Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ACA389F02A4111EBA1B1BB3DC4F9AE02.roa
File:                     ACA389F02A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          lEn6qZpZAwTZUZQg048EV6tx0c0jsjyq013z3w/S0LY=
Subject key identifier:   14:67:38:94:4C:31:10:34:9D:FA:06:89:25:97:98:0F:09:A2:0C:21
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0659
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ACA389F02A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:42 +0000
ROA not before:           Thu 20 Jul 2023 22:39:42 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     133163
IP address blocks:        203.151.10.0/24 maxlen: 24
                          203.151.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:42 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7ad-c5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:84:e8:b1:4a:b4:a1:a6:1a:18:b0:93:d4:
                    3b:5b:27:00:8f:78:28:7a:8e:3c:e5:8e:30:bf:f7:
                    cd:c4:13:4f:c1:08:54:e4:d5:38:9e:b3:64:5d:ac:
                    f4:f0:9c:b4:6b:8b:96:12:c8:84:e0:e4:9d:b2:13:
                    9c:c5:90:6a:b4:0f:ff:02:d8:e1:e3:12:9c:35:50:
                    e8:9a:36:64:2f:61:2a:e7:93:5e:5e:f3:bc:e1:1a:
                    41:54:b2:e9:8b:21:0b:30:ff:d6:4f:b5:35:67:5d:
                    b8:5d:fb:23:91:df:a9:94:58:d0:48:be:86:95:cd:
                    7f:5f:fe:9d:e2:af:9c:36:a5:30:7f:14:78:50:8a:
                    c9:15:2a:b9:c8:33:d2:25:0b:18:c1:fc:99:58:81:
                    33:43:01:ea:2f:86:40:fa:cf:22:16:c2:7a:7e:87:
                    d0:11:4d:c6:ad:ca:ee:8c:08:83:8b:4c:6b:26:bf:
                    5d:6c:eb:4f:aa:74:83:eb:25:ab:d2:6f:0f:7d:69:
                    e0:c6:f3:be:db:4a:61:da:25:eb:2d:0e:be:55:66:
                    4e:37:28:28:de:b0:30:d4:9a:4b:8b:70:74:8d:e6:
                    06:35:de:38:41:63:f8:17:19:02:05:cb:c9:42:62:
                    b0:ab:17:35:4f:86:34:1b:56:54:1b:7f:90:51:fb:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:67:38:94:4C:31:10:34:9D:FA:06:89:25:97:98:0F:09:A2:0C:21
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ACA389F02A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:03:3f:61:7a:21:2c:ae:c2:6e:24:17:b4:aa:c2:17:94:
         f9:19:e4:5d:27:09:71:62:00:2d:a4:dd:54:9f:22:8c:30:7f:
         6f:f2:56:f1:a0:25:13:bd:7c:ea:9e:11:15:87:df:17:00:36:
         97:f3:ed:00:35:8c:a0:38:2e:27:93:cb:f4:cd:15:9d:82:47:
         ba:bf:29:f9:d3:9a:89:71:7c:43:3e:24:2d:f3:21:70:7c:ab:
         6f:c6:cd:91:95:0a:08:c0:08:e7:3a:2f:f7:35:51:a4:cb:5a:
         a5:ea:43:e7:76:6c:1a:97:ff:d3:c7:1c:dd:2d:53:e5:17:0e:
         4b:87:10:89:47:66:84:2a:17:71:25:ba:72:27:3d:2b:eb:aa:
         c4:c0:3a:a3:10:2b:92:a8:61:3a:53:d9:b9:55:de:e4:77:12:
         18:ee:fb:6f:1c:fb:26:37:83:47:f2:53:83:96:7e:95:08:9b:
         d4:d1:41:86:54:00:75:d6:25:a9:4d:7f:1c:80:57:5c:be:bc:
         6d:96:58:47:d7:09:12:53:c5:7c:6b:06:e9:13:e5:7e:df:0a:
         56:02:24:6c:33:51:de:c0:15:b6:4b:9a:3b:85:ad:05:2a:fa:
         8d:0a:b2:05:9e:8c:e6:42:85:41:ea:b4:33:40:2f:5c:91:89:
         e0:d4:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org