Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
File:                     4A4C8CD0F67311EBA0F18818C4F9AE02.roa (raw, json)
Hash identifier:          9vzPjJF3rtQvKpfvlxbYD4IlfPdmxmRRDWRzkXlypDE=
Subject key identifier:   42:6D:43:BD:B7:40:D3:76:0D:53:A2:A7:0A:F6:4B:90:03:FD:DC:81
Certificate issuer:       /CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
Certificate serial:       03FD
Authority key identifier: 5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
Signing time:             Wed 13 Sep 2023 01:02:28 +0000
ROA not before:           Wed 13 Sep 2023 01:02:28 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     136423
IP address blocks:        203.25.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl
                          rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 00:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B714/serialNumber=5BE97FA4D34B3ED31DBD64860E180093FEA111DF
        Validity
            Not Before: Sep 13 01:02:28 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65010a24-7f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:3e:a8:ca:f6:4e:c2:99:36:2e:e0:89:c1:
                    06:b8:23:73:4c:2b:80:ac:d4:dc:1e:6a:86:9f:ff:
                    88:6a:e0:a9:f5:ac:fd:41:69:50:f8:27:eb:4e:41:
                    cf:db:38:3b:47:82:30:b6:1e:4b:13:2e:2e:f5:4d:
                    d2:6e:42:1d:0d:fe:0b:f5:ab:5f:89:37:98:ac:57:
                    b8:fb:28:87:0c:e9:4b:af:e6:4a:f9:36:b6:7d:48:
                    e2:fd:7b:3e:f6:db:42:24:4a:94:f3:e2:43:fd:92:
                    e0:45:ed:9b:2a:19:59:f3:71:ce:e1:d2:4c:6f:4d:
                    86:5e:07:a0:a6:c4:dc:eb:42:b9:6f:aa:50:71:3b:
                    14:46:86:07:ae:ee:83:1e:eb:6c:51:78:ac:2e:e3:
                    37:a2:fe:3b:ce:95:17:5a:d1:58:47:d1:4a:6b:ed:
                    6c:9b:ea:5a:a7:d7:8f:65:55:d5:fb:72:75:4d:fa:
                    8b:3b:f3:ef:7a:70:cb:70:1c:cd:9a:10:3b:b9:05:
                    2f:32:78:c2:14:5d:ff:04:73:d3:6e:65:b4:cc:14:
                    66:5e:86:1d:0a:0e:ac:34:25:44:0c:2b:79:82:7c:
                    64:47:6e:42:30:79:09:ec:0a:4d:33:de:07:8d:94:
                    23:fc:79:65:c0:f0:d3:c4:fa:8e:aa:9b:0a:01:54:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6D:43:BD:B7:40:D3:76:0D:53:A2:A7:0A:F6:4B:90:03:FD:DC:81
            X509v3 Authority Key Identifier:
                keyid:5B:E9:7F:A4:D3:4B:3E:D3:1D:BD:64:86:0E:18:00:93:FE:A1:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/W-l_pNNLPtMdvWSGDhgAk_6hEd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W-l_pNNLPtMdvWSGDhgAk_6hEd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B714/6404C018F67111EB8B63A117C4F9AE02/4A4C8CD0F67311EBA0F18818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7a:3a:3c:4b:3f:f6:e4:df:5a:b6:1c:38:04:d2:73:d0:dc:
         10:ff:e8:81:72:27:9a:78:f9:4d:a7:1d:86:e0:87:aa:17:1a:
         03:3d:36:bf:82:91:22:a2:7a:7e:1a:87:17:2b:34:a8:a4:66:
         5a:df:cb:9a:90:e2:a1:e5:fa:d1:f8:44:10:97:82:d1:8f:60:
         a7:f6:60:4e:2d:a6:2d:2e:76:01:3e:96:87:39:74:7a:f6:40:
         84:b5:78:b2:aa:55:55:7b:1c:9c:29:6b:16:46:4e:3a:6c:12:
         76:68:9d:e5:86:10:77:a0:31:0e:cd:b3:f4:c1:31:40:42:41:
         06:27:3a:e9:72:b4:86:42:8c:eb:14:72:92:c6:03:9a:d4:e2:
         03:fd:8e:a9:f1:bb:69:5e:64:3f:19:4e:11:e0:b0:b7:f6:d9:
         9d:27:83:be:27:44:89:df:07:34:1a:c5:5a:ad:12:ab:21:76:
         f8:b9:b7:6f:75:1f:5f:d2:3f:bc:08:52:05:70:bc:30:fe:15:
         b7:b9:bd:bb:2f:5a:2b:1e:71:48:ba:99:8c:63:5a:8b:b3:80:
         6a:df:4c:ee:e1:b9:21:b0:f0:05:48:d1:a3:6a:94:40:b2:4a:
         16:ce:67:cb:d3:69:f7:e6:35:3c:a9:9f:a7:fa:bc:13:1d:52:
         9b:1b:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 02:22:34 2024 by rpki-client on console-fra.rpki-client.org