Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
File:                     3263B6905E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier:          eDBzV5c+YfE8xKLwuR4/9vbZEx4V5q6WLygz4lLx4+Q=
Subject key identifier:   0C:E1:89:1D:6F:C5:25:BB:B7:24:C5:B3:64:5F:C3:BC:32:EB:51:36
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       056E
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
Signing time:             Mon 24 Jul 2023 23:20:33 +0000
ROA not before:           Mon 24 Jul 2023 23:20:33 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136523
IP address blocks:        43.254.133.0/24 maxlen: 24
                          43.254.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 23:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Jul 24 23:20:33 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bf0740-bb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:8b:29:19:9a:ec:3b:6e:db:73:1a:fe:19:
                    af:52:eb:df:d4:93:ec:1b:08:04:62:32:db:30:2c:
                    5f:95:6f:ec:be:7a:5b:73:9d:b9:88:0c:03:84:93:
                    e6:54:0b:02:9e:db:ca:c4:00:80:6a:a6:27:e9:98:
                    95:4a:34:69:ea:23:41:5c:d8:1a:4b:6a:ca:2e:83:
                    37:e6:67:e3:a1:1e:49:cf:ed:d1:52:11:7c:5f:fe:
                    7a:7a:ad:ae:0c:35:66:72:61:11:26:9e:7c:10:c6:
                    2a:c1:27:b6:90:81:76:b9:73:3f:42:57:73:28:fb:
                    5b:2e:73:e2:68:c4:ff:31:6b:70:cb:31:f2:f6:5a:
                    c1:73:75:83:f6:93:c4:41:5f:22:c2:3a:9c:85:e1:
                    65:5a:44:48:81:19:3e:5a:0e:87:9f:df:6c:2e:39:
                    56:f5:da:a0:61:f3:1e:40:62:46:ad:2b:80:cb:8c:
                    43:26:87:3d:44:e0:cc:2b:86:4f:a9:67:72:c4:cf:
                    19:46:f6:04:83:3d:58:ed:45:51:b0:19:b1:17:a8:
                    f7:00:39:f1:97:85:53:72:66:11:51:27:a5:f6:15:
                    92:75:56:f2:54:b8:76:cf:64:8f:3a:2f:a4:6c:68:
                    24:0f:ff:9b:9f:ed:df:3f:76:05:fb:74:fe:ed:23:
                    a6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:89:1D:6F:C5:25:BB:B7:24:C5:B3:64:5F:C3:BC:32:EB:51:36
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/3263B6905E7311EB8B143F3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.133.0/24
                  43.254.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:7d:f2:c8:cc:54:3e:ec:25:e7:dc:d2:37:10:2a:5f:29:17:
         2e:83:f8:d9:98:d0:2d:25:45:4c:b5:33:00:a0:06:4b:3c:b7:
         84:bf:8e:49:19:9c:fa:ab:f2:04:ec:00:dc:19:45:db:b3:2d:
         5a:2f:08:aa:ca:3f:f3:00:e3:34:9e:11:a1:a1:09:52:81:98:
         29:12:fe:08:84:79:19:e2:83:9a:74:5c:60:33:5e:25:86:14:
         c5:f8:63:23:b3:ae:08:55:97:b3:fc:74:a3:fd:a4:b6:ba:46:
         53:7d:e4:4e:c1:92:8f:70:31:28:89:41:9d:c9:db:d7:3d:3f:
         fa:15:6f:08:a8:29:ed:75:28:d5:9f:10:2b:80:a0:68:0b:1b:
         6d:0f:3b:53:80:bd:99:33:d7:18:04:45:6b:df:8c:e9:5d:7d:
         e4:ae:b9:3b:41:bf:e8:91:23:19:97:f5:31:a2:38:c5:64:96:
         28:f4:55:58:6a:ab:b9:62:60:4c:86:5d:6f:c5:f4:3f:35:56:
         ca:98:bc:71:81:87:37:c4:4a:28:ae:ea:27:ec:34:94:2e:d5:
         76:f3:55:97:16:fb:06:04:04:02:3e:bb:a3:58:58:3c:b6:43:
         c6:f5:a4:02:24:91:88:b3:e0:02:3b:27:7c:71:23:48:56:d5:
         1f:02:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:32:51 2024 by rpki-client on console-fra.rpki-client.org