Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
File:                     57A7394C4B0E11EE8682CD4CC4F9AE02.roa (raw, json)
Hash identifier:          yjF1vBAnB2/Vtt4bQW4iTYhZqGssoCLw4RVDIGf898Q=
Subject key identifier:   E2:7D:0E:8B:91:EA:2E:D9:AC:04:2C:30:2A:2D:D3:7D:C4:FE:5B:94
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0256
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
Signing time:             Thu 07 Dec 2023 03:14:10 +0000
ROA not before:           Thu 07 Dec 2023 03:14:10 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     134365
IP address blocks:        150.129.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 03:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec  7 03:14:10 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65713882-1d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:d8:10:ce:68:8e:2b:de:00:5a:8c:7d:bd:
                    b2:6a:0b:dd:78:54:35:2c:ba:ef:16:4e:40:f3:e6:
                    3b:13:16:5b:6e:8b:e4:57:8a:0e:e7:3b:fe:ec:72:
                    7b:e5:5d:c6:ea:2a:16:ed:db:01:ea:e0:7a:87:ca:
                    28:3a:c7:3c:5b:26:6e:e9:7e:27:95:17:83:93:6d:
                    3a:cd:df:11:a4:86:37:66:94:27:12:1e:30:2b:b7:
                    50:1e:93:b5:9f:a1:d0:5c:c7:cc:e7:c5:f0:c3:7b:
                    52:07:e2:76:10:d4:3d:3a:b3:a2:e9:e8:fb:0e:f8:
                    7a:d3:b3:63:87:a2:9f:19:74:f4:b6:5e:ef:57:a7:
                    11:41:bc:45:86:c9:28:87:44:8a:4a:cf:c1:b7:3a:
                    08:64:55:b9:b9:34:e4:cc:37:46:50:de:ef:ad:d5:
                    c1:87:39:08:b2:98:f0:54:68:2f:33:a4:c3:90:37:
                    31:5f:07:6d:d4:5b:51:20:fa:08:c5:94:b8:0f:b0:
                    4c:95:9b:c3:53:30:cc:29:d6:31:ae:77:f1:f8:92:
                    9b:28:b2:58:3c:7b:9e:1c:e7:79:3d:48:bf:c8:5e:
                    e9:00:57:a9:53:e5:1b:77:29:83:a5:a2:c7:ef:8d:
                    05:d8:95:0b:df:2e:b6:80:e7:65:89:ba:a7:b1:c3:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7D:0E:8B:91:EA:2E:D9:AC:04:2C:30:2A:2D:D3:7D:C4:FE:5B:94
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/57A7394C4B0E11EE8682CD4CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:82:71:e4:57:0a:ee:ee:23:be:41:c4:26:a4:fc:17:15:6c:
         57:75:8c:5b:63:6f:f7:2d:2c:36:e4:05:f7:ee:55:08:22:96:
         a8:dd:e7:fd:3a:43:af:dc:95:67:cb:0e:ed:af:82:11:83:58:
         45:66:d3:48:f1:18:ff:6c:f8:2a:e6:2d:fa:35:73:e7:bb:ce:
         ed:c4:31:80:0d:42:71:7f:73:76:8c:c6:2a:68:5c:4f:8d:da:
         7f:e4:c9:20:9a:a6:70:c8:f0:fb:7e:f5:bc:38:bf:82:25:ac:
         07:43:e7:0c:ac:71:2e:15:a6:f9:31:e4:18:28:68:c8:91:df:
         36:aa:48:d6:92:75:79:cc:a8:77:8a:64:43:5c:f1:42:96:a4:
         68:c2:ed:d9:2b:91:9a:15:0a:24:de:7c:ed:92:06:7f:9d:6f:
         a6:dd:06:d3:b7:27:43:b7:e6:05:d6:6a:02:9b:6f:c2:8d:90:
         c6:7b:fe:91:a1:18:0a:bd:e2:ec:79:55:13:fe:30:f0:e1:84:
         1f:3a:8f:05:4f:5a:49:4c:6d:9a:c9:9b:d1:36:2d:28:c5:63:
         48:a1:12:26:4f:aa:96:b4:37:02:73:67:26:64:33:26:2b:87:
         b5:4b:90:aa:a7:24:c4:25:d1:37:77:78:cd:ad:8e:0b:cd:1b:
         90:5b:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:34:49 2024 by rpki-client on console-fra.rpki-client.org