Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0D930732DC8611EE95F6F254C4F9AE02.roa
File:                     0D930732DC8611EE95F6F254C4F9AE02.roa (raw, json)
Hash identifier:          q/8+gb9ArT1KK167WnuTtlFhw/WiUMec0cjABmLbr5c=
Subject key identifier:   05:F8:9A:88:60:02:B0:52:FD:B2:A3:55:7F:89:D3:FA:62:AC:1B:E0
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       173F
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0D930732DC8611EE95F6F254C4F9AE02.roa
Signing time:             Thu 07 Mar 2024 13:24:41 +0000
ROA not before:           Thu 07 Mar 2024 13:24:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     38264
IP address blocks:        203.128.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5951 (0x173f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Mar  7 13:24:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65e9c018-8e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:95:25:21:7c:16:e8:b1:2e:1b:45:5b:fb:
                    d4:5d:c8:7e:e0:5c:f4:cb:d5:fc:40:92:74:cc:de:
                    41:93:16:d0:b2:1b:95:f8:10:13:f4:b9:77:9b:ac:
                    c1:7d:36:29:4d:e3:65:fa:75:6e:11:91:02:b9:f4:
                    4a:86:6c:d0:e8:b9:4d:1e:95:54:6a:9d:14:71:05:
                    12:ac:f8:22:d2:a7:4a:d9:2b:e1:bb:c7:c1:85:3d:
                    d6:04:d4:fc:4a:65:00:3c:68:6d:08:36:25:2c:02:
                    ce:3d:9d:a0:4b:34:e9:17:f6:58:7e:12:37:6f:f3:
                    70:6b:8b:06:55:aa:cb:01:71:1e:db:20:81:c5:f8:
                    01:7c:af:ff:76:01:d9:9c:5c:b0:62:e3:49:5b:4c:
                    33:85:f5:d0:be:06:c5:9b:d3:9c:b9:b6:0f:c0:40:
                    cc:6c:3c:00:9f:e1:07:87:3b:94:ce:1a:59:0c:7b:
                    86:87:f0:0e:fd:0b:ee:c6:38:3c:6e:c5:74:ca:55:
                    23:52:8a:a0:ca:f4:f7:d2:4d:35:7a:74:df:c2:69:
                    66:ac:d9:43:f5:24:25:73:17:94:b9:0c:e6:33:b4:
                    23:24:82:16:32:d9:4b:b5:65:42:21:33:52:d6:86:
                    b1:f3:a3:b2:f2:eb:b9:d8:e0:e7:72:ad:0f:cb:42:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:9A:88:60:02:B0:52:FD:B2:A3:55:7F:89:D3:FA:62:AC:1B:E0
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0D930732DC8611EE95F6F254C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:f7:57:bd:0a:1e:26:cf:7d:be:23:02:e9:3f:b5:53:7b:
         80:b6:b8:2e:f5:09:c2:fe:42:39:f8:19:9d:d8:99:7a:03:f0:
         dd:0a:d2:2e:fd:a3:46:9a:e3:a7:a8:b1:fb:78:68:71:47:1c:
         cf:1c:66:ac:d2:ab:57:c9:05:02:75:fd:91:03:2a:5f:d7:12:
         c4:90:b4:89:97:34:24:3a:6a:66:f3:ea:9a:c8:0c:00:fe:53:
         e0:ba:52:c8:ae:33:34:71:a6:de:1f:43:b1:ee:97:6a:7d:43:
         08:18:77:43:ca:8b:23:37:de:40:e7:b7:a0:be:28:67:59:a1:
         ca:66:9c:c8:9d:dc:dd:d1:43:ae:1b:db:21:9f:d6:15:15:58:
         47:f0:3e:4d:c2:d7:03:d4:b3:07:08:ff:bf:f3:0f:87:0a:ca:
         c4:86:42:65:91:e2:3e:d4:8f:5c:ff:13:e7:92:97:17:25:b5:
         2a:19:18:53:ef:31:31:54:6e:89:f4:6c:2a:25:a4:9e:1e:b3:
         da:f8:71:cf:b6:b2:f6:18:da:d3:a8:02:84:39:78:7b:35:5d:
         75:38:59:66:68:b2:8b:fb:49:de:af:cd:52:76:3a:a2:bb:3f:
         f7:99:4f:2c:5e:2f:df:e2:4a:43:ac:55:4b:e8:b3:e9:26:a1:
         f5:d4:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org