Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D1BA7FEECA3B11EE8D7CEE5CC4F9AE02.roa
File:                     D1BA7FEECA3B11EE8D7CEE5CC4F9AE02.roa (raw, json)
Hash identifier:          yZ6YLhzRi6ov/ZX/TlyZ93QA3tYqcl4m/lS+FYXDfMM=
Subject key identifier:   C2:3E:EB:ED:A5:7A:0E:20:C9:FB:AF:27:41:A1:C3:C1:3A:97:4F:70
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0385
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D1BA7FEECA3B11EE8D7CEE5CC4F9AE02.roa
Signing time:             Sat 15 Jun 2024 05:11:10 +0000
ROA not before:           Sat 15 Jun 2024 05:11:10 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     212042
IP address blocks:        203.32.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 15 05:11:10 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=666d226e-5f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:e5:13:1a:13:cd:de:e3:4a:14:ac:de:30:
                    c9:c5:e6:e9:5c:56:cb:15:82:fa:8a:d4:6d:7b:66:
                    13:48:da:c7:8f:12:cd:42:45:a8:d5:ea:e2:a2:4f:
                    c6:f6:4e:5b:6e:12:70:d6:66:9a:95:70:bc:0d:84:
                    4e:89:1f:2c:42:ee:3f:42:7b:07:0e:db:24:e9:5d:
                    02:ac:c7:19:30:a9:58:e9:ce:e5:62:66:69:31:ac:
                    d7:15:0b:13:42:38:77:ce:d1:c7:22:4f:5a:91:e9:
                    67:ec:7d:71:55:b0:26:21:c4:27:8b:ef:0c:d8:73:
                    18:01:0e:d4:20:30:64:05:63:05:21:01:03:cb:ba:
                    bc:e9:f2:7e:5a:ed:44:06:4a:e9:ad:15:8c:e1:cc:
                    ec:70:73:a4:09:7a:ec:66:dd:72:f2:e2:61:43:bf:
                    84:a3:85:95:5e:fd:34:8d:1b:1e:d1:a2:9a:d4:c9:
                    1b:4b:f7:0b:72:fc:db:ba:f2:36:98:6d:b6:78:d4:
                    cb:a2:c2:7c:7f:9b:01:5e:0e:db:f1:32:b9:b5:37:
                    63:a8:45:01:38:4e:83:57:45:fd:b5:52:c9:5f:2a:
                    2b:57:e3:5e:d2:a4:95:1c:8a:17:36:d5:ff:40:c6:
                    50:8b:63:4c:62:2e:f1:5d:54:99:60:b1:3f:c6:85:
                    e1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:EB:ED:A5:7A:0E:20:C9:FB:AF:27:41:A1:C3:C1:3A:97:4F:70
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/D1BA7FEECA3B11EE8D7CEE5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:fe:7b:b0:b0:d4:af:74:a2:b2:fc:ba:65:3a:6a:3c:93:
         01:17:6c:d1:e5:82:4b:62:9f:02:e3:41:b8:a1:9a:8c:a4:b6:
         ec:cf:c1:b3:9c:60:45:36:b3:a6:eb:2b:9f:78:28:9c:96:fe:
         0a:c1:63:09:25:24:ff:b4:48:12:6e:86:50:ba:a7:58:dc:03:
         57:8e:82:7d:e5:77:8d:05:5f:44:bc:41:08:8a:12:a6:c2:95:
         54:56:be:8c:36:9a:fb:62:5c:b9:05:ea:84:41:69:e5:ae:15:
         77:4c:0c:f3:32:af:f3:8a:8b:b5:d3:97:59:1c:eb:98:94:65:
         b7:69:7c:cd:76:b5:b9:6d:13:b3:0c:02:cc:e3:d1:1d:ab:ec:
         4a:da:ae:26:39:2b:c7:65:b7:ce:1c:34:fa:ba:a8:d1:90:b1:
         b4:44:6d:ee:94:19:e0:f8:22:09:b1:41:50:c6:10:41:aa:c8:
         3f:61:c1:a6:41:27:79:aa:16:cf:20:3f:1d:f5:c5:c9:a2:0a:
         f0:d1:38:dc:2d:ec:f0:96:0e:1c:b8:a9:91:43:96:6a:1d:8d:
         b1:c6:77:a8:b6:5a:10:38:49:9f:e3:08:7d:7f:89:33:ae:ac:
         0b:8e:31:e8:2b:83:84:65:ea:9d:1f:c0:a8:26:0a:ec:59:d7:
         5a:fe:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:48 2024 by rpki-client on console-ams.rpki-client.org