Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
File:                     C6618F98BD0511EB9BB8C97CC4F9AE02.roa (raw, json)
Hash identifier:          A0jAxCBOq87B1jJMdEv0GIjBEu8rtvR1WiQ4sPc9OaQ=
Subject key identifier:   26:2E:0F:60:EB:BF:E7:B1:7F:D5:BB:F4:90:0B:64:10:6E:92:F6:67
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       11C6
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:35:00 +0000
ROA not before:           Wed 02 Aug 2023 17:35:00 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4632
IP address blocks:        192.131.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 15:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4550 (0x11c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  2 17:35:00 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca93c4-ddd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:77:bb:de:2c:36:d6:3d:a9:40:a6:04:02:56:
                    21:ec:fd:66:7c:24:53:d3:0f:7b:01:be:a0:66:04:
                    be:00:c5:13:a6:66:91:35:37:0d:cf:fe:76:ad:cc:
                    c9:aa:90:56:b6:b3:72:b6:42:6a:01:39:c1:d8:19:
                    18:7a:12:95:bd:16:bc:a5:ff:65:23:2f:54:23:57:
                    2c:59:7c:52:9b:21:97:4b:c0:bb:11:a3:73:aa:87:
                    4c:a3:9e:62:fd:58:b3:75:83:e9:58:cb:3d:45:2f:
                    a7:54:b5:0b:10:f8:a9:88:66:bb:6e:f0:15:02:76:
                    07:47:d6:01:e6:12:9a:33:68:de:8c:25:6f:91:4d:
                    1c:cd:b8:20:21:3c:3f:e5:ab:eb:97:c6:3d:d9:5f:
                    04:31:cf:c8:a6:fa:88:aa:4a:ae:39:53:19:7c:9f:
                    32:e1:68:b4:fb:00:20:84:c2:26:44:62:80:6c:03:
                    17:57:64:36:66:be:00:c1:d8:8a:f9:71:2f:16:8a:
                    db:15:b8:2a:18:31:10:91:42:26:d7:7f:8d:37:41:
                    d4:e3:d1:d6:61:8f:e8:2a:39:ac:4d:37:fc:2e:c7:
                    3e:aa:b6:df:2f:73:ad:3f:57:de:85:81:72:02:84:
                    d6:8b:57:74:c5:3b:f9:58:04:e1:84:62:63:a7:87:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:0F:60:EB:BF:E7:B1:7F:D5:BB:F4:90:0B:64:10:6E:92:F6:67
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:ce:d5:c3:98:ca:85:89:6b:74:dc:90:bd:a3:03:2a:f8:
         df:d6:d9:e0:e3:9d:fa:91:27:80:bd:dc:8c:06:36:db:98:19:
         9d:76:9c:74:e3:a4:6b:d2:d1:0b:7d:52:ce:3b:bd:18:9a:c9:
         64:93:01:6d:3a:34:b5:22:b9:77:e1:69:34:ec:d8:c4:41:45:
         45:62:9d:1c:0f:92:98:66:61:f1:f0:ca:6b:bb:cd:94:7e:5b:
         96:e4:e0:8a:b7:fe:cd:54:a1:bf:7c:55:8a:d4:b1:9e:c6:0e:
         0a:97:85:c0:f9:1b:43:59:9c:b2:b8:41:73:2b:9e:7b:ef:36:
         89:e0:d9:2c:60:34:52:da:8b:62:ba:63:0b:0b:1d:85:3f:a6:
         0e:77:a7:c2:f5:57:69:31:1d:0d:6f:9c:29:c8:40:ee:ac:0b:
         36:59:b0:e6:91:9f:41:1e:33:97:1b:1d:39:4b:d1:af:a2:83:
         1b:fa:62:ab:db:fd:a7:e2:47:c5:ff:86:96:64:86:f4:3d:4d:
         81:a1:87:45:4a:bb:57:bc:9f:f4:54:2c:0c:77:b6:3c:0e:38:
         82:b3:8d:6d:aa:41:87:4e:fe:d2:64:b4:14:30:04:ef:f7:06:
         b1:ce:a6:85:b7:82:bb:fd:51:d9:26:5e:62:b6:87:b7:04:6d:
         f9:4b:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:19:12 2024 by rpki-client on console-fra.rpki-client.org