Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa
File:                     B7E4B4D8676411EA90B16258C4F9AE02.roa (raw, json)
Hash identifier:          i2FZygjHTM3jd1YxxXvDtMf98z45p9UNDCdKWGdB7Lw=
Subject key identifier:   BC:21:BD:E1:4C:E7:30:2B:47:36:22:01:A4:14:88:DD:5F:B0:34:7D
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       335B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:12:45 +0000
ROA not before:           Tue 30 Jan 2024 16:12:44 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     24213
IP address blocks:        119.82.224.0/20 maxlen: 24
                          202.182.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13147 (0x335b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:12:44 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b91ffc-3c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:f9:82:f9:32:c9:91:80:f5:9f:cb:04:08:
                    88:0a:c0:40:bb:89:a7:76:13:81:c1:57:be:26:50:
                    ed:a6:1e:84:9e:80:75:7b:f2:a8:ca:4c:18:bb:77:
                    b1:4b:eb:4e:9b:95:68:37:c0:a1:2f:fe:fd:2c:57:
                    d0:30:44:41:e6:71:fa:7e:03:b6:ae:1e:eb:e5:df:
                    ad:5b:3b:c0:26:c0:94:b2:61:2c:7c:fe:cc:76:9e:
                    77:61:50:f0:ef:52:09:c5:dc:9f:9f:2f:ea:c0:37:
                    77:db:ba:b1:19:5f:8e:69:b1:5f:d8:ce:f2:ad:fe:
                    6a:34:d9:2c:87:50:4d:6e:ee:42:89:2e:1b:c2:56:
                    1a:28:ee:24:53:a1:95:c4:24:d4:f9:e9:c8:e8:3a:
                    6d:cf:02:5c:6d:ff:75:c3:27:26:7b:ab:86:a8:e9:
                    eb:28:36:9c:92:44:b0:47:85:4d:f6:35:fc:87:a1:
                    42:de:30:7b:b4:65:c6:26:90:ba:c2:09:08:4f:79:
                    72:6d:29:10:d2:d5:19:c7:c2:83:a9:56:67:d5:a6:
                    51:bd:66:92:27:13:eb:2d:49:26:7f:e7:4a:77:50:
                    ad:12:d2:06:7c:5b:b8:03:1b:6d:71:d9:ad:9e:f9:
                    d0:93:a9:3c:87:23:94:7b:e3:f9:0c:1c:fb:8c:b2:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:BD:E1:4C:E7:30:2B:47:36:22:01:A4:14:88:DD:5F:B0:34:7D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.82.224.0/20
                  202.182.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:e7:0c:9f:aa:e1:87:de:94:61:24:c1:a1:19:de:5f:62:
         b4:10:05:27:65:cf:6f:38:ad:c8:d9:d3:b2:3b:ec:a4:57:7f:
         99:00:4a:5b:24:1f:60:06:36:ae:93:93:43:cd:4d:f8:8b:aa:
         aa:f3:fd:e2:96:60:a9:31:39:93:5c:7a:1e:bd:b1:9f:75:27:
         36:6d:67:e6:88:d4:97:1e:b0:4b:d6:8e:47:8f:88:91:f0:2a:
         91:bf:74:69:c7:83:59:ab:15:60:1a:06:c4:ae:3a:9e:af:25:
         e7:85:f7:6b:48:28:a9:64:be:0f:21:95:aa:02:81:46:44:7a:
         25:4a:e5:39:9a:3f:30:9c:59:99:4f:a4:e7:ab:61:26:41:48:
         d4:19:42:28:92:d1:c7:85:75:a2:de:27:1d:cd:e0:77:f4:55:
         d4:e3:80:90:90:d8:6b:c1:dc:f2:1d:ad:2b:7f:34:7c:ce:7c:
         de:ab:9a:64:4a:7f:4c:47:8e:12:61:f7:18:5e:9e:94:5d:92:
         ec:ca:c3:ac:5a:48:fc:f3:4a:6b:45:48:90:d5:a7:c5:6a:cc:
         1e:50:19:ec:a2:03:7b:cb:43:35:b1:34:fc:fa:8b:4b:39:82:
         a6:7a:5e:cd:53:6f:03:8d:3e:3d:ae:c0:3c:11:30:ac:58:f3:
         86:cd:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:10:27 2024 by rpki-client on console-fra.rpki-client.org