Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
File:                     9826D5EEB45011EE829AF51CC4F9AE02.roa (raw, json)
Hash identifier:          5BoxLKekJFCkZTtAL7aRDOqjExsyHH7PHxs8u02byjw=
Subject key identifier:   4F:94:3A:70:30:A5:96:22:A6:12:E3:F3:AB:FE:43:FE:4D:08:D2:23
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       332C
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
Signing time:             Thu 14 Mar 2024 16:01:14 +0000
ROA not before:           Thu 14 Mar 2024 16:01:14 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     4847
IP address blocks:        118.188.18.0/23 maxlen: 23
                          118.188.20.0/22 maxlen: 22
                          118.188.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13100 (0x332c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 14 16:01:14 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f31f4a-163a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bd:a6:e4:b9:5f:c2:b1:2d:ce:96:0a:c2:83:
                    e7:ea:01:29:0b:b1:dd:2d:68:98:66:0c:7f:1f:31:
                    b6:62:1c:b1:5c:ad:96:59:2d:c3:92:75:70:14:64:
                    13:cb:c6:2c:32:79:59:d8:46:73:16:02:51:af:76:
                    36:e6:d8:9c:8e:b2:d6:cf:bb:4c:87:5e:80:16:96:
                    fe:02:22:b3:4f:87:ed:e3:d5:e6:a7:dc:8d:e7:3e:
                    18:99:5a:39:9c:28:c0:bd:d0:a1:12:87:ef:ed:86:
                    33:90:4f:96:ac:a1:49:4d:51:40:b1:df:62:c0:3f:
                    ca:2b:84:ed:1e:50:e4:5b:da:cc:7a:82:8a:a6:52:
                    e8:e0:9d:3b:a5:f3:71:20:31:c7:48:6e:b9:8b:b7:
                    2a:54:68:c5:53:5f:d3:b4:e5:ee:76:ef:38:9e:26:
                    63:0b:02:3d:07:db:fe:d1:46:fd:de:f9:42:8e:ec:
                    60:40:8c:c9:43:08:00:92:9e:ac:e2:a1:4d:93:33:
                    a1:d4:76:d3:47:1e:e7:73:67:cf:5c:5e:a7:5d:34:
                    06:d9:93:e5:84:06:41:77:fa:ac:ba:71:aa:8a:34:
                    8d:aa:e6:de:83:4c:62:31:be:a6:07:d2:a7:3f:54:
                    66:f1:c7:38:4e:50:b5:b1:ff:f2:8e:ec:cc:f8:13:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:94:3A:70:30:A5:96:22:A6:12:E3:F3:AB:FE:43:FE:4D:08:D2:23
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/9826D5EEB45011EE829AF51CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.188.18.0-118.188.25.255

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:c7:ff:66:ba:51:cb:97:64:9f:bc:93:50:6c:f8:1c:b3:
         71:10:68:9e:46:84:31:f2:f2:3a:57:cd:95:38:51:0b:56:9c:
         23:16:60:b5:b4:fb:9f:02:9f:f6:df:eb:c9:b1:8c:95:56:27:
         4a:32:fc:4b:90:18:94:5b:a8:fc:41:e6:74:19:b1:46:33:dd:
         ed:c2:e0:05:a9:87:58:7f:e2:f1:7b:88:60:3f:36:56:c2:5f:
         12:d9:9b:5a:40:24:54:89:09:c2:4b:85:5e:94:9b:2d:5a:5a:
         15:0d:00:58:4e:83:7d:ad:30:b9:1a:db:29:4e:13:4f:c5:d1:
         8a:7b:be:3b:13:5b:5f:e4:0a:94:25:e6:ea:dc:eb:54:07:ce:
         64:2e:7c:db:55:ff:8d:59:13:3b:89:ec:7d:44:3f:48:63:9f:
         77:5c:81:f9:3e:07:ec:76:6e:6e:d8:07:66:57:2f:b9:9d:64:
         66:c3:c5:d4:79:af:fe:9d:0b:58:59:22:22:11:f9:3b:1c:92:
         90:65:0b:53:6d:43:33:28:93:df:9c:42:4f:bf:2e:42:c7:6b:
         f5:ef:96:9a:27:f4:5e:e3:92:b0:37:82:92:52:6a:32:9c:30:
         6a:2e:4c:2f:ca:89:a0:5c:be:9a:a1:7e:69:6c:ed:8f:25:b9:
         12:74:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org