Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
File:                     1605F9B6169E11EC9D259855C4F9AE02.roa (raw, json)
Hash identifier:          sWbjIIBh6BQZOATeKu+4sCTvUOLmA9aqmcEjAgBBzBU=
Subject key identifier:   D6:4C:E2:3E:F1:34:12:23:68:07:D2:94:FE:1E:42:3F:49:19:94:A6
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       098E
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
Signing time:             Sat 22 Apr 2023 03:58:16 +0000
ROA not before:           Sat 22 Apr 2023 03:58:16 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     18382
IP address blocks:        202.167.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Apr 22 03:58:16 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64435b58-bc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:41:9a:db:22:8f:17:2b:6c:e7:40:68:09:
                    c4:72:d6:3c:83:97:47:ae:b0:f2:06:5b:5c:fa:1d:
                    cc:71:99:d3:41:89:8b:70:7e:e7:12:30:ff:ac:4e:
                    8a:b3:58:1e:c7:da:3c:ce:17:d6:ac:41:4d:6b:61:
                    82:c3:33:d2:4f:6a:de:66:18:00:90:1d:ea:fd:e6:
                    e0:d9:3c:8c:8c:15:5e:21:7a:32:2e:8b:48:66:be:
                    5f:14:d1:0e:2f:7e:8c:7c:e7:5b:93:35:f9:e9:8a:
                    34:f7:3f:b5:9f:88:c9:64:c4:2a:d7:12:ee:51:cd:
                    a8:01:d6:0c:54:01:68:d2:e4:43:9a:81:5f:b9:e7:
                    1c:d2:10:a8:16:95:c3:a2:ed:f1:e0:35:11:23:f0:
                    66:33:91:be:56:d3:83:f3:39:3b:28:e8:e3:28:00:
                    6d:9c:8d:a1:7a:3c:f1:70:0d:72:38:1c:fb:2d:92:
                    6e:4e:1a:6f:aa:36:21:a9:58:9f:44:1f:fb:57:71:
                    e6:57:5e:9f:5b:f8:72:5d:1d:d3:47:92:5b:b3:98:
                    37:1f:30:c4:81:31:85:40:0b:40:18:93:2f:6e:f9:
                    c7:ea:cc:11:41:e7:5a:b1:50:76:45:94:50:62:83:
                    55:38:dd:36:21:b4:04:8d:ed:ba:c3:93:58:da:87:
                    1e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:E2:3E:F1:34:12:23:68:07:D2:94:FE:1E:42:3F:49:19:94:A6
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:22:85:48:c4:8d:d2:1f:31:01:54:dc:cc:e4:31:77:e8:
         0d:5f:dc:64:bb:c5:d3:e7:d2:0c:a6:a2:43:47:9b:1e:0a:94:
         c7:be:d1:0d:40:fd:60:76:b7:58:e0:8c:28:57:9e:7b:ea:15:
         e8:6c:ef:23:b2:3a:0b:92:57:32:55:57:30:76:88:65:0e:87:
         d6:d8:65:e6:8b:c5:dd:c1:7d:f5:5a:12:cb:9f:53:bf:dd:ae:
         7e:5a:8d:13:74:84:ba:37:40:7d:2b:57:58:fd:ff:2e:4e:a9:
         f5:31:19:57:bd:ce:91:3b:f3:ce:94:4f:31:4b:87:1b:19:6a:
         b7:1a:43:67:39:4b:78:32:c1:0b:68:b0:dd:5d:fc:6b:33:e2:
         59:e1:bc:9d:85:7a:9a:c4:90:a3:01:88:fd:e9:a2:33:d8:2a:
         2f:48:e3:1b:77:e2:34:d0:da:ee:9b:65:f0:cc:5a:0a:07:49:
         46:f3:2d:e1:03:13:d2:7a:b2:a5:2e:22:73:5e:b6:73:bc:3e:
         25:cb:0f:d2:5f:25:06:80:01:f8:04:98:51:2a:ac:25:35:ac:
         f7:5b:49:9a:2e:d2:5f:0c:97:bc:df:2c:00:c3:52:30:50:a6:
         c0:85:41:fb:6d:01:af:f7:94:00:7c:f8:ff:d4:09:a5:3b:ac:
         75:1d:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org