Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
File:                     9663A3B0366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          47n11BUnYXFyOgdnag0cP1y39/QEOnkaJIpqDBKwDfU=
Subject key identifier:   0F:7E:38:EF:14:9C:8A:DD:16:60:B4:B3:6A:E0:14:13:E9:9F:03:54
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       05
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:45 +0000
ROA not before:           Wed 09 Aug 2023 03:19:45 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135329
IP address blocks:        83.118.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Aug  9 03:19:45 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305d1-7cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:8b:db:47:b4:60:2a:86:ba:cd:e5:3f:75:
                    7a:83:ee:ae:bd:9e:6e:e5:3c:cb:18:01:2b:a1:8d:
                    e8:e4:0d:0d:91:9a:0f:b6:5e:f4:9f:31:7e:27:87:
                    90:74:af:f4:a5:96:b6:bf:7d:d3:c6:2d:2a:10:a0:
                    d4:c0:9a:30:cc:e2:cc:6b:7d:68:05:f1:7d:79:86:
                    eb:2a:3b:f8:ae:73:de:12:4b:15:86:fd:c1:a8:a0:
                    ce:6f:1c:a4:38:23:0a:36:f0:ff:9c:4d:09:33:49:
                    ee:dc:01:19:5c:dc:57:57:0c:18:af:fa:bd:81:f3:
                    61:ec:7b:9d:71:2e:ee:06:a5:c0:b1:6f:aa:4c:d1:
                    e8:24:22:b6:55:65:ab:45:92:c5:18:e9:58:16:74:
                    ec:18:03:e6:7c:15:a7:f2:69:ab:bd:da:c0:bd:67:
                    62:53:35:72:92:dc:79:f4:67:9d:83:a2:73:a2:2a:
                    e6:21:e5:6b:04:2c:38:42:19:57:9b:e7:4a:c9:29:
                    07:ce:3a:4e:38:7f:38:0b:c7:f0:47:7c:c8:43:73:
                    bd:62:7f:ef:ea:e1:c8:9e:8d:d2:c6:e5:ac:99:b2:
                    05:0b:a6:05:61:3a:5d:e0:4f:f3:fb:00:fd:70:97:
                    c1:23:cb:67:09:64:ec:7b:33:dd:4e:b8:7b:de:cf:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:38:EF:14:9C:8A:DD:16:60:B4:B3:6A:E0:14:13:E9:9F:03:54
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:22:a9:40:2d:78:fd:d2:32:da:4a:ab:41:1a:94:85:d4:
         1a:50:10:c8:06:0f:9c:5f:10:d9:e8:45:24:d7:57:3a:15:6f:
         fe:e3:f3:f9:da:38:f2:f5:23:29:b1:a8:7a:39:ae:61:24:1a:
         27:9d:9c:da:69:49:8f:46:de:70:ce:aa:e3:22:bf:fb:e3:9d:
         2d:08:73:65:1d:fd:b9:8e:87:6e:32:65:0d:ff:ee:7e:2a:d2:
         6a:0d:4b:9f:db:5e:f4:6e:3a:81:e1:dd:3f:19:9e:fb:7e:5b:
         3c:64:d7:85:df:03:8e:c7:19:0c:c8:15:7f:5c:ed:d9:91:8f:
         9f:92:a9:d7:1b:98:7e:0b:a2:d3:81:c0:49:0d:53:0f:7d:29:
         4a:84:17:a9:18:0f:5a:91:47:f2:c4:47:4f:1a:d5:ca:95:92:
         c3:ea:87:11:63:e9:e8:4e:9f:5a:79:19:d3:ab:ba:30:58:f7:
         6d:43:06:72:fb:b8:d1:a1:f6:12:02:30:b1:0f:c0:16:75:a6:
         f5:eb:15:8e:d1:2d:b8:21:df:03:67:1f:6c:56:74:0d:5c:8f:
         fa:63:22:7d:89:88:1b:32:3d:9a:c2:27:83:b2:07:16:65:6b:
         9a:ad:c2:1c:9b:af:6b:27:6f:44:31:64:eb:5e:d4:44:ce:29:
         4b:bb:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org