Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
File:                     B2B210782A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          Y6vC4gAeB6wL+rm5VBwbFkIWdlvLt7bAODN1RpesdB8=
Subject key identifier:   02:E0:59:24:82:98:5A:55:5E:AF:35:8B:4F:F9:66:36:0A:AE:83:F8
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0664
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:52 +0000
ROA not before:           Thu 20 Jul 2023 22:39:52 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38718
IP address blocks:        203.150.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:52 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b8-ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:3c:2a:22:6c:24:ec:9e:d8:c4:6e:d1:e0:
                    c1:5f:f8:dc:22:dc:1c:53:c3:37:d9:4d:93:9e:93:
                    ad:65:d0:f0:12:f0:28:ce:8b:dd:4c:4b:ba:53:cd:
                    a4:a2:30:c4:1d:ba:3a:43:7c:a3:c5:62:82:3f:b1:
                    8f:bc:f8:c5:b3:1c:4c:42:00:5c:aa:62:7f:ab:5e:
                    a1:f8:8f:04:fb:7d:eb:a4:f5:80:5e:8d:20:c0:51:
                    41:69:aa:a8:63:ba:2b:4f:35:fd:11:e6:89:5f:fe:
                    da:6d:db:02:e8:1f:e6:39:6d:7c:bd:53:92:0f:26:
                    97:0e:e9:01:db:ee:5b:4b:13:7d:e4:9e:79:f9:74:
                    67:b2:2c:dc:22:1e:e1:c5:d9:f9:5a:f9:d9:7e:4f:
                    b1:51:84:9c:91:b0:af:6d:67:29:60:a0:aa:20:3a:
                    f6:99:62:ad:1f:b8:7d:93:5c:e7:9a:22:34:e6:6b:
                    31:35:e4:8d:71:97:1d:63:0a:ce:db:5f:12:da:cf:
                    21:84:8b:88:60:06:c9:db:3e:d5:c4:89:b2:04:53:
                    98:43:1c:1b:08:ec:c3:94:e6:ce:e4:37:ab:5f:67:
                    22:0a:9c:73:aa:79:f1:81:de:68:68:63:fe:00:08:
                    47:48:f6:98:4d:cc:b6:f6:35:aa:83:aa:f1:e3:ee:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:59:24:82:98:5A:55:5E:AF:35:8B:4F:F9:66:36:0A:AE:83:F8
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B2B210782A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:29:93:9e:c1:ad:2f:fd:f7:fc:99:cf:91:6c:1a:eb:c2:
         ab:bf:b2:00:eb:a1:17:e1:74:6d:70:83:0c:5c:2c:88:f7:ab:
         5b:8d:de:88:6f:d4:23:a9:da:84:3e:39:2f:83:6c:9e:1a:e6:
         bb:dd:80:30:4d:c4:18:77:9a:98:53:06:a7:6f:75:2d:4e:6c:
         b1:8e:da:14:38:48:b6:4a:81:5d:7e:fc:f2:ed:c9:47:1d:1e:
         21:57:b4:ff:c5:bd:e2:ec:2c:ab:36:45:6c:8a:c5:10:c6:4e:
         4d:ba:6e:82:f6:48:5e:6c:d8:ef:80:53:d7:7a:c9:e5:07:db:
         f7:1d:17:11:67:11:32:0c:ea:28:d7:e8:21:27:77:91:4d:e6:
         db:cc:70:d5:ca:02:9e:99:89:33:10:56:30:2d:7d:1a:85:99:
         ed:c2:c4:1d:48:e8:37:33:bd:26:f0:13:ad:27:02:da:26:29:
         51:96:90:3b:8e:45:f1:ab:43:4e:c4:d3:0b:42:bf:8b:6b:ea:
         b7:f3:4b:8b:f5:6d:d7:32:ba:27:e0:b0:fc:71:ee:6f:05:60:
         4e:34:c4:17:95:a0:da:c0:97:cc:6b:2a:c4:d6:54:77:79:f6:
         75:ca:4b:b1:0a:06:fc:26:e7:27:20:07:79:4d:5e:6d:4c:c9:
         31:4c:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org