Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
File:                     D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier:          rh11izBtb2cDopjLF+1nKB2Aot+iLfA34h+IJVGDgy4=
Subject key identifier:   3A:CA:53:12:0E:C6:F0:C9:E4:99:D4:75:1B:CE:46:19:21:94:58:72
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2338
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 16:12:52 +0000
ROA not before:           Mon 14 Aug 2023 16:12:52 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     54538
IP address blocks:        202.189.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 16:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9016 (0x2338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Aug 14 16:12:52 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64da5284-bb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2e:5c:93:d6:5d:b4:41:52:4f:0b:c3:c9:26:
                    94:18:e1:16:76:ef:0a:4f:42:2c:0c:c8:aa:26:bf:
                    ab:f9:da:80:6a:af:9e:94:c0:07:96:84:e4:ed:0e:
                    db:c5:e0:1b:71:27:c4:0f:82:64:10:96:fa:68:47:
                    5b:c1:50:c6:ba:31:b5:3f:3e:cf:6c:7d:bd:41:9e:
                    f2:5e:c2:7e:aa:9f:3a:e6:b4:3c:c3:bd:a0:bd:e5:
                    b2:32:4b:7a:72:f5:5c:12:2b:04:b0:57:5a:26:ee:
                    2d:0c:71:36:6f:b4:0b:e9:d8:32:9a:aa:92:ea:b2:
                    ba:8b:42:57:fe:c4:c3:dd:81:80:8d:4d:03:8e:92:
                    48:86:87:a9:05:48:0f:a6:13:cf:d9:73:5e:8e:1e:
                    bb:f0:f5:2e:8c:66:ea:27:da:8d:6b:16:32:04:72:
                    83:e0:06:2c:8d:ab:5e:cd:46:2d:d1:95:1d:82:e9:
                    5a:de:55:06:1e:6f:fa:6a:26:8c:db:c9:65:19:9e:
                    fa:63:17:3c:25:10:72:59:48:06:9c:fd:d9:2e:1b:
                    db:58:ec:28:43:a4:d4:e4:0a:5b:19:01:40:51:53:
                    3f:68:b5:e4:0c:53:15:54:3b:d9:95:7a:1c:fe:4c:
                    7e:3e:ed:37:e5:6f:ed:47:56:86:69:f0:43:28:e6:
                    f8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CA:53:12:0E:C6:F0:C9:E4:99:D4:75:1B:CE:46:19:21:94:58:72
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:9c:f7:6c:24:96:ce:ca:21:e6:e3:f2:03:d0:62:e6:2d:
         68:de:61:59:df:8b:8e:fd:1a:e4:7c:18:5b:69:c6:75:f8:a7:
         70:43:b5:71:bf:33:9b:c4:9d:a2:b3:28:b3:0e:3b:db:62:43:
         1c:01:98:b1:46:28:35:27:12:ee:9d:b3:70:34:d0:d1:e8:8b:
         26:41:6a:ab:8d:b7:ae:98:79:ba:95:81:5a:ae:91:88:3c:31:
         63:e2:48:63:57:7d:41:f8:31:2a:e3:e8:d8:e4:d4:1c:63:47:
         83:0f:ea:6f:e7:e3:c6:ad:33:a2:8d:c4:e0:08:54:bc:89:07:
         6a:11:8f:c5:d9:15:19:60:97:11:3a:6a:e4:ac:56:2c:c2:20:
         76:77:43:b5:51:87:bc:75:e5:24:11:0a:a7:b3:5e:f3:64:9a:
         f5:78:88:bb:d0:9d:48:88:06:41:c0:94:02:b7:d2:14:75:31:
         fa:06:67:f3:d2:57:50:71:8e:b9:63:00:f5:29:2a:ba:f6:26:
         b9:90:a7:0d:76:46:7a:e5:11:8a:c3:84:a4:a2:a0:35:34:85:
         d4:40:e1:95:7a:f6:6a:23:bf:5b:df:04:1b:ce:3f:a8:ef:fe:
         a7:bd:44:82:35:c5:70:0b:f9:b9:0e:ed:33:b7:3b:fd:fd:7c:
         8f:6c:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 17:56:33 2024 by rpki-client on console-fra.rpki-client.org