7:
                    e0:d1:85:33:45:5f:f1:0d:88:0f:6f:f4:40:5c:82:
                    d1:e8:ee:1b:4c:93:71:d6:1e:a5:58:9b:38:ff:22:
                    7e:04:3a:d5:e1:0f:21:1b:bd:30:52:19:86:1b:48:
                    a2:59:48:63:00:d1:77:5a:4c:04:4a:96:ae:e4:6f:
                    05:5e:63:ad:89:a9:6c:c7:57:0a:80:b4:47:ee:5b:
                    e7:87:19:ed:5b:8f:b6:19:1a:ff:6b:61:89:42:ec:
                    e2:7d:9f:a8:e5:08:ba:a5:65:b7:0b:bf:a2:96:c0:
                    30:24:7a:c5:bf:a0:d9:71:e8:b5:ad:e1:d4:65:3b:
                    63:ba:77:53:be:fa:53:c3:52:b1:73:06:03:25:65:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:7C:A9:D9:48:11:FC:58:DE:90:12:3A:B7:2E:29:CC:43:81:21
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.198.4.0/24
                  203.198.7.0/24
                  218.102.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d0:2b:12:0c:83:f3:95:6b:7b:74:93:1f:3d:af:f6:a9:ee:
         3a:6c:a0:4c:6a:93:1d:fc:15:41:00:4e:ba:46:b4:9a:b8:25:
         f9:7b:7c:1f:23:b0:c7:c9:d9:a9:50:0d:27:35:c9:77:3d:62:
         d9:30:cb:b6:4a:b1:2d:b1:69:df:26:8d:d0:b8:f0:4e:6e:05:
         bf:7c:4e:52:e9:12:37:e9:69:c9:65:77:ef:75:0c:43:4f:27:
         2c:7a:f8:6d:bd:ab:4f:d4:3c:7d:ed:09:b0:1d:5f:23:41:fe:
         9e:bc:24:d8:51:06:fe:93:b0:7c:86:b7:0e:00:1a:3e:fd:e6:
         01:8b:0a:3b:8e:54:76:14:05:30:6a:52:2c:4f:c5:62:db:5e:
         07:89:5e:18:39:90:de:57:d4:ff:d5:31:51:87:69:23:3b:66:
         38:db:f8:85:62:45:9f:09:32:5c:5a:34:d9:4a:df:f1:42:79:
         4d:5f:9a:dc:be:63:31:38:b0:59:e9:18:2b:5c:ce:bf:0d:7e:
         5c:73:74:1a:ec:36:2b:06:ad:23:c0:60:96:be:68:4e:7b:a7:
         35:49:18:83:17:a5:3d:1e:b7:ac:5a:f0:11:e5:e9:74:0f:e5:
         21:d9:fb:02:eb:45:53:f8:2c:be:ae:bd:67:5e:d8:f3:c3:14:
         86:c2:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 18:12:47 2024 by rpki-client on console-fra.rpki-client.org