Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/BE047E02DBA411EAAF00CC6CC4F9AE02.roa
File:                     BE047E02DBA411EAAF00CC6CC4F9AE02.roa (raw, json)
Hash identifier:          MmSqe3imWBouzwZvgvdU9hz0f4KvR/QUes8agKxlUEo=
Subject key identifier:   7B:98:B2:B2:8B:A4:A5:46:15:5F:47:83:76:81:B0:3D:7A:FB:0F:DE
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1D62
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/BE047E02DBA411EAAF00CC6CC4F9AE02.roa
Signing time:             Wed 21 Feb 2024 02:04:11 +0000
ROA not before:           Wed 21 Feb 2024 02:04:11 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131271
IP address blocks:        113.208.72.0/24 maxlen: 24
                          113.208.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
                          rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7522 (0x1d62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
        Validity
            Not Before: Feb 21 02:04:11 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65d55a1a-4d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:be:c8:97:4d:20:e8:2f:37:1e:ee:ff:33:
                    bd:63:c6:5d:ad:0d:f7:fc:a2:08:01:f4:04:e3:c5:
                    ad:a0:92:3d:89:ac:01:48:9e:b9:6b:1f:c7:d1:5d:
                    ca:a8:96:1a:5c:17:27:e6:fe:92:05:40:7e:63:b9:
                    ed:03:e1:e4:2f:2d:af:d6:5a:82:b7:0d:75:33:07:
                    d4:d5:b4:88:54:ec:a7:d0:13:35:62:8a:bd:18:3a:
                    39:b0:c6:0e:c3:62:3b:21:ef:24:5f:4f:37:cb:bc:
                    dd:8a:6a:5a:b5:c7:78:20:b2:3d:10:c6:c5:85:59:
                    34:6e:a8:c9:bb:c1:31:fd:fa:45:70:8c:fe:dd:10:
                    94:0d:48:a1:e4:2f:46:64:2f:7f:99:9f:6a:3a:17:
                    a0:a8:e2:33:e8:ae:42:a2:62:e5:d6:2e:07:da:e1:
                    5d:38:ec:98:56:69:74:d0:8e:2a:fc:d1:af:d5:db:
                    55:4f:52:69:22:04:b8:ff:83:a3:c4:66:b1:2d:02:
                    2d:ad:03:bb:9d:95:83:37:6b:db:25:89:c8:49:66:
                    65:58:99:ae:61:74:44:b2:06:7c:6a:cb:96:fc:25:
                    1e:bc:8d:fc:87:3e:66:3e:d4:df:55:1d:54:b7:a8:
                    c7:e9:26:a3:92:f6:6a:92:29:c6:fd:63:01:0e:aa:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:98:B2:B2:8B:A4:A5:46:15:5F:47:83:76:81:B0:3D:7A:FB:0F:DE
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/BE047E02DBA411EAAF00CC6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.208.72.0/24
                  113.208.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:08:70:8d:a4:b5:f8:8e:56:b0:0d:25:82:c7:c3:e5:06:
         22:74:02:fb:af:b4:65:2a:3a:4b:8d:6f:77:87:6f:cf:2e:be:
         b7:c0:82:f8:d0:3a:6e:5d:e3:1e:eb:ce:73:af:91:08:70:f6:
         9c:52:c6:12:67:8b:7d:7d:9e:61:ad:96:d9:9a:f0:8c:35:a3:
         aa:52:48:b3:f7:ff:4a:e3:a2:77:7b:fd:eb:4f:50:9d:ae:dd:
         b6:5b:c7:be:95:26:8d:83:6e:42:0d:5f:68:2f:d5:99:45:a9:
         ee:f1:64:f9:96:e6:56:22:08:1b:00:42:5b:6a:cc:d7:2e:f1:
         cf:46:af:3d:cd:f8:95:3f:21:42:45:6d:fd:43:3a:d3:8e:68:
         ab:e4:e8:46:a4:c1:03:fa:7d:ad:13:1d:e4:ac:7f:c4:da:66:
         dc:f5:29:8e:d2:79:4b:e1:b8:77:83:81:cf:c1:60:f0:3d:64:
         44:44:d4:14:4d:87:23:7a:b2:68:87:3c:db:15:e4:54:4f:f1:
         18:29:76:01:52:86:15:bb:29:a2:10:74:ea:28:6a:f2:18:5d:
         bc:ba:78:4a:00:31:85:fd:ff:9d:aa:0c:6e:06:62:2f:32:79:
         31:5e:fa:bb:bf:a6:01:92:a3:4b:9b:09:6d:7e:13:49:b1:b0:
         2c:a1:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:04 2024 by rpki-client on console-ams.rpki-client.org