Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
File:                     18F7410671F311ECBA5DA710C4F9AE02.roa (raw, json)
Hash identifier:          dK4wMXuqZ/VEBpfJlL9LtzexBuDzAG0QNs11K5xMSLA=
Subject key identifier:   81:86:A1:89:30:CC:1C:63:1B:A2:8D:FC:47:00:74:F4:6E:0A:DC:57
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0B77
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 19:16:42 +0000
ROA not before:           Thu 28 Dec 2023 19:16:42 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45905
IP address blocks:        116.212.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 19:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2935 (0xb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
        Validity
            Not Before: Dec 28 19:16:42 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658dc99a-3018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:b0:a4:9f:79:cc:3d:27:ae:cd:68:e5:a0:
                    e5:52:af:81:1a:0b:c6:e8:70:13:17:44:2b:95:7c:
                    68:26:be:4b:09:5e:1b:7f:cd:2c:98:04:b0:3a:15:
                    71:e8:18:d4:07:32:a2:1b:28:77:e6:9f:d1:00:00:
                    55:08:13:0c:0b:b3:ab:6e:c5:a5:16:ce:c8:b2:60:
                    30:32:87:13:96:34:68:0a:69:4a:13:2d:d2:07:8f:
                    3e:ab:3f:91:cd:cf:49:12:6c:da:0c:3f:ed:64:b6:
                    7a:eb:21:d5:62:1d:0a:65:3d:3b:44:60:2f:95:5d:
                    db:db:62:41:a3:6c:d4:35:dc:c7:d8:04:73:0d:18:
                    78:ed:06:78:db:a1:78:e4:15:17:3c:7c:58:4a:11:
                    dc:97:0f:b3:4e:43:dc:62:10:9e:99:e0:4b:de:71:
                    a0:fa:1b:3a:d7:bf:7d:90:8e:35:a2:44:c7:5f:d6:
                    10:91:56:ab:4a:ff:db:f8:fd:4e:aa:50:e6:77:00:
                    32:fd:a9:da:46:46:e8:54:12:11:19:fd:ff:07:f0:
                    00:f9:8b:4b:87:54:d3:54:1e:a5:0d:ad:19:84:34:
                    50:55:96:b5:29:f7:e7:48:4b:97:cf:cc:13:56:40:
                    8c:e2:1c:27:df:72:9c:d4:ea:de:e8:fa:1b:24:e5:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:A1:89:30:CC:1C:63:1B:A2:8D:FC:47:00:74:F4:6E:0A:DC:57
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/18F7410671F311ECBA5DA710C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:06:b1:cc:a7:24:3b:56:44:48:b7:32:2d:07:c2:41:e2:48:
         37:75:3e:fa:e4:0c:64:81:19:b8:61:58:de:06:ee:e4:23:ac:
         07:35:8b:f3:f8:0c:ca:a5:28:df:e5:44:39:72:35:a2:b2:3a:
         15:5e:33:2d:65:d1:72:6d:e5:27:cf:10:98:f5:f5:6f:70:6d:
         a1:6b:19:f8:a9:32:fa:75:3e:e1:0b:04:47:80:1b:88:fd:7c:
         5e:42:f1:3e:41:40:6d:c4:37:3f:5b:68:ae:51:3d:01:09:e4:
         28:2e:05:2c:45:4f:01:86:6d:de:78:cb:91:f7:e8:ac:c7:2a:
         eb:91:d6:3c:af:07:f9:53:31:76:3b:4e:25:6f:65:8e:99:ee:
         b5:fc:04:3b:16:f0:3f:56:e4:d3:64:2f:e6:c2:b7:67:c9:d9:
         ac:db:df:9e:16:9d:6c:fc:ee:3e:04:8b:51:7a:69:18:b0:49:
         3d:6a:bf:1e:8c:57:c6:1c:fc:78:51:ea:58:f2:99:da:a6:57:
         7a:63:3c:a1:fb:f6:e9:a6:b8:d8:41:48:2d:0e:3a:fd:81:85:
         52:e7:51:03:a1:27:a0:24:15:8b:d5:57:c4:d5:d4:ad:f4:a7:
         74:8e:36:57:af:63:1b:cd:b7:49:71:8b:43:59:1c:2b:2b:27:
         da:f7:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 20:49:10 2024 by rpki-client on console-ams.rpki-client.org