Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/C7F4FA368DD311EBA4C2B766C4F9AE02.roa
File:                     C7F4FA368DD311EBA4C2B766C4F9AE02.roa (raw, json)
Hash identifier:          Z5AH8tcyrysySWEQHo3qwaWphyX2TqfFOah/g8j0RUw=
Subject key identifier:   CF:D1:11:63:47:87:03:72:28:76:97:3C:2D:40:C2:95:79:03:92:31
Certificate issuer:       /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
Certificate serial:       04FA
Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/C7F4FA368DD311EBA4C2B766C4F9AE02.roa
Signing time:             Thu 20 Jul 2023 23:39:59 +0000
ROA not before:           Thu 20 Jul 2023 23:39:59 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4826
IP address blocks:        203.24.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl
                          rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE
        Validity
            Not Before: Jul 20 23:39:59 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9c5ce-8ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:f8:de:b7:fe:ee:d4:7d:91:db:28:1b:5d:
                    c8:c0:70:56:26:a3:05:8c:54:9a:ec:d9:7a:ef:d9:
                    50:c9:74:8c:be:a8:0f:a6:ea:c0:ad:61:bb:35:81:
                    ca:1e:c3:28:fa:69:c9:a2:8c:ea:79:7f:a9:f9:89:
                    d6:89:bd:27:be:b3:c2:a1:d9:47:f7:e0:d7:49:e2:
                    db:96:f9:01:24:20:fc:7b:b2:6f:1a:b5:dc:f5:3f:
                    1b:5a:d8:7f:67:cf:a4:55:2b:db:e1:76:c0:15:d7:
                    c8:6a:b8:2a:51:83:14:b5:27:32:c4:71:7b:af:32:
                    b0:cf:99:a8:0e:d0:4d:30:da:48:cf:2e:00:87:eb:
                    e7:98:9d:ee:2b:a7:8d:21:3e:70:27:94:88:25:60:
                    04:93:80:3d:73:3b:f5:03:85:50:eb:87:dd:3d:3c:
                    75:44:82:0d:92:6a:88:e6:17:2f:6a:39:81:44:5d:
                    b3:61:05:f3:bf:1e:12:76:fe:cd:45:75:a7:2c:82:
                    17:a8:84:74:80:34:ad:50:13:48:cd:d1:90:af:be:
                    0e:f3:a5:2f:e1:66:4a:2c:c7:8b:46:f9:fa:3f:a6:
                    60:9a:4e:af:19:66:b1:46:48:73:e7:33:f7:af:ef:
                    b9:5e:67:3d:1a:99:f7:6f:6a:f1:cc:f3:9b:65:45:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:11:63:47:87:03:72:28:76:97:3C:2D:40:C2:95:79:03:92:31
            X509v3 Authority Key Identifier:
                keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/C7F4FA368DD311EBA4C2B766C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.24.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:99:b8:af:3e:68:1a:d7:10:17:a1:98:29:19:da:e6:e9:12:
         3d:b2:86:b4:a1:86:57:74:1d:58:e7:c1:e5:6c:38:26:4e:01:
         6b:06:88:ba:f4:d4:66:cf:51:a9:71:0a:bd:cf:9c:15:c9:14:
         72:b3:3f:52:dc:fa:b2:91:30:70:f8:f8:85:6c:45:23:fb:26:
         70:f4:d4:08:62:5e:ce:e0:5a:e8:b6:94:56:82:0f:dd:ff:7b:
         4d:25:57:61:b3:7c:a7:72:7d:bf:a3:b4:99:cc:f3:11:98:1b:
         3b:20:98:c1:4c:d7:98:c8:ba:3c:4c:3b:37:b9:90:fb:46:95:
         3d:76:c9:60:39:8e:b5:42:3d:d6:db:18:ab:cb:48:26:9c:91:
         9d:62:77:60:4b:6c:dd:3f:b7:9f:fe:62:12:2e:24:df:75:e1:
         e8:27:1e:77:62:ed:88:c2:3e:75:df:a8:9b:0e:71:40:63:65:
         aa:0b:99:8a:b1:69:70:eb:32:0e:b5:34:a7:78:8d:e4:d1:e9:
         6d:01:f8:90:06:9f:90:43:d2:ad:a8:33:df:eb:b0:6c:2c:35:
         0e:48:51:33:75:12:f8:83:69:df:84:04:5f:6a:65:c8:1e:05:
         d4:8e:39:32:ec:57:e9:94:fc:c2:f5:af:5d:95:59:e8:0a:c3:
         83:58:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:14 2024 by rpki-client on console-fra.rpki-client.org