Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B374E3E62A4111EBA1B1BB3DC4F9AE02.roa
File:                     B374E3E62A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          r+3LfkkCOfr/p2w8TTw6RaNEEPBJ6oGLHxNttOlgGZE=
Subject key identifier:   54:9A:54:34:5B:2B:EB:E1:47:F5:94:20:C5:09:2B:8B:7A:F0:85:FC
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0665
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B374E3E62A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Thu 20 Jul 2023 22:39:53 +0000
ROA not before:           Thu 20 Jul 2023 22:39:53 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     46013
IP address blocks:        203.150.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jul 20 22:39:53 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b9b7b9-13d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:7f:99:3f:4f:d7:00:e0:52:89:48:90:62:
                    9b:34:97:02:c3:f2:50:c8:2d:1d:11:4f:29:bd:47:
                    40:c5:eb:0c:60:f9:eb:d5:84:b6:46:cb:b6:35:15:
                    8c:01:62:6c:1b:31:6f:57:22:c3:0f:37:c7:cf:4f:
                    79:8e:1f:af:75:ad:45:51:50:90:ca:a8:01:f2:a3:
                    3f:3a:b9:07:53:7a:5d:3d:c8:c4:ff:e1:a6:9c:f4:
                    33:b4:a0:92:06:9e:8a:b8:44:c9:8f:a3:86:93:2b:
                    bb:b8:e9:d4:b6:79:41:c7:fd:d3:1f:49:c7:36:f4:
                    8a:4e:3a:da:3e:ed:5d:de:9c:ce:1d:25:ff:8e:b2:
                    f1:f2:8f:7d:72:7d:13:80:05:e7:64:85:63:49:18:
                    cb:ed:a4:d8:05:18:68:3e:57:53:5e:4c:12:e4:10:
                    6d:4d:35:e3:9f:f5:91:de:29:a9:cb:7d:22:84:f3:
                    da:78:1f:da:a1:aa:ef:9a:f9:9e:bb:67:03:74:7a:
                    0a:20:f0:8f:da:aa:ed:17:1b:df:23:11:1e:c2:73:
                    9e:9d:c0:a5:d3:2e:ae:3f:96:7d:3f:1b:dc:e1:31:
                    43:08:e5:94:81:ce:11:1c:11:50:e8:e1:f0:c4:74:
                    80:4c:a4:68:25:66:2d:31:5b:d1:20:f4:80:2d:62:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:54:34:5B:2B:EB:E1:47:F5:94:20:C5:09:2B:8B:7A:F0:85:FC
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/B374E3E62A4111EBA1B1BB3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.150.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:dd:a2:48:18:69:a6:69:1d:99:1b:ad:c4:48:cc:e0:fb:55:
         99:b4:c5:07:af:f9:f9:5d:80:59:a8:61:00:b0:7c:a7:fa:cc:
         2d:64:de:7b:3c:4f:08:3d:f4:40:cb:ee:1e:a1:51:d3:a3:ae:
         d3:47:2b:25:f1:ff:f7:df:6a:61:d3:80:57:75:5a:60:d0:2f:
         5d:3d:cb:11:06:4a:48:a8:0b:a0:c3:0b:de:11:9a:df:15:63:
         3b:64:df:ad:e5:76:e9:fc:30:0d:64:68:e0:db:b3:9d:cd:42:
         d2:b7:2a:ba:41:a5:e7:e1:2e:0d:27:1c:0d:c1:d3:b8:80:f3:
         a0:2f:42:70:8f:e9:05:36:7f:29:11:e0:97:e1:fc:e4:7d:74:
         f5:6f:f6:a1:92:e1:7f:f4:70:18:2a:2a:ef:2e:ac:70:a4:39:
         7d:d4:98:c6:78:da:e5:be:ed:28:21:63:06:42:25:6d:f5:78:
         dd:27:18:a6:4f:41:16:ba:49:9a:a5:e6:bc:6a:82:e7:1a:44:
         6e:8f:9f:7a:08:e8:14:c0:a2:98:d1:be:4f:da:d2:84:4d:5f:
         f3:88:5f:12:ed:b2:1c:3d:0d:b2:5b:ca:92:f6:b1:4a:3e:9b:
         41:86:d1:cd:3d:e8:93:51:77:37:e9:fa:66:a9:51:a6:91:cf:
         1e:92:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:13 2024 by rpki-client on console-fra.rpki-client.org