Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
File:                     C49CE482BEA411EB85828650C4F9AE02.roa (raw, json)
Hash identifier:          SYzw7W4I8ERB2k6TGS/FM3oGH7TQqDLdsyK12v9ZWyo=
Subject key identifier:   8E:16:97:0F:68:CE:8B:87:4D:A5:20:86:E8:02:48:F5:77:0F:EC:80
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       052E
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 00:42:25 +0000
ROA not before:           Wed 03 Jul 2024 00:42:25 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        203.19.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul  3 00:42:25 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66849e71-1922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:20:3c:92:ac:2f:6c:6d:aa:6a:55:4e:d7:
                    66:7e:6b:6b:d1:ab:80:64:52:28:f9:0c:20:34:37:
                    f3:fc:52:38:e2:e9:72:6c:59:0c:9a:16:8c:20:ae:
                    37:73:b9:61:0d:f3:04:76:d8:4c:5f:93:d6:99:09:
                    51:05:b4:b2:8b:91:03:1f:07:12:73:18:3c:e1:1b:
                    69:4c:7c:84:fb:ce:ee:95:6b:13:3f:d1:b4:5b:0c:
                    02:22:62:a8:14:19:61:83:71:1a:13:e3:95:3c:4c:
                    b0:37:b6:57:c7:a9:c2:3c:80:fa:3d:1e:1d:8f:8f:
                    78:6a:01:48:3c:a0:51:4a:2e:3c:4f:77:a3:c8:59:
                    bb:ec:04:54:61:a6:1e:04:eb:6d:ae:df:44:30:87:
                    93:f0:2b:42:21:13:81:ad:2b:88:3f:36:2e:8b:6e:
                    0c:92:26:4c:6d:58:81:da:64:33:63:24:08:08:42:
                    38:cc:49:38:a9:d3:99:b2:8b:9e:93:82:1d:7a:eb:
                    80:33:22:5b:90:73:b5:55:7a:20:9a:42:74:df:60:
                    5f:8d:30:94:dd:9e:27:e7:39:64:b4:f4:f3:56:57:
                    47:5d:3c:f4:a6:dc:98:d7:fb:32:33:bc:e4:9a:fe:
                    79:ae:de:77:3d:02:94:33:8f:dd:98:72:f1:3f:5d:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:97:0F:68:CE:8B:87:4D:A5:20:86:E8:02:48:F5:77:0F:EC:80
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:3f:cd:05:18:20:d3:48:5d:0c:30:d0:11:cb:4d:f4:01:
         e8:42:5c:a8:36:01:45:c3:a7:97:b3:50:02:83:60:c6:ee:51:
         ff:c5:a6:ff:2e:68:ec:1b:76:3d:e8:a5:05:1e:fd:a2:44:b6:
         2a:41:87:66:18:45:87:3f:d9:da:ea:f8:07:f8:7d:b0:f0:d7:
         39:ca:99:4e:49:fe:ab:0c:f2:e8:29:9e:5d:54:1f:12:8c:1e:
         11:4c:cc:ef:df:3a:cc:6e:98:00:cc:81:c5:fd:3c:b6:bb:c1:
         8c:42:e7:57:db:2e:e0:06:14:da:11:a3:0b:9a:96:6f:c9:3d:
         32:f1:3f:c5:db:2d:d6:ed:00:ba:76:3e:5d:ab:44:2a:fc:09:
         fd:b3:bc:38:1f:ca:15:ce:b4:ca:fb:84:b4:88:8c:a7:bb:7a:
         c8:7c:d7:17:96:17:b0:e6:b4:42:67:9c:7c:38:ba:ca:69:41:
         58:ed:4f:fb:7e:05:35:8a:a9:64:6d:31:d5:fd:d1:fe:76:b5:
         40:f1:5d:27:7d:ec:9c:3f:f5:f8:a1:f2:42:f9:ae:47:31:1c:
         8e:ac:93:31:2b:67:78:b1:b8:13:38:fe:5e:88:ff:74:3a:ed:
         6b:25:67:bc:8f:3e:48:e5:b3:f5:95:8e:18:aa:af:4e:44:b4:
         f5:68:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org