Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
File:                     77490C9A792F11EEBF849942C4F9AE02.roa (raw, json)
Hash identifier:          SW94V8FK+wh3g2owH4FSTBAuPQXa1Wqrh4t/o9T94fQ=
Subject key identifier:   8E:44:A6:7D:2F:9F:AF:C6:6E:5C:6C:E6:F9:4C:CC:C9:AE:39:67:96
Certificate issuer:       /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
Certificate serial:       E7
Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
Signing time:             Tue 13 Feb 2024 05:16:51 +0000
ROA not before:           Tue 13 Feb 2024 05:16:51 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     132292
IP address blocks:        203.7.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl
                          rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 04:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020
        Validity
            Not Before: Feb 13 05:16:51 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cafb43-1b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:51:92:c8:9a:d7:ed:f1:8d:88:6a:d3:a6:
                    54:c6:f0:d4:88:c2:4f:48:72:b8:5a:8a:47:48:63:
                    fd:a9:df:57:52:37:ed:b2:8f:bd:20:bd:b3:eb:c5:
                    c2:7f:f1:4b:22:a0:e9:d3:80:35:d0:20:73:cf:98:
                    5c:27:e7:d9:55:ab:fd:11:29:4c:c2:fe:2d:ee:5d:
                    04:40:1f:b0:c0:24:17:36:5e:a7:b3:f9:1a:fa:30:
                    fb:62:8b:43:e7:6a:96:73:90:c2:f6:1f:1e:82:42:
                    14:4d:91:32:7c:73:61:c1:90:c1:1f:8b:31:03:26:
                    52:b2:0e:00:3c:31:da:71:c4:3c:ae:92:5f:bc:fd:
                    9a:2c:c3:a8:b4:22:43:45:39:b1:78:1d:20:fd:6a:
                    f8:c8:8a:8b:c7:6d:9d:7f:08:86:27:9a:2e:99:68:
                    80:5d:18:e7:b3:e3:e5:ab:9d:46:1e:3f:d5:3c:e2:
                    1b:c1:04:7c:68:03:1a:30:68:a3:19:eb:f5:68:7c:
                    b8:19:e4:5e:1e:6c:67:ee:74:d8:c8:c0:e2:96:98:
                    cd:18:a4:e1:19:2d:26:9b:b3:8c:ab:65:59:80:b2:
                    12:e4:7b:3f:12:52:3d:1b:ca:83:2e:aa:df:7e:5c:
                    ca:72:7e:61:84:ae:b3:d8:f5:31:f7:6a:34:4a:6e:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:A6:7D:2F:9F:AF:C6:6E:5C:6C:E6:F9:4C:CC:C9:AE:39:67:96
            X509v3 Authority Key Identifier:
                keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/77490C9A792F11EEBF849942C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:31:d5:51:0b:12:d9:6d:ac:71:97:fd:c6:1c:fc:e8:5a:
         2c:f8:6c:2c:db:b6:3d:95:2e:c5:4e:a3:61:8e:6a:ff:96:5e:
         41:4b:3c:55:2a:af:6e:73:41:56:7f:a6:f9:ca:22:a4:6b:d8:
         f2:f5:e1:8e:23:c3:e2:c5:58:05:51:aa:1a:63:fb:ee:1a:02:
         87:fe:10:6d:30:03:df:3d:46:1c:e0:94:22:cc:b3:c2:f9:7f:
         ef:6d:45:e8:de:47:5a:81:78:a6:18:29:4c:9a:bd:1a:bb:55:
         77:0e:0e:83:cf:56:31:99:07:69:5c:dc:69:4a:c4:75:99:10:
         96:6d:19:84:ca:96:35:8d:4f:69:78:f0:80:27:fa:da:b4:77:
         6b:cf:2c:8d:35:96:9e:bc:32:4f:77:ef:93:db:f6:62:6a:cc:
         8d:dd:17:92:14:aa:13:46:06:c9:84:4b:44:10:bc:53:f2:fc:
         61:ee:a6:6e:4f:a8:f0:f9:aa:c2:3b:49:2f:80:e2:7f:41:47:
         9b:f3:07:00:d4:0e:ff:3c:40:6b:bf:59:a5:35:f6:d3:f5:bd:
         1e:3f:02:2a:ef:76:1f:bf:e8:24:e9:67:45:7d:79:19:99:bc:
         27:c9:0c:d7:d3:05:fd:7c:e0:35:97:e0:ca:bd:3b:28:2c:87:
         5d:f8:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:46:28 2024 by rpki-client on console-fra.rpki-client.org