Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
File:                     1C7F3C8A7EA711EE9C448073C4F9AE02.roa (raw, json)
Hash identifier:          hWU6Be3Yk7bT6R+jfDkjwFl0xGInVAmme5lE5BBY+0A=
Subject key identifier:   D1:EE:FC:89:52:72:A7:15:CC:84:87:4A:B9:40:2C:EB:C8:5F:1C:7F
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0387
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
Signing time:             Sat 15 Jun 2024 05:11:12 +0000
ROA not before:           Sat 15 Jun 2024 05:11:12 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     398343
IP address blocks:        203.32.22.0/24 maxlen: 24
                          203.32.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 15 05:11:12 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666d2270-b9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:ab:29:cf:9e:4d:aa:fb:51:e9:48:86:5d:
                    d9:2f:ba:c7:7a:32:0b:0b:0c:8b:1f:ff:58:79:c8:
                    7c:7a:00:6f:eb:fc:1e:4e:ee:39:a6:93:9e:6b:c8:
                    2c:1f:2c:4e:19:79:b2:3c:01:02:b8:f7:9a:69:5d:
                    d9:18:31:d4:7f:ea:8a:c7:89:6a:b0:59:3c:e2:de:
                    91:82:d5:5e:e6:d2:fb:a0:91:fc:87:48:df:15:f8:
                    4c:a4:53:6c:0b:18:dc:db:de:a0:09:31:70:ae:b1:
                    ad:81:06:3a:54:e6:40:95:ed:c4:b7:7a:29:cd:69:
                    0d:52:36:38:8f:cc:14:a4:0b:9a:2b:74:47:89:aa:
                    e9:2c:bf:76:95:23:98:a4:57:b0:61:a4:92:79:ff:
                    98:2e:a2:a0:42:cc:b3:d3:12:d6:38:95:26:6a:e6:
                    0d:7d:5b:13:15:11:1a:0f:00:1e:89:8f:e7:8f:29:
                    3a:f5:d2:f1:63:67:ac:2f:4d:88:53:ae:de:03:b0:
                    54:18:3a:4c:f6:f8:57:b4:e5:14:a4:c0:a5:a5:1f:
                    30:d3:99:6d:03:e3:08:35:32:6d:3a:7a:9d:61:5b:
                    46:2d:3d:6d:1c:c4:56:34:b6:5d:fe:3c:3b:6f:04:
                    47:44:27:ee:13:33:86:e3:b2:5a:4f:88:59:c6:c6:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EE:FC:89:52:72:A7:15:CC:84:87:4A:B9:40:2C:EB:C8:5F:1C:7F
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1C7F3C8A7EA711EE9C448073C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:28:9a:72:09:3d:20:5f:b1:0b:01:f0:30:4f:20:c9:cb:7d:
         67:24:b3:13:1d:3e:9b:9d:dd:3a:2a:6e:b4:ba:af:c6:f8:c2:
         c8:dd:1e:92:05:5e:bc:e3:f4:06:fb:4b:bd:1c:ff:c3:2c:84:
         da:57:d3:84:c6:d4:0e:c0:26:35:3e:a5:4f:27:0b:a4:42:5e:
         39:34:5c:50:c2:aa:5e:0d:50:54:9d:2f:5e:a1:ad:00:51:7e:
         7e:e9:4f:0a:07:45:d9:ef:56:81:e3:dd:8b:53:1d:ec:4b:23:
         e2:0d:24:d0:ed:4b:d5:96:db:27:63:c2:36:08:43:92:6a:c2:
         c0:ea:73:23:87:1f:64:c8:d6:41:08:86:ae:ba:c6:5f:66:03:
         80:98:e1:8f:d6:c1:27:cd:d5:ec:73:58:26:35:9a:09:55:97:
         8a:d3:0d:58:d8:ad:f5:f1:de:8a:e6:ae:f4:93:3f:74:61:a9:
         68:9d:55:f5:3a:f6:17:44:b6:b8:34:f1:65:a7:ed:9c:b7:6d:
         84:20:fc:fd:f4:5d:a9:f4:e3:8a:e4:2d:d7:19:5a:5d:87:24:
         d3:e7:79:83:e1:51:a1:a2:71:39:15:ea:ba:c4:8c:2b:e1:30:
         7d:58:fe:30:e1:d2:55:f6:c9:ca:c7:52:b1:cb:43:56:a4:65:
         5a:07:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:11:19 2024 by rpki-client on console-fra.rpki-client.org