Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
File:                     B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          mA5AwmBtZVj7W9he0ymOAslhm5ECfi9/2XFtyAyVFAU=
Subject key identifier:   E4:4B:95:01:98:AB:51:00:C8:62:28:7C:93:A3:12:3E:4E:EB:CB:2B
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0662
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:50 +0000
ROA not before:           Thu 20 Jul 2023 22:39:50 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38296
IP address blocks:        203.151.104.0/24 maxlen: 24
                          203.151.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:50 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b6-987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:8a:d0:3c:4b:25:e3:6d:ca:05:04:b5:35:
                    13:2a:01:4a:39:2f:7c:10:3e:49:1d:e3:12:9d:b6:
                    72:6a:52:d9:64:e6:88:b7:7f:40:e1:42:a3:59:1c:
                    53:b9:9b:2c:ac:7b:fa:73:75:a4:ba:3a:51:f7:af:
                    b8:dc:71:4d:66:b3:7f:c2:53:68:b4:8f:ed:9e:9d:
                    1c:24:0e:59:4d:50:c8:14:90:b6:72:e9:ab:cb:8d:
                    a6:d5:b7:f6:30:0e:10:88:70:f3:00:36:43:b8:8c:
                    df:6b:7a:63:bb:d7:dc:a4:3b:26:d6:96:b4:56:31:
                    27:c9:58:36:43:0c:fd:46:14:74:a3:7f:2b:b8:a4:
                    0f:62:70:53:89:96:33:d1:08:a8:bc:3f:52:ee:7d:
                    be:4e:cf:a9:21:c0:bd:35:1f:bb:09:2a:69:37:3b:
                    57:35:38:2b:14:d2:50:38:1a:46:0f:62:77:51:e0:
                    9d:55:a9:31:dc:cb:72:e9:33:6d:a6:26:4e:ed:50:
                    bb:c3:cb:f9:3a:ea:00:f6:19:07:df:83:e4:c9:7c:
                    a5:8f:5b:7e:6a:0d:6d:6b:87:c6:c0:0d:bf:fe:98:
                    2d:b6:08:ae:a2:0e:9b:0b:8f:d2:2b:15:7d:31:52:
                    e0:9e:7a:49:81:bc:8f:e6:ee:f1:e5:b5:cd:c8:32:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:95:01:98:AB:51:00:C8:62:28:7C:93:A3:12:3E:4E:EB:CB:2B
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B18D8C2C2A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:8e:fe:86:ae:b2:f7:14:2f:b9:19:ca:36:cf:7b:d5:09:73:
         88:86:4b:f3:83:1d:98:54:34:08:a9:a1:9e:05:8d:93:25:86:
         31:d3:2f:1d:75:4c:50:19:ea:da:c3:90:7e:ce:14:0f:68:0d:
         d1:e6:93:8f:44:89:08:89:5f:6a:1f:11:00:76:6f:02:c9:49:
         bd:2c:a3:ec:fe:7a:53:f5:01:c0:4b:2f:5a:90:c8:a2:5a:35:
         f5:d2:ff:cf:24:ef:1c:3d:a8:0a:ce:94:21:31:87:fc:a3:45:
         e9:dd:c4:bc:63:43:80:9f:54:17:17:35:5d:ab:b6:49:27:95:
         75:c0:26:d4:db:fe:12:a8:27:05:41:44:7b:0f:c1:6b:15:ce:
         b1:a5:63:01:8d:c9:0e:87:ab:db:46:99:9e:2e:38:3e:82:28:
         10:32:7f:4f:8d:d8:48:9f:fc:f6:97:b0:cc:2e:c7:b5:e3:8a:
         d5:da:7b:77:16:0b:b1:a6:ac:1f:01:b3:ea:99:14:87:04:3c:
         89:c6:4c:ff:51:29:16:98:98:09:af:10:65:f4:d5:d8:bd:a4:
         81:68:45:08:45:11:d5:af:47:17:3e:50:08:ea:66:73:ec:5a:
         3b:ae:78:47:a4:3d:f4:9c:30:b2:be:fb:d4:92:f3:6d:53:eb:
         27:be:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org