Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
File:                     BE466468B8D611ED876CBD7CC4F9AE02.roa (raw, json)
Hash identifier:          B8J4z4SHT1xw/Zl5RJwd8aAIUXPGiKqlrnvZuj9+G/g=
Subject key identifier:   92:B0:1B:A9:D4:5E:EF:15:F1:7E:84:D8:18:F4:92:48:77:82:2B:4A
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       184C
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 17:04:17 +0000
ROA not before:           Thu 02 Nov 2023 17:04:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     23893
IP address blocks:        180.210.128.0/19 maxlen: 19
                          180.210.128.0/23 maxlen: 24
                          180.210.130.0/23 maxlen: 24
                          180.210.133.0/24 maxlen: 24
                          180.210.134.0/23 maxlen: 24
                          180.210.136.0/23 maxlen: 24
                          180.210.138.0/23 maxlen: 24
                          180.210.140.0/23 maxlen: 24
                          180.210.142.0/23 maxlen: 24
                          180.210.144.0/23 maxlen: 24
                          180.210.146.0/23 maxlen: 24
                          180.210.148.0/23 maxlen: 24
                          180.210.150.0/23 maxlen: 24
                          180.210.152.0/23 maxlen: 24
                          180.210.154.0/23 maxlen: 24
                          180.210.156.0/23 maxlen: 24
                          180.210.158.0/23 maxlen: 24
                          2404:b00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 16:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6220 (0x184c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Nov  2 17:04:17 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6543d690-0f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:64:9f:dc:01:7b:ce:f9:18:bc:12:11:23:
                    53:e5:47:81:68:92:b7:28:b7:98:c7:e9:7d:0d:b5:
                    47:e3:6a:0f:a9:4e:aa:ac:82:b4:72:8d:f3:80:69:
                    88:5d:cf:63:f3:23:b1:0a:35:41:4e:3e:2c:24:54:
                    4b:ae:8d:ff:c1:be:06:7b:22:ec:96:7c:2e:88:c6:
                    f9:17:b1:bf:97:ff:ea:d0:de:5e:99:a6:97:a1:28:
                    c8:e5:90:9e:4b:c5:8d:13:af:c0:45:18:53:4e:bc:
                    34:a2:8f:a4:56:f0:aa:37:47:77:7f:ee:7b:05:02:
                    5f:52:ab:4e:99:9b:9e:66:98:08:37:ac:fe:91:8b:
                    15:a0:52:1d:e6:f7:ac:93:02:58:27:42:e6:f1:13:
                    ab:3d:cd:01:39:85:e5:d3:d6:0d:03:e8:6a:4d:a9:
                    44:9e:92:33:de:51:ee:a9:30:78:61:8c:f2:ff:99:
                    b2:ab:20:62:27:e5:ab:9d:30:d0:44:f4:8b:f2:49:
                    7e:ba:65:e1:76:6b:dc:48:b6:4e:61:d8:f1:83:ca:
                    88:5e:6c:bf:c5:5f:13:69:35:95:4b:8e:7a:51:2d:
                    27:3f:11:bd:54:b8:ca:ca:5f:6b:ec:ed:5c:e0:01:
                    5b:33:9b:0e:5b:c6:71:b9:15:3b:a3:b8:20:5d:2b:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:1B:A9:D4:5E:EF:15:F1:7E:84:D8:18:F4:92:48:77:82:2B:4A
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/BE466468B8D611ED876CBD7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.128.0/19
                IPv6:
                  2404:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:51:e8:7a:cd:31:d5:73:62:1b:34:e7:04:fe:11:26:5a:65:
         0e:8c:26:23:7b:b0:c1:b2:21:ad:bf:f9:04:4a:ff:7e:18:7d:
         03:19:f4:0a:ba:d1:e4:73:35:6d:bb:f0:a3:b8:23:12:4e:dc:
         85:97:30:93:81:25:fb:d1:f1:61:47:26:80:58:71:16:a7:36:
         84:d8:d3:91:ad:3e:c2:97:b1:f6:51:48:78:43:1e:55:0b:eb:
         b0:f2:1d:b6:a0:b9:20:58:50:38:a3:b7:ae:19:51:f5:19:72:
         43:c0:20:df:dd:40:35:c6:81:b4:b1:a5:b1:51:e0:41:c3:23:
         97:00:c1:d7:ec:4d:b7:ac:22:3d:3f:f2:02:0a:db:e8:60:a0:
         7c:1d:e7:e2:10:ee:fd:1b:36:41:e3:0d:bb:91:da:03:4b:57:
         34:12:f4:c5:f0:55:4e:48:1e:9c:00:20:15:57:e6:bc:df:cf:
         16:e9:bf:b4:14:83:4b:a7:ba:23:1c:8d:a1:43:66:8a:99:f7:
         a7:1b:5d:9c:19:b9:75:2a:58:60:b0:79:75:dc:d1:fa:7c:72:
         3c:1f:c7:ec:bc:3c:62:81:eb:e8:f8:7a:30:1f:bc:99:0f:45:
         36:ea:2b:97:65:fa:e5:da:ef:a0:a1:f2:3f:de:9e:c1:df:15:
         0e:da:34:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 17:44:48 2024 by rpki-client on console-ams.rpki-client.org