Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
File:                     93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (raw, json)
Hash identifier:          z4if++mRQ+lttU+//pixulxHK208mdt2kToNCzAbOBA=
Subject key identifier:   DC:65:61:71:31:50:1C:44:D3:B1:01:84:31:A3:09:B9:81:E5:13:0C
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       11C7
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:35:01 +0000
ROA not before:           Wed 02 Aug 2023 17:35:01 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4637
IP address blocks:        144.130.128.0/20 maxlen: 24
                          192.74.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4551 (0x11c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  2 17:35:01 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca93c5-2288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:7d:b9:03:5c:5e:fe:09:86:1a:08:82:f6:
                    b6:a8:e9:c9:9c:61:01:ca:6b:6c:ed:4d:35:1c:75:
                    7b:a4:17:55:57:2f:73:e4:82:d4:4a:cd:27:d2:ed:
                    59:94:29:9c:ef:83:5b:b1:6c:f9:a3:48:d3:14:fa:
                    22:13:98:51:9c:2a:a9:d3:14:e9:ac:0a:f4:08:a2:
                    b8:dd:ff:41:dd:c7:22:41:8d:8d:c9:81:30:00:6c:
                    81:99:09:60:ed:ca:cc:e0:0b:9d:26:c6:e6:58:96:
                    73:50:5b:8a:10:73:5d:cd:f4:5c:33:90:89:19:5c:
                    de:4c:d3:ce:1f:7d:82:2f:e0:c6:1e:27:d9:e2:91:
                    dc:e0:8a:2c:1c:88:61:94:dc:44:32:be:b6:55:a2:
                    e4:ae:39:fe:0a:8c:8d:b2:42:6c:ad:b5:43:d5:1e:
                    85:e1:a6:99:7f:7c:96:57:79:cf:24:80:76:ed:12:
                    14:39:b8:49:aa:18:94:4e:99:4f:42:72:56:c9:c4:
                    11:26:8d:df:d0:b1:90:59:0a:6c:e4:55:0a:1d:96:
                    1e:fc:67:ac:84:84:38:a5:c0:87:c1:cf:bc:4e:d7:
                    50:6f:6b:4e:82:8a:ce:78:29:b9:99:c9:1d:61:54:
                    4d:d9:02:7f:78:26:ff:19:16:dc:dc:1d:82:37:cf:
                    cb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:61:71:31:50:1C:44:D3:B1:01:84:31:A3:09:B9:81:E5:13:0C
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.130.128.0/20
                  192.74.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b8:ea:56:41:38:e3:36:cc:50:9f:9e:8e:5b:77:dc:fa:40:
         8f:46:45:da:91:d3:d2:88:86:7b:34:38:cb:6f:d8:d8:0d:3b:
         4d:ca:f1:cf:01:8f:fb:5d:a8:f9:88:be:fe:62:21:5f:62:d0:
         8a:e8:ac:2b:74:a8:51:7a:39:03:83:04:d9:7a:79:14:12:55:
         f3:ae:4a:1c:a5:a7:7c:50:bf:97:24:88:c2:02:17:a8:30:76:
         f4:a4:1e:a8:a9:26:b5:2d:e6:e2:23:57:c9:86:06:4a:df:e0:
         d5:45:7f:60:79:6e:e8:a9:06:e9:1e:3d:8c:ed:b5:52:7d:a1:
         f9:3d:db:00:b7:6a:6d:90:4c:5b:8e:0c:9b:ac:79:4b:4c:6e:
         ee:b0:7f:45:dd:fb:bb:9a:7b:64:c4:b4:d9:a0:ec:28:e7:4d:
         e4:89:ab:b6:ac:b4:c8:1f:62:04:48:81:8d:d2:a7:42:de:d2:
         80:a1:5e:c4:8b:90:73:54:4b:fc:41:cd:6e:02:c8:05:b7:c7:
         26:31:97:ad:50:7c:ac:e0:82:bc:fc:f0:21:0d:61:94:9e:6f:
         79:5b:25:2f:65:3b:29:4a:d5:16:83:d1:f8:9b:f2:4d:55:b5:
         ad:47:17:3f:66:07:be:99:82:c5:03:fa:17:ed:2b:56:3d:a8:
         8c:cf:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:35:53 2024 by rpki-client on console-ams.rpki-client.org