Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
File:                     7F716274C95611E9A630AC3DC4F9AE02.roa (raw, json)
Hash identifier:          0MbEEF6kdeQjNwgqumeC95sMb4C/GqBWTbNRh51G8ek=
Subject key identifier:   16:40:D4:FC:54:50:B7:7C:95:3C:E1:2F:C1:74:C0:99:08:D6:AA:4E
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       184D
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 17:04:18 +0000
ROA not before:           Thu 02 Nov 2023 17:04:18 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     59236
IP address blocks:        180.210.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6221 (0x184d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Nov  2 17:04:18 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6543d691-f52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:2c:c8:27:83:c7:73:ab:41:31:06:ee:99:
                    ed:4d:e2:c2:1b:da:20:d0:a1:ee:a1:9c:50:71:70:
                    de:11:4e:16:ae:7b:53:a0:b7:ab:04:8b:02:2f:8c:
                    a5:d0:cf:70:57:09:a1:5f:d9:6c:4b:24:6b:2f:11:
                    aa:0f:55:c6:23:ba:3c:2c:60:f3:93:4e:ac:aa:66:
                    dc:83:b8:25:ca:20:ec:1f:f5:29:4c:5f:93:a1:50:
                    df:4f:4a:9d:88:c4:3b:4f:de:48:44:d5:a3:6f:48:
                    f9:49:6c:4f:20:8c:2c:99:a7:38:be:b4:99:04:7b:
                    36:b5:21:8a:ba:ee:bf:a4:99:15:bb:14:c7:fc:7a:
                    03:75:86:a9:1c:21:12:bf:7e:8d:6c:b1:34:95:97:
                    2e:1d:7f:fa:99:32:3c:b8:a8:b1:50:78:e7:5c:71:
                    9b:4b:c6:c6:a0:70:0c:d1:0a:d8:23:d6:08:3e:df:
                    c8:a4:17:ae:5c:b9:61:15:bd:66:1d:88:18:51:0d:
                    5c:45:a8:30:7d:8b:ab:19:d0:4e:39:35:b4:28:07:
                    7e:7d:bb:f9:30:8d:ad:0e:b9:f3:e7:d8:04:cb:3d:
                    77:d5:68:6f:f2:3f:1c:08:c5:0a:ba:44:c5:f4:40:
                    ee:65:b1:af:d0:0f:7d:ba:a2:10:ca:db:f2:e0:1d:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:D4:FC:54:50:B7:7C:95:3C:E1:2F:C1:74:C0:99:08:D6:AA:4E
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:61:6e:73:9d:bc:94:f2:e0:00:a1:9b:f0:4f:ce:be:d7:61:
         9e:a3:64:93:d7:c9:b7:8d:21:e2:e1:5a:43:f6:da:25:4b:8a:
         c9:b1:5c:23:aa:72:f6:61:49:12:08:3f:6c:31:f6:f7:0e:1e:
         69:e0:78:79:a8:0e:4b:6f:d1:9c:f4:ef:ff:5d:7b:49:73:8b:
         69:9b:4a:03:b4:0e:3d:91:0b:a4:69:ca:80:41:96:2f:26:e1:
         0a:96:0c:6a:06:99:75:71:9f:fe:8a:c9:b6:b2:55:ed:85:f3:
         0c:ac:3c:17:5f:9a:1e:b9:32:ba:1b:5a:2d:10:ca:13:97:20:
         93:7f:4e:2c:eb:d9:18:46:9b:1e:5c:d4:f8:13:f0:a4:f7:58:
         0b:00:68:b1:f3:85:e7:8e:54:96:a0:04:ab:e3:82:72:91:96:
         7b:b4:02:f1:34:3e:c0:7c:1c:16:c3:8c:d1:d3:0a:06:07:79:
         c7:11:73:2e:57:9f:fc:7b:f4:f0:c6:3f:97:c8:63:e9:ca:97:
         cc:e1:d8:f2:e2:85:b7:d0:f9:42:e1:01:c0:88:98:f9:9e:9f:
         c3:4f:73:19:a2:16:24:35:e2:27:91:09:99:9f:b5:d8:4e:94:
         f4:2e:ef:a5:df:5a:8a:16:ee:25:c6:ce:30:f4:8b:30:ae:55:
         01:aa:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:03 2024 by rpki-client on console-fra.rpki-client.org