Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
File:                     D973D5BE97D711EEA1B09A33C4F9AE02.roa (raw, json)
Hash identifier:          izatJflc937blTSbiJsZOIjjq1ChWsCeAYSdNwpZor0=
Subject key identifier:   C7:85:4F:98:4D:2F:63:FF:96:7F:20:31:69:13:70:9F:E7:5D:0C:D3
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       04
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
Signing time:             Mon 11 Dec 2023 03:49:53 +0000
ROA not before:           Mon 11 Dec 2023 03:49:53 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149446
IP address blocks:        210.87.104.0/23 maxlen: 24
                          2401:5720::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Dec 11 03:49:53 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657686e1-6713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a8:8c:bf:71:bb:e5:dd:54:b7:7c:f0:3c:
                    5a:33:f3:9b:51:25:8f:fd:1c:e3:de:de:b8:15:21:
                    e7:7a:04:db:48:53:dc:df:9d:66:9f:63:e7:0c:01:
                    04:fe:aa:e6:1b:4f:3c:54:53:ce:12:32:aa:29:b6:
                    80:5f:6d:81:e9:88:46:38:61:9f:0f:79:6c:16:3c:
                    84:b6:db:74:f8:4a:fa:37:24:ee:51:14:c7:cc:03:
                    0c:33:bc:19:c4:a6:67:cb:96:56:75:4f:46:47:19:
                    ae:9f:81:33:b0:1d:78:44:6b:25:56:09:81:c6:da:
                    84:46:15:db:8c:9c:62:c4:7e:e1:87:6b:b8:ab:0c:
                    ca:c9:7f:a7:19:43:55:90:f6:28:bc:ac:fe:0f:24:
                    71:ac:88:4c:8a:91:9c:da:af:e3:d2:ff:f8:58:3d:
                    7a:bf:1f:a0:35:21:ac:8c:e2:ba:07:ea:e3:36:9b:
                    c5:0b:b8:af:60:ec:71:6e:70:69:47:b0:cd:2d:77:
                    fb:0e:10:63:05:51:00:08:fd:ce:40:90:48:5b:40:
                    e6:b4:b3:1e:64:a8:38:d9:19:3d:5f:19:7f:1c:ad:
                    67:1d:fe:9b:f0:ec:08:8f:82:66:bb:0d:9f:2f:21:
                    57:00:9d:ce:1e:b0:39:04:4b:1e:6e:13:7e:a7:ac:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:4F:98:4D:2F:63:FF:96:7F:20:31:69:13:70:9F:E7:5D:0C:D3
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.104.0/23
                IPv6:
                  2401:5720::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:26:01:6a:ac:4d:09:90:22:a1:33:d7:9d:c9:e3:ab:47:
         77:41:e6:ec:1e:2d:f5:94:04:8e:fe:3e:e4:f3:1b:e9:21:6d:
         40:ac:e8:25:54:54:b9:28:3e:a0:ca:02:4c:48:da:5f:c3:18:
         91:df:6d:39:93:f8:64:79:f3:6b:13:fe:4a:ca:8d:f0:f4:84:
         ae:7a:c4:68:ea:f8:94:82:90:fb:71:ca:73:ab:1e:ed:86:c4:
         46:93:38:7f:c5:1c:37:c0:ec:cc:4b:de:2f:68:84:0b:87:da:
         67:7e:d1:d1:96:c7:57:83:a9:80:d8:e4:6a:55:1c:9a:24:1c:
         1e:8a:e2:bc:16:c4:55:d6:bb:4a:06:29:99:65:69:6f:17:c4:
         45:44:45:69:78:da:85:66:dd:2f:b9:96:68:57:04:7e:aa:98:
         02:6a:01:4b:12:54:69:55:c1:56:49:94:22:5d:12:4f:d0:03:
         10:1d:87:75:7d:28:d2:9f:01:23:a2:f4:55:6a:16:32:ca:08:
         fb:73:92:17:f0:7d:fc:8b:e7:61:1a:ab:31:64:eb:5c:19:ed:
         52:25:0f:e9:6a:29:10:46:a6:32:75:d6:ed:eb:b4:2b:20:63:
         13:50:0d:0c:cf:20:52:a1:0d:96:73:35:d3:26:13:bb:62:c1:
         75:d8:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 08:42:01 2024 by rpki-client on console-fra.rpki-client.org