Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
File:                     235C33AA841511EEB8881E26C4F9AE02.roa (raw, json)
Hash identifier:          +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=
Subject key identifier:   17:43:C5:07:72:63:6F:32:66:F2:0C:9A:C8:30:E8:90:D8:58:FB:69
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0386
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
Signing time:             Sat 15 Jun 2024 05:11:11 +0000
ROA not before:           Sat 15 Jun 2024 05:11:11 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        203.32.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 15 05:11:11 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666d226f-5e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:04:01:5d:71:ca:6c:81:f4:cb:8d:26:6d:
                    62:01:18:97:56:6d:fc:12:af:d9:8f:b7:f8:85:d0:
                    3c:8d:31:79:6e:cc:6d:16:d0:e1:eb:c9:2a:9f:ce:
                    23:e0:6a:dc:3f:16:85:f5:22:c1:33:d7:f1:0e:1a:
                    a3:37:8d:74:1e:3e:df:93:73:6e:dd:c7:e1:11:35:
                    2c:d4:11:91:a0:e2:43:7f:3d:9f:c4:e3:b9:b1:d4:
                    15:79:70:d5:9f:52:51:2f:70:6e:c7:05:11:41:cb:
                    c2:5d:c5:cc:57:32:f6:b4:ab:fa:0b:74:ad:6e:01:
                    90:84:96:90:bd:20:7b:4c:34:7e:cb:79:28:16:a6:
                    49:db:ab:fd:ea:26:1e:09:c1:af:5c:13:70:c5:8e:
                    98:b5:f6:19:0b:cd:8c:63:46:7c:1c:21:2e:ef:a0:
                    f8:5a:6c:00:f5:d9:ef:62:34:aa:63:e6:50:b3:ff:
                    2e:88:5c:01:df:30:44:92:3d:77:f0:88:fd:7d:2c:
                    b9:1b:65:2a:64:f9:b2:01:0c:e2:69:b0:af:68:39:
                    3e:3e:50:ac:12:84:c0:92:82:27:6f:3d:7a:e0:b5:
                    ef:c9:81:b5:56:82:24:43:a0:48:24:af:ed:73:57:
                    84:23:a9:8f:ff:bd:4b:ca:f5:e5:3a:5d:e0:bc:f7:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:C5:07:72:63:6F:32:66:F2:0C:9A:C8:30:E8:90:D8:58:FB:69
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/235C33AA841511EEB8881E26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:e5:64:8f:67:86:eb:0e:6b:9a:8c:ac:d7:5e:75:15:7a:79:
         4e:68:82:fd:e3:20:43:f5:25:1a:8c:93:11:ec:ea:e7:0a:af:
         74:7e:09:22:cd:98:81:72:0a:22:62:ab:93:32:cb:41:51:ec:
         43:a6:71:01:6c:ed:e8:62:13:52:22:33:09:51:9c:ed:9e:09:
         2f:65:b1:ac:b8:f1:cc:f2:bf:66:90:0a:30:9a:25:78:04:8c:
         49:7b:00:5e:ac:a4:e7:65:f2:86:da:15:a5:3c:59:10:8e:6f:
         24:59:65:75:7d:fa:ac:14:6c:87:de:e4:e2:e5:03:6a:1d:78:
         52:2e:62:33:60:ff:18:16:98:d4:79:8a:51:80:6e:0f:2c:68:
         9a:77:6b:e6:85:ca:df:6d:41:48:16:e3:1c:d9:67:be:c2:b2:
         f6:b9:b1:bd:5d:09:31:af:bd:d7:91:d3:62:6d:90:49:08:c6:
         61:ae:54:83:6b:54:38:da:f8:34:f4:c6:85:e7:9c:be:07:2f:
         f3:0d:83:ae:94:19:75:93:c0:d5:99:b9:b6:5d:a1:4c:12:bd:
         c4:3b:bb:0d:ac:29:c4:21:8c:0f:40:d1:6e:e3:2e:1c:01:f2:
         47:cb:67:35:6f:f7:f7:2c:10:c6:80:60:ef:64:85:97:c6:58:
         4a:53:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:48 2024 by rpki-client on console-ams.rpki-client.org