Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa
File:                     623792B69DD411EF81BA4A6DC4F9AE02.roa (raw, json)
Hash identifier:          okcTRFg2T+M7C+61GQYtQyB1uqaPUSo3GqnQijdWAMU=
Subject key identifier:   3E:AF:A0:9D:37:68:3A:C6:81:2C:78:6F:05:FA:39:0F:B5:3E:B3:9F
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0B68
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa
Signing time:             Fri 08 Nov 2024 13:21:38 +0000
ROA not before:           Fri 08 Nov 2024 13:21:38 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     205220
IP address blocks:        14.192.140.0/24 maxlen: 24
                          14.192.141.0/24 maxlen: 24
                          14.192.154.0/24 maxlen: 24
                          14.192.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Dec 2024 20:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2920 (0xb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Nov  8 13:21:38 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=672e1062-c33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:11:47:70:19:f7:1b:e1:30:7d:1e:27:36:93:
                    b7:76:f6:5e:78:51:92:8f:ef:9a:59:2a:85:a1:a2:
                    23:47:0a:6a:a4:28:ae:53:91:87:46:c2:71:ae:ad:
                    4a:1f:18:fb:e4:42:95:44:ab:2f:83:e0:60:20:da:
                    e7:38:36:35:2f:68:0f:69:60:3f:33:b3:3e:a1:f7:
                    2a:55:fc:5d:e7:a9:6f:70:c6:68:48:4b:c8:02:c8:
                    b9:83:9a:c4:48:aa:d4:45:14:af:c6:65:e5:c8:ae:
                    f6:ba:a8:69:90:20:ef:60:e1:c7:1c:22:a9:74:59:
                    5d:d3:b9:65:f2:bb:0e:f8:1b:f4:e5:f9:1b:de:29:
                    e4:cd:89:50:b1:10:66:bd:36:d9:c1:8a:93:ea:4d:
                    aa:34:11:1e:a3:8b:05:56:a3:70:38:5d:5b:02:76:
                    bf:41:9f:2b:e5:35:98:33:db:c6:2b:32:cd:a8:78:
                    ef:77:bb:44:32:a1:5c:39:49:7d:54:0b:27:84:f4:
                    17:b1:37:f4:ae:6b:8c:c6:0a:e9:86:17:ea:61:9e:
                    44:c7:98:0f:ab:54:7e:f8:df:92:42:4b:99:48:83:
                    d9:ac:42:09:45:26:fb:dd:a3:1b:29:88:c6:fb:8d:
                    f1:c8:57:d8:16:6d:41:25:df:ac:00:19:37:38:3a:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AF:A0:9D:37:68:3A:C6:81:2C:78:6F:05:FA:39:0F:B5:3E:B3:9F
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/623792B69DD411EF81BA4A6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.140.0/23
                  14.192.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:90:2d:c9:eb:80:1b:70:f0:f0:14:68:50:02:1a:c5:27:
         30:3f:55:3f:89:45:41:88:02:38:f1:af:40:60:4f:23:ee:37:
         f7:04:4f:4d:9e:57:30:35:16:bc:0b:4a:ba:f7:a6:22:9f:36:
         dd:0e:ee:36:09:e7:31:d8:db:94:78:68:59:75:fa:e2:d1:f6:
         68:ed:a8:26:aa:06:84:35:84:e8:b8:9b:4e:8a:0d:f4:98:fc:
         dc:f8:e3:70:9a:b4:a9:f5:13:58:5a:66:f2:5f:65:34:99:e5:
         86:8d:4a:19:31:fb:49:74:c6:d8:d9:89:20:1b:bc:a1:de:21:
         c1:df:40:a0:b7:48:69:62:f0:57:4d:be:c5:c7:43:9e:11:8d:
         cf:41:b4:17:6d:c6:b0:90:02:ae:0f:f6:5b:90:ae:b0:e7:0a:
         dc:a7:13:df:ec:7a:d8:8f:a2:90:a2:73:95:73:cf:fb:d2:21:
         2c:44:f3:e3:06:0f:16:cd:94:d4:b0:a0:f6:69:f1:0d:c4:a8:
         19:38:f4:e5:e6:bc:59:ff:a9:42:92:bb:d4:91:84:b8:bd:98:
         fe:a6:2c:70:29:eb:2b:57:fb:da:e9:b4:c0:a7:7f:e7:0a:00:
         db:9a:18:a9:18:a3:27:8f:03:17:8a:80:08:c5:27:31:6e:b5:
         ac:60:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 22:27:52 2024 by rpki-client on console-ams.rpki-client.org