Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
File:                     D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json)
Hash identifier:          a0NWrHL2A8WL4AhnawSmIL3+zqHhuwWv/RsJAGp7bW0=
Subject key identifier:   23:92:38:50:97:7D:1B:08:A9:E2:42:1E:91:94:0F:DF:6D:AA:1A:87
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1B84
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
Signing time:             Fri 20 Oct 2023 14:40:31 +0000
ROA not before:           Fri 20 Oct 2023 14:40:31 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     136974
IP address blocks:        210.2.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7044 (0x1b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 14:40:31 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6532915e-93b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:d8:46:f4:90:4a:e1:f5:72:ac:3e:f3:14:
                    47:5b:1e:d3:18:3c:10:17:39:86:74:f4:43:6c:77:
                    63:ed:ca:56:c3:92:53:6a:54:9b:85:99:50:a7:38:
                    2b:4d:78:aa:7b:9a:06:04:36:0a:80:f5:2f:b0:1c:
                    11:de:fc:b5:46:64:3e:01:b5:b2:40:18:4b:8d:10:
                    1b:eb:4a:68:ca:0e:c4:c5:99:6c:92:c1:92:6d:83:
                    d9:1d:d4:31:4c:07:4e:73:35:f6:a3:0a:16:87:d4:
                    7c:04:b9:c7:c1:06:4d:8c:71:fb:0c:5d:cc:e8:09:
                    8e:8e:53:e0:36:af:01:b3:bb:61:04:24:b1:cc:ef:
                    43:78:89:a0:d8:12:fa:25:c8:1b:38:bc:b3:a4:a8:
                    c0:8f:d3:75:4c:6a:3f:7e:16:25:b9:10:ba:70:1b:
                    0c:ea:1f:9d:3f:6f:8c:c6:ba:a3:7c:0d:3a:1e:4e:
                    fb:77:7c:a7:41:8f:82:ed:a7:ec:63:b4:87:79:76:
                    19:77:a0:5d:8f:a7:3e:36:47:03:89:ed:47:98:03:
                    7a:16:f1:f6:0c:f1:88:f7:ae:0f:90:06:6f:2b:ea:
                    95:c1:d7:0a:14:c1:07:46:bd:1f:89:e9:b8:ba:7e:
                    0a:4b:c9:be:7d:59:a4:bb:48:c6:85:f3:4d:59:17:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:92:38:50:97:7D:1B:08:A9:E2:42:1E:91:94:0F:DF:6D:AA:1A:87
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.2.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:34:23:45:a1:53:e4:c5:8e:0f:d6:bf:8e:88:70:d4:72:
         a0:88:e2:9f:02:18:fe:02:8b:f1:a6:36:01:e3:94:d8:40:99:
         67:aa:77:57:8a:c5:58:84:85:16:03:90:d6:ef:52:f3:c3:db:
         c6:90:1d:d8:8b:65:cb:10:42:66:99:15:aa:61:4a:56:5e:d1:
         ef:0e:c7:d5:4b:38:b7:ca:20:e7:e2:86:af:12:6d:42:3d:6b:
         cf:68:60:87:88:da:f9:7f:15:f8:84:64:6a:14:78:28:85:53:
         69:b2:28:c0:b4:8d:5c:9d:67:53:0c:6f:96:38:5d:d6:67:39:
         d9:6c:31:6b:2a:4a:01:6c:25:87:d7:91:37:a2:99:5e:cb:6d:
         27:cc:39:77:2f:28:04:cb:3a:1b:12:5e:e1:ff:00:1a:11:c0:
         f7:b2:75:ad:02:87:c7:f5:b6:3e:66:d7:6a:99:f3:6d:20:f3:
         ea:9a:58:22:d6:6a:e8:dc:2e:df:c5:cd:16:97:59:5b:b1:e9:
         c0:ca:b7:43:3c:90:05:9e:b6:03:c8:a9:ee:8a:cd:12:23:60:
         51:95:d2:22:c3:37:6b:51:9b:05:fe:0e:52:76:e8:2c:c3:c9:
         c8:45:df:60:7c:54:6d:d4:68:fb:cf:16:e0:d0:9f:7f:9f:a3:
         f1:a1:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org