Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa
File:                     B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          OWgrgMyovBSKDlFxFvVXMGb6kQeTRClK7MWPmHdlOZs=
Subject key identifier:   83:BE:D8:66:1F:67:2E:30:35:9A:F6:5B:4F:94:CB:75:94:97:E3:78
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0660
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:48 +0000
ROA not before:           Thu 20 Jul 2023 22:39:48 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38184
IP address blocks:        203.150.35.0/24 maxlen: 24
                          203.151.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b4-eabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:91:3d:b4:8b:37:25:10:11:cc:20:5a:2c:
                    67:47:8e:54:63:6a:bb:5d:31:96:ba:82:2c:82:45:
                    b0:27:9c:e9:0b:e6:29:2c:b4:e2:ef:d1:bd:e3:22:
                    6e:e8:2e:6b:61:a3:b0:93:89:75:f6:01:8c:18:48:
                    72:98:c3:ac:76:ac:3b:15:52:de:c6:93:4d:9b:d5:
                    d5:77:ae:ad:5b:6e:aa:ed:3f:80:03:6f:b7:a5:49:
                    7e:7c:2d:2d:23:71:41:ac:ea:c6:77:c3:ce:5f:d8:
                    62:d2:79:03:2a:3f:38:f3:6f:43:10:1a:e7:6e:eb:
                    3d:c6:1f:8c:3c:2e:11:52:27:68:8a:aa:4a:59:f6:
                    94:c0:71:57:ba:fd:71:64:55:56:32:6d:ae:89:56:
                    cb:b8:22:2c:9a:39:ac:b0:10:ab:75:7e:2c:58:83:
                    13:ee:53:7c:48:87:25:17:70:2d:5f:65:44:fc:e1:
                    0b:6f:a1:08:ef:bd:e8:24:2b:46:98:d6:d1:2f:28:
                    34:50:ba:2a:be:a3:06:17:47:82:c3:68:04:0b:4c:
                    62:0e:69:3e:40:09:0c:93:83:03:99:17:6e:06:3b:
                    a6:b6:ce:da:a5:37:95:8e:f8:06:e3:a3:31:81:92:
                    b3:47:d9:45:21:cd:9b:2e:57:f2:c0:3f:05:99:0d:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:D8:66:1F:67:2E:30:35:9A:F6:5B:4F:94:CB:75:94:97:E3:78
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B0177DBC2A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.35.0/24
                  203.151.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:0b:8f:eb:05:2a:ed:a4:b7:df:5b:3d:40:27:e5:60:c3:
         98:53:42:10:b9:91:52:fe:8a:2c:0b:e6:e7:6b:d4:c5:73:56:
         3c:9b:a7:af:d9:0c:eb:46:f1:a5:9e:f0:41:5c:5a:06:63:4c:
         5c:63:8a:ea:24:56:09:bc:5c:e9:0e:91:7c:2a:bc:d3:c1:c1:
         28:f1:5c:71:d0:33:fc:62:8b:6e:d8:33:d4:88:57:17:e0:3e:
         a6:ce:2e:be:34:fb:b3:ab:dd:b1:f1:2b:dd:b9:0f:2e:5a:20:
         78:9c:cd:0f:bf:12:76:38:9d:51:1b:fd:7f:29:e8:12:5a:17:
         de:aa:ab:e4:6d:14:97:03:be:19:2a:a2:71:41:35:1e:93:ad:
         65:13:42:be:24:4b:8d:a9:ed:05:b7:3c:50:b6:ca:af:69:51:
         c2:eb:c4:f0:26:6b:9d:42:7e:dd:46:18:1e:4e:e1:29:c4:94:
         09:6d:4c:6b:1b:6c:fa:6f:98:5d:ec:bc:d3:b9:fb:3e:b9:87:
         77:0f:5e:0e:0e:d6:22:a0:5f:eb:b7:9f:07:89:4d:b2:91:52:
         34:a6:4f:91:32:cf:5b:b2:21:ba:ab:d6:02:f0:2d:b7:1c:95:
         7a:48:ec:87:55:89:ac:fb:9c:f1:cd:2b:93:88:4d:15:69:5e:
         4e:f8:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org