Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5277E3E614211EFB0CFB65AC4F9AE02.roa
File:                     F5277E3E614211EFB0CFB65AC4F9AE02.roa (raw, json)
Hash identifier:          FsKU4F/te/9crR+wDw/RSIyBFDJMkgYuiFnGdnwHuQI=
Subject key identifier:   0C:D3:AF:87:94:87:68:4F:0B:20:F1:5B:2E:DF:E6:45:32:39:EC:97
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       9774
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5277E3E614211EFB0CFB65AC4F9AE02.roa
Signing time:             Fri 23 Aug 2024 11:29:28 +0000
ROA not before:           Fri 23 Aug 2024 11:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134852
IP address blocks:        114.69.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38772 (0x9774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Aug 23 11:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66c87298-c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:8b:cb:2a:bf:87:34:4c:fc:61:35:5b:3f:
                    69:1c:4a:1d:71:2e:1b:eb:bb:eb:83:9a:2c:38:69:
                    8f:e7:8d:98:b1:1d:98:e6:6b:33:37:d3:2e:a0:ca:
                    f4:60:e9:a6:02:9e:03:2c:fd:fb:0b:4a:c7:6b:a2:
                    c4:f1:bc:af:df:40:f7:8c:b8:fd:b3:9d:bb:70:04:
                    63:c8:79:24:dc:e7:90:4d:ec:7d:d1:d7:f1:17:e0:
                    97:ac:e7:01:1c:e2:ef:a2:47:e5:20:4a:fb:99:4e:
                    d6:1c:7d:0b:96:c0:39:6e:95:33:5c:f9:36:06:bd:
                    2b:1a:f5:c2:a3:26:11:68:4d:53:c6:32:45:f2:7c:
                    01:fa:ae:94:2a:92:1d:ee:f3:03:f3:38:df:79:a1:
                    dd:40:16:5d:45:2a:8a:5b:7e:b6:ce:75:0b:81:97:
                    08:9b:c0:c9:14:31:25:87:1e:50:da:28:65:22:f4:
                    29:e5:4e:7a:a7:a3:2a:ea:21:5a:03:05:85:31:40:
                    7c:2e:62:4b:36:48:b9:eb:0e:2b:4c:4f:11:95:8a:
                    d4:75:7e:c2:4f:f2:ee:1e:39:94:2a:e9:6f:f6:3c:
                    9a:1e:9d:e8:84:7b:46:99:ac:7f:ef:ee:58:70:59:
                    26:88:a3:10:d2:83:e5:73:34:3a:fb:9f:00:60:31:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:AF:87:94:87:68:4F:0B:20:F1:5B:2E:DF:E6:45:32:39:EC:97
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F5277E3E614211EFB0CFB65AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.69.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:e1:6e:0b:06:4e:8d:0f:c8:6b:0f:20:f7:af:6c:2b:ee:
         4a:bd:50:4c:98:7b:52:62:5d:26:5c:73:bf:fd:b4:33:50:a6:
         e6:17:3a:ac:b0:29:d8:04:ca:a7:6d:00:e6:57:e9:4d:8a:d0:
         21:44:5a:01:79:fe:49:9e:5b:48:84:d2:0f:7d:e1:82:0d:d2:
         4a:bc:5f:21:04:16:0d:37:90:9c:f1:9a:ae:0b:7e:27:05:1a:
         d9:75:85:57:44:fd:d5:23:6a:b1:fb:87:2b:4c:70:ff:07:6a:
         e4:3a:0e:ff:51:da:6d:b5:60:ff:c2:bd:69:1a:5a:e1:51:e7:
         08:15:c5:39:48:52:3e:fc:ca:05:26:6f:dc:14:9d:34:2e:b4:
         f8:7f:77:74:6f:7f:77:05:92:18:11:1f:5f:e9:b4:8f:8a:1f:
         59:cf:33:79:4e:50:15:a5:ce:d1:e6:24:e8:88:f5:7f:f4:fc:
         1a:51:15:b9:02:2d:dd:f0:3b:bb:bc:45:8b:56:e2:e8:25:7d:
         b8:c1:e6:41:53:f2:4e:c4:a9:5e:3b:ad:f4:a0:5d:49:3e:8d:
         a3:da:c7:87:57:7b:12:ca:0d:7e:51:9c:9d:a6:b3:59:85:8b:
         ff:8c:42:c2:fa:92:7d:0c:7f:0e:4d:44:b9:cf:ea:96:d8:69:
         e8:52:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:01 2025 by rpki-client