Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ADB367482A4111EBA1B1BB3DC4F9AE02.roa
File:                     ADB367482A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          MR8VCyrd9xDw8UFXT+3HYHqluXbO29cCxPRSZmvmpiY=
Subject key identifier:   FF:3F:43:3F:A2:0D:40:D2:3D:00:C7:CB:86:D3:BF:5E:52:8D:68:DC
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       065C
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ADB367482A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:45 +0000
ROA not before:           Thu 20 Jul 2023 22:39:45 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137392
IP address blocks:        210.4.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:45 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b1-5f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:93:a2:b0:32:27:1d:1f:e9:e7:33:3b:c5:
                    b4:7c:5d:c9:6e:69:76:84:36:c3:e1:15:4e:68:1d:
                    f9:f9:84:9a:b3:88:de:39:e7:cd:42:3b:c8:44:8d:
                    1a:71:fd:7a:97:d4:81:92:20:20:ed:16:de:31:46:
                    c6:10:96:bd:7f:73:84:eb:2e:34:fa:98:58:f5:65:
                    41:3b:e8:14:ce:c2:ec:e6:96:14:68:8f:d2:5b:c7:
                    7c:05:d6:ea:c2:c5:70:0f:73:7d:ba:e7:e3:5b:f3:
                    65:f2:70:a9:a5:b7:c2:aa:56:48:0e:d1:93:76:7a:
                    8d:68:3d:84:b8:32:31:39:e9:3d:28:8d:98:cf:18:
                    45:08:9c:d0:5b:7c:6a:92:80:c6:33:57:68:05:da:
                    54:6d:99:0f:c0:dd:a5:84:61:7f:6c:4d:33:37:fc:
                    b8:e3:81:b8:5d:88:09:e4:61:d2:43:19:59:94:7d:
                    47:18:fa:48:be:8c:73:f9:3a:90:85:1b:42:b5:73:
                    ab:56:e9:4b:db:99:bb:10:1c:0f:92:17:b7:a5:b4:
                    99:84:68:84:bd:d4:e3:5b:49:32:87:58:a4:17:5f:
                    5b:32:f0:c4:62:ba:0d:db:56:ba:90:84:a0:31:94:
                    6c:ea:0e:7c:5c:c6:90:66:c1:62:ed:1d:04:bc:d2:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:43:3F:A2:0D:40:D2:3D:00:C7:CB:86:D3:BF:5E:52:8D:68:DC
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/ADB367482A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.4.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:81:19:0f:5b:3c:58:2b:f2:49:59:68:27:35:b2:e3:36:
         dd:36:e0:20:59:1f:ac:dd:66:86:5b:69:31:20:69:07:71:86:
         83:57:14:7e:ab:b3:10:c8:ec:a4:f9:fb:9c:cb:ec:7c:4f:79:
         bf:b1:59:05:bb:ec:ca:89:e7:76:31:05:fc:5d:e1:3a:ea:e6:
         dd:18:9b:1b:35:8b:28:ea:43:95:16:dd:96:ac:b5:14:b2:ad:
         48:15:56:d3:77:f2:6f:d1:22:82:e6:6f:52:13:5a:a2:46:82:
         54:65:7b:ec:13:0e:1d:76:8a:9e:da:b7:5e:47:22:c2:27:37:
         ea:af:39:fd:ba:cd:c2:60:b2:3c:90:6e:77:81:58:fa:a4:1e:
         f4:32:58:32:b0:30:0d:84:7c:2c:00:34:df:45:44:30:10:68:
         1b:e3:c5:30:ca:66:e9:b2:10:4d:f5:f8:45:08:63:f7:87:41:
         46:79:22:80:b5:db:6d:ea:75:ad:58:b9:68:8c:7c:4f:0f:27:
         af:80:15:91:1c:8b:d8:96:bd:87:1a:81:cc:62:ba:0a:8c:fb:
         1e:fd:86:e6:dc:95:e7:ad:24:d0:18:46:29:a4:81:8c:4b:be:
         60:71:60:d0:f6:3e:4a:8e:ef:71:34:e9:a8:66:53:fa:79:ea:
         53:60:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org