Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
File:                     F00EED50ED2B11EE98C44146C4F9AE02.roa (raw, json)
Hash identifier:          kYBl0epgzbMHurAGBI4WFsCRe01Y1m75SxkMhr+QNc4=
Subject key identifier:   C3:BA:77:C5:69:0D:B9:E0:39:20:69:6A:41:74:8A:5C:F3:34:09:F6
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       0365
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
Signing time:             Thu 28 Mar 2024 18:01:00 +0000
ROA not before:           Thu 28 Mar 2024 18:01:00 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        113.20.40.0/22 maxlen: 22
                          113.20.48.0/22 maxlen: 22
                          113.20.52.0/22 maxlen: 22
                          113.20.56.0/22 maxlen: 22
                          113.20.60.0/22 maxlen: 22
                          223.29.128.0/22 maxlen: 22
                          223.29.132.0/22 maxlen: 22
                          223.29.136.0/22 maxlen: 22
                          223.29.140.0/22 maxlen: 22
                          223.29.144.0/22 maxlen: 22
                          223.29.148.0/22 maxlen: 22
                          223.29.152.0/22 maxlen: 22
                          223.29.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Mar 28 18:01:00 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6605b05c-2822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:3e:21:f2:91:76:07:7d:5e:9b:b1:51:9e:
                    e9:96:ef:85:a4:cd:23:ee:5a:77:cb:bd:32:72:5a:
                    a7:99:90:3a:79:50:9c:dd:d5:a0:0b:d5:76:53:fe:
                    3e:02:e2:a5:3a:19:3f:71:25:1a:33:43:db:34:d6:
                    e9:81:78:fc:51:44:e8:a5:d6:45:91:6a:50:45:42:
                    54:99:b4:37:cc:52:67:59:15:bb:f6:84:00:8d:55:
                    29:35:0e:33:79:ad:84:ca:bd:d6:87:6a:74:4d:48:
                    3b:9a:1f:6e:9e:36:80:20:66:5c:83:5c:bc:d0:db:
                    4e:fb:26:1a:c8:9f:05:f2:a4:63:ac:e3:90:05:40:
                    a1:12:26:66:71:1f:83:c5:35:c8:34:47:7b:86:b2:
                    f7:f5:03:58:d1:91:9c:c9:b0:00:99:23:ed:14:4a:
                    f9:ce:fc:ad:55:9c:f2:48:97:c2:a6:00:86:ff:9d:
                    0f:ad:ac:e3:ed:fb:12:f9:89:fb:68:b6:bc:cc:7c:
                    60:0a:d6:f0:aa:9c:95:44:8e:01:3e:79:37:0a:c8:
                    5e:65:28:3c:b0:39:20:5a:db:40:00:d2:2c:4c:95:
                    6e:b5:06:b3:e6:e5:f9:6c:01:d1:3f:36:87:44:e3:
                    00:84:50:57:75:38:59:7b:a6:3f:62:a0:90:5e:c9:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:77:C5:69:0D:B9:E0:39:20:69:6A:41:74:8A:5C:F3:34:09:F6
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/F00EED50ED2B11EE98C44146C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.40.0/22
                  113.20.48.0/20
                  223.29.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:83:0f:5c:0b:cb:51:99:1a:80:4c:06:1f:cb:17:c4:50:5b:
         e1:9b:55:c5:2c:17:8d:45:a9:51:32:a1:6c:e3:4c:df:55:93:
         5c:3d:5d:dc:61:78:e0:f1:d0:85:11:a2:4a:0d:49:c3:8f:61:
         21:ca:9c:c1:e9:66:fc:98:04:16:7d:d8:ac:b9:1f:08:1b:fc:
         da:45:31:79:72:f6:1b:c5:78:be:3f:0d:dc:12:10:d3:ab:82:
         ab:47:8d:16:7a:4a:9e:77:a1:7e:c6:81:ab:79:f2:38:40:32:
         fd:fa:6d:de:39:42:9a:b6:b1:ec:a1:77:ab:d9:8a:f8:e3:0b:
         fc:5f:6c:19:68:de:b1:58:f1:12:b7:59:29:a4:49:3a:68:ad:
         f3:d5:39:64:e6:3f:57:55:9d:62:a4:53:49:ad:e9:ea:8c:90:
         02:2b:60:04:c9:c5:ce:95:38:e7:5b:e9:1c:eb:e8:60:dc:76:
         a3:ca:da:b1:af:ee:14:40:f4:2c:eb:de:aa:a4:bf:bd:98:46:
         71:35:57:d8:0d:a3:5f:ce:64:ce:1f:cd:17:7b:07:2a:f2:7b:
         0a:8e:71:01:a7:33:8a:52:c5:90:6c:20:e0:5d:06:8d:a3:7d:
         fd:c1:ca:18:6a:27:9b:09:d5:c1:55:9d:95:07:18:b1:0a:ff:
         09:e2:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:30 2024 by rpki-client on console-ams.rpki-client.org