Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
File:                     F0E06498748B11EE92D55F6AC4F9AE02.roa (raw, json)
Hash identifier:          G4RtexKo9ny4TbYwCN/1w5r6cBVLkFOvhnsprKO6E3E=
Subject key identifier:   12:FD:0E:0A:A6:7F:C0:29:CB:67:B4:1E:0B:CF:17:4D:D6:F6:96:5F
Certificate issuer:       /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial:       06
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
Signing time:             Fri 27 Oct 2023 05:44:49 +0000
ROA not before:           Fri 27 Oct 2023 05:44:49 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     38220
IP address blocks:        117.18.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
                          rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
        Validity
            Not Before: Oct 27 05:44:49 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=653b4e50-283b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:5a:83:b4:40:1d:b2:29:bb:b7:07:2c:b7:
                    d7:66:50:96:10:48:d4:2d:e9:80:45:d5:a1:2c:f9:
                    bf:c6:84:58:6b:02:86:6c:1d:91:e2:b4:4d:8d:b9:
                    e5:7f:e6:cc:3f:00:b4:57:5d:d7:1c:f3:5b:ba:b4:
                    3d:e1:5d:19:ee:28:74:d6:61:07:3e:51:0f:58:2a:
                    6f:1b:d3:a5:46:e2:04:50:f2:ab:68:f9:b3:57:6a:
                    81:a1:be:87:a0:e7:d5:e4:9f:19:cd:7f:a4:9d:ec:
                    93:d1:b3:d3:94:38:c9:56:6d:5b:40:9e:cd:07:59:
                    7d:22:76:22:31:e7:e4:ca:1e:93:4e:49:32:8b:61:
                    e0:fe:84:5e:23:47:91:e6:72:bb:87:69:15:a5:18:
                    b3:b2:03:65:8c:42:1f:a9:76:83:22:bb:ca:3b:48:
                    93:30:06:a9:50:ae:5b:3e:ea:a1:1c:63:26:98:03:
                    ab:ec:05:f0:ff:15:68:a5:7f:e9:e0:70:0a:16:86:
                    22:d8:0f:23:60:e7:41:94:a5:d3:9d:09:a6:45:41:
                    dc:df:c2:c1:95:97:08:76:24:f3:3f:72:87:dc:ba:
                    7a:f0:a2:73:ed:52:ef:d8:ac:cb:62:42:74:e8:e2:
                    d6:1c:4f:5a:9a:84:f7:08:87:82:ae:99:5a:f0:b9:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FD:0E:0A:A6:7F:C0:29:CB:67:B4:1E:0B:CF:17:4D:D6:F6:96:5F
            X509v3 Authority Key Identifier:
                keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:fe:59:04:cb:a7:56:8a:65:d8:ff:d0:0e:99:4d:bf:99:
         8a:1a:85:1f:8b:85:44:36:cd:d3:c8:70:3c:e4:b4:00:7e:a7:
         93:c4:25:b5:ff:b5:df:1a:5e:be:3f:9e:21:e5:2e:34:f0:a3:
         91:b0:78:5b:47:15:80:14:91:93:13:6c:9c:a4:97:cd:4e:06:
         f2:39:fe:fe:6b:05:ba:5e:f9:9c:87:b3:64:35:ff:1f:84:f6:
         64:01:36:7c:0e:3e:6c:32:4e:3b:27:05:d2:7f:04:4d:ff:8e:
         8d:a6:6b:b8:fe:01:0f:19:b0:a0:f8:94:61:74:7d:f0:5f:cd:
         96:af:58:5e:6e:4f:31:a8:ff:4f:ca:01:4e:6b:97:54:64:b4:
         11:d9:11:b8:df:3f:40:fc:2f:d4:bb:ed:db:82:2a:79:b8:64:
         0f:08:9a:fb:24:54:99:76:77:db:bb:4b:7c:ae:d8:13:3e:ac:
         f2:5d:a4:fc:15:00:23:19:b1:84:e7:03:86:a7:fd:8a:b4:1f:
         6e:73:0e:50:6a:42:97:8a:5e:4d:86:e6:19:bf:46:eb:65:d8:
         30:08:39:58:72:a2:ab:aa:4c:dc:ff:fa:49:6c:cb:f5:05:84:
         df:41:ed:37:d0:8b:09:85:44:b9:65:af:44:56:a8:f2:88:e5:
         41:b0:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org