Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa
File:                     9BDF5D70366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          SjWjQVS+EoRNlHr9bf3K2RwXAi3UrFve0b6hxDfJ+go=
Subject key identifier:   D3:70:3D:C6:AA:06:57:2C:6D:8D:83:F8:B3:49:D9:11:13:ED:AC:CA
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0F
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:54 +0000
ROA not before:           Wed 09 Aug 2023 03:19:54 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     45806
IP address blocks:        83.118.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Aug  9 03:19:54 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305da-afff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:13:3e:67:6d:7c:39:b6:4f:d1:f4:00:33:
                    36:e2:e7:41:45:d0:1f:8f:33:a0:be:98:db:4b:b4:
                    db:ab:75:bc:bd:0a:3b:a7:6c:02:48:e9:22:70:6f:
                    19:e1:8a:29:e2:fd:b5:f5:90:2c:58:2b:02:6c:f8:
                    9b:df:1f:b1:57:89:1c:09:31:b8:01:8e:f0:4e:92:
                    a7:81:48:03:41:2c:a6:17:bb:36:ff:ca:b1:3e:ea:
                    1b:c4:82:89:b8:6e:d9:bc:c2:41:26:da:e5:ac:86:
                    db:1c:d1:ab:c8:cf:2e:46:68:11:9f:09:be:fd:cb:
                    1b:1c:d3:41:8a:f3:d7:b4:c2:32:41:88:fa:87:8d:
                    3f:30:eb:81:19:0c:b1:16:b6:90:f4:9c:9a:59:27:
                    f2:70:d0:65:b5:9d:9f:aa:d9:7e:ae:34:fe:7a:fa:
                    c7:98:6e:e1:70:9f:75:00:9e:ed:9c:ca:c6:16:84:
                    0b:fd:7f:b4:bf:c0:07:2f:9a:99:10:d0:09:cf:17:
                    73:37:a6:e7:49:8f:f0:c9:03:6f:c0:07:6c:0f:07:
                    61:28:8a:e4:69:97:95:00:f5:eb:eb:6e:49:46:47:
                    c6:47:9c:94:c2:43:1f:b9:8b:f1:44:34:dd:f1:79:
                    6c:0b:0f:55:c1:ec:b6:df:62:b9:31:16:73:cb:b4:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:3D:C6:AA:06:57:2C:6D:8D:83:F8:B3:49:D9:11:13:ED:AC:CA
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9BDF5D70366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:39:e8:7b:ca:70:fd:c0:ce:35:e0:ab:94:c3:52:23:5f:6a:
         1d:87:06:d5:03:51:95:d2:03:af:0a:61:7f:d5:45:1e:7b:42:
         e7:57:4b:43:90:d4:58:c1:f0:d2:4f:f6:11:aa:cf:45:bb:18:
         00:7c:37:38:d9:ac:a1:cd:68:56:25:d5:bd:af:e5:71:f8:fd:
         1c:8e:b4:22:fc:0e:39:74:83:57:91:15:03:ee:fc:1d:e6:c8:
         d3:1d:ca:30:85:c6:0b:d6:a1:d7:37:1d:83:12:63:93:6f:83:
         39:67:bc:ed:b6:d5:e8:3a:a5:7c:cf:4e:ad:ac:d9:70:9a:9f:
         1b:19:54:70:aa:65:0a:b3:47:60:08:37:f1:a5:35:d3:37:81:
         4c:b0:d1:61:41:50:82:94:5f:35:23:84:98:d6:61:06:ed:d4:
         58:ff:50:4e:b1:fc:fa:e4:18:e4:ca:0b:9d:1c:4a:02:d4:4e:
         9d:82:9f:84:36:38:4b:6c:9d:d4:e8:69:ac:e6:73:1f:47:74:
         46:8e:3c:ef:0a:00:3a:7f:4a:4f:13:63:84:5f:9a:56:98:63:
         c0:4d:42:1f:b5:2b:bb:21:0a:6b:91:ed:92:eb:6c:82:b5:a4:
         5d:97:54:ec:47:22:5a:58:a9:33:c1:8e:7a:a8:1f:21:0c:07:
         28:27:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:21 2024 by rpki-client on console-ams.rpki-client.org