Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
File:                     EB429364CA3811EE99BEB838C4F9AE02.roa (raw, json)
Hash identifier:          Ns5sd5/Crwu0uWH0PoezbbF4MQ9YSFYMGJbzNlBuwgU=
Subject key identifier:   E5:A3:69:69:8A:E5:EA:D7:AA:D4:F7:0B:49:7E:AB:A6:03:F6:22:B0
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       1218
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
Signing time:             Tue 13 Feb 2024 06:27:11 +0000
ROA not before:           Tue 13 Feb 2024 06:27:11 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     4826
IP address blocks:        203.12.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 17:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4632 (0x1218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Feb 13 06:27:11 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65cb0bbf-a8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:b1:77:c9:e3:0f:b4:56:30:7d:30:d5:9f:
                    2b:d9:d6:98:28:26:e8:e0:34:59:ea:e8:9f:9a:89:
                    bd:28:a6:b6:50:26:3c:e2:be:52:2b:c7:34:0f:2e:
                    f6:9d:30:2b:d9:5c:5b:3d:9f:83:64:d0:b0:be:05:
                    29:72:13:86:85:f5:10:48:44:1d:64:b6:80:b8:fc:
                    61:73:b9:6d:78:23:cc:80:fc:b4:ff:c0:31:31:93:
                    1d:1d:94:49:11:dd:37:7e:94:ba:26:2a:76:20:eb:
                    1c:c0:60:60:e6:08:54:92:99:4f:15:e7:c2:25:bf:
                    c9:62:81:ce:c9:70:21:1a:b9:1f:95:17:f0:26:bd:
                    31:61:bd:4c:e6:57:a9:ff:3c:eb:1b:c7:45:7c:fb:
                    97:de:54:94:29:62:b2:5e:01:fb:e9:86:b1:19:cb:
                    58:83:55:f5:74:4b:11:32:b9:af:c7:99:fd:8d:71:
                    ab:a0:45:df:f6:f9:93:b4:11:91:c6:7f:14:f7:9e:
                    3e:97:2f:95:c4:c3:23:82:f9:32:e3:1b:c5:9c:68:
                    a8:2c:84:7d:da:80:74:20:9e:ba:ef:db:81:c8:7f:
                    0b:21:13:9e:42:09:ea:ca:c9:9b:2c:32:9b:5b:1f:
                    f7:90:6d:24:be:97:45:04:ce:ca:22:db:05:b4:f3:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A3:69:69:8A:E5:EA:D7:AA:D4:F7:0B:49:7E:AB:A6:03:F6:22:B0
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:3a:0c:a8:84:2c:91:ca:e7:0e:d7:46:18:02:e2:a9:41:
         8d:ff:09:85:33:12:77:0d:bc:34:fb:34:68:f9:7e:87:2e:f8:
         c8:8b:a0:69:95:e0:fc:bf:4b:fe:2b:47:36:47:06:88:86:8c:
         e6:6a:30:ab:72:6f:de:92:34:0b:22:37:e6:22:9e:36:e0:cf:
         da:3d:f4:2a:61:e2:00:d4:bc:34:19:d9:69:7a:8b:fb:01:42:
         1c:5c:8f:e6:6f:03:16:de:33:4a:ea:5d:19:e1:a1:d3:7a:4d:
         4b:00:14:96:63:0d:4d:45:34:f8:d5:8e:4e:d1:d9:dd:03:28:
         91:4a:9a:3e:69:4f:e2:d7:84:e0:7f:be:15:e8:95:56:43:c4:
         07:b0:63:7a:52:92:80:11:8d:5b:6a:ce:49:07:27:dd:a4:0f:
         f3:2b:75:5c:fd:71:92:8d:f5:ce:fe:f5:ec:db:c2:db:91:fb:
         2a:91:99:a1:42:e5:e6:a5:89:a7:28:f4:e9:7b:f5:01:2c:ab:
         b8:9d:bb:0b:5b:8e:38:35:38:36:fc:07:69:c9:4f:58:b6:bc:
         0f:06:bd:09:ec:d8:dc:ab:39:66:86:24:a8:f0:4c:71:2e:df:
         b7:bf:99:4c:f1:e9:91:93:ff:cd:9f:46:6d:ef:87:32:4f:20:
         3f:0f:24:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:42 2024 by rpki-client on console-ams.rpki-client.org