Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa
File:                     9A3920B4366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          mfxovs5RaqtMJrFFNnLHbwx01sFaovFquwuHcKcifGc=
Subject key identifier:   24:9A:CC:DD:5C:FF:42:4F:E1:9D:13:0E:19:91:A8:6D:6C:FD:2C:F9
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0C
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:51 +0000
ROA not before:           Wed 09 Aug 2023 03:19:51 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     151040
IP address blocks:        83.118.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Aug  9 03:19:51 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305d7-2b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:03:20:f0:a5:84:95:44:7e:c1:c5:8c:47:94:
                    1d:e6:b6:35:58:93:49:e6:8d:c0:0c:bb:36:ab:51:
                    12:ec:fa:47:7d:6a:96:03:ff:27:2d:6e:1a:32:8c:
                    c1:f7:88:e0:a1:90:20:67:6f:56:63:bc:a3:28:10:
                    42:9e:6a:9e:c5:9d:06:aa:b0:47:4d:89:ae:6a:15:
                    76:67:70:8e:db:2e:83:9a:b3:13:6c:e8:3b:bf:3f:
                    00:59:05:7e:81:f6:ca:ce:6a:6e:26:3d:b6:ff:4f:
                    a0:ef:f4:dc:cc:d0:eb:fa:95:61:37:8a:ee:58:07:
                    a6:9c:89:80:20:7c:7d:2e:58:97:71:e7:2b:48:4e:
                    55:9d:55:2d:1e:08:f8:8e:07:91:eb:d5:37:b5:db:
                    91:22:30:5b:0d:e9:d8:f1:25:e7:be:fc:05:0f:65:
                    f0:b4:ba:e0:50:ad:69:a7:3c:6a:1b:b9:85:bc:a2:
                    f4:53:6e:39:f9:1a:56:cc:82:41:ef:42:df:0e:58:
                    ea:b3:55:c9:02:e5:39:68:d8:d6:34:9e:25:87:af:
                    68:20:a1:e5:d5:4f:f8:59:d4:3c:65:fb:f8:45:be:
                    bc:9b:d2:0a:b4:95:eb:68:5d:ab:3e:b7:7d:5a:f3:
                    95:53:5e:d7:a5:c7:25:6d:99:4a:77:4d:aa:ce:45:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9A:CC:DD:5C:FF:42:4F:E1:9D:13:0E:19:91:A8:6D:6C:FD:2C:F9
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9A3920B4366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:75:f8:cf:58:1d:f0:fe:01:1f:8f:e0:ee:61:a8:02:7f:d7:
         6a:d3:72:9e:25:4a:97:9f:3d:1d:eb:5e:1e:61:c9:4b:44:22:
         d7:b2:88:dc:9c:f6:98:ac:10:26:c4:b7:42:89:62:93:27:93:
         fe:90:18:63:fe:a9:15:db:bf:2d:09:0c:c3:64:65:9a:ee:d5:
         a7:1e:e1:1f:1f:7f:cd:60:dc:5e:96:cc:ee:ee:73:c8:a0:3c:
         81:cb:9e:b9:c9:8d:85:05:e6:10:f3:4d:ca:49:e1:01:f2:25:
         a9:18:97:4d:4e:b2:0a:5e:4f:b4:ac:bd:8c:cc:7a:64:07:ee:
         c8:22:b3:51:38:f7:32:cc:20:c3:c2:95:38:f4:ee:2d:c6:a2:
         aa:36:1b:fc:16:5f:e3:59:54:cd:69:30:1a:a3:14:73:6e:f6:
         e6:3d:8e:d3:3b:9f:a0:14:ad:3e:29:05:39:e7:3b:18:f0:e3:
         7b:f4:28:ca:1b:f5:54:a8:bd:52:25:c6:09:1a:b4:e9:48:a8:
         fb:1c:2f:79:79:9c:32:ab:1f:85:aa:e3:df:b1:fb:c2:15:e8:
         cc:9e:f9:89:85:17:1a:7d:3e:5f:24:9c:51:f9:7b:bd:cb:59:
         45:d6:8a:9b:2a:98:ca:87:97:22:45:fe:48:f2:a7:a7:1d:2a:
         03:bc:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:21 2024 by rpki-client on console-ams.rpki-client.org