Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/E807C5CC52A411EEB770555CC4F9AE02.roa
File:                     E807C5CC52A411EEB770555CC4F9AE02.roa (raw, json)
Hash identifier:          ET8mh7vQbmu4NFBH1qNtg5PqMI6UgKOGF0olFNfNBEw=
Subject key identifier:   41:8C:BF:4A:86:E4:08:16:13:01:FA:7A:EB:27:21:89:AA:AF:CE:80
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       167D
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/E807C5CC52A411EEB770555CC4F9AE02.roa
Signing time:             Thu 30 Nov 2023 17:24:47 +0000
ROA not before:           Thu 30 Nov 2023 17:24:47 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     138379
IP address blocks:        113.19.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5757 (0x167d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Nov 30 17:24:47 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6568c55f-809e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:4d:04:fe:18:fb:a5:c0:d9:5d:7d:6b:04:
                    e8:43:56:54:a2:88:91:17:a3:57:4c:af:b0:f2:62:
                    13:89:17:b4:77:47:f4:96:41:d8:b4:ce:0f:bb:48:
                    31:47:16:39:ba:13:1d:26:85:ed:69:2d:88:72:f7:
                    cc:1e:19:f7:59:c7:c1:90:e1:8d:bf:eb:b2:e0:fc:
                    a7:bb:7a:c9:af:1e:9c:41:66:d4:f5:58:5c:14:50:
                    fd:61:3b:45:ed:63:96:6e:c8:08:61:2f:56:d9:e8:
                    45:67:34:91:f7:a3:d6:bb:e3:ac:75:78:19:46:9d:
                    ad:3b:ed:e5:f1:3c:3b:b2:2b:fb:12:e5:b4:e2:dd:
                    df:62:f4:2d:7c:da:aa:9e:21:ba:d1:c3:8d:e6:06:
                    18:37:0a:bb:43:59:d5:79:f2:e7:f5:4c:a1:6e:e4:
                    f7:10:8d:cc:7e:bc:38:44:af:95:6a:9e:3e:5d:bf:
                    db:0a:e4:4a:ad:72:d0:92:15:f1:64:05:7d:ae:13:
                    42:7a:e8:5b:2c:69:76:8c:11:57:2e:3a:ca:3c:fd:
                    57:72:66:fc:82:ab:1e:08:db:09:83:30:6e:b2:64:
                    26:7d:ea:f1:f7:85:f7:e7:87:80:c7:7d:4a:14:eb:
                    1e:08:9e:84:3e:1a:65:13:37:43:ce:ee:86:89:50:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:BF:4A:86:E4:08:16:13:01:FA:7A:EB:27:21:89:AA:AF:CE:80
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/E807C5CC52A411EEB770555CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.19.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:d9:76:28:5c:51:49:ad:5d:61:e3:10:71:a6:f1:4e:f8:
         93:40:3f:6d:08:c7:dc:2a:c6:cc:bd:b1:8f:20:36:9c:85:2e:
         ef:ec:ca:9c:f1:00:a9:25:43:61:57:11:48:cc:c2:11:0c:43:
         b2:f0:fe:a8:e9:01:87:8b:9e:7b:e2:e2:00:8d:dd:89:c2:93:
         44:1b:11:67:59:3b:70:f1:e8:0a:7f:6e:78:c8:05:9d:be:7e:
         91:08:07:14:ee:2e:81:06:39:d6:6f:5c:da:3f:8e:7a:bf:71:
         da:50:fd:07:59:47:81:35:36:12:e9:93:cc:89:1e:49:bc:c8:
         5a:f1:b8:c3:8a:38:52:cd:28:8c:9a:55:78:e0:70:2c:3b:36:
         f7:01:97:3d:e8:c0:87:5b:bd:9a:e6:93:34:78:0c:c6:0c:2c:
         99:ce:8e:fb:08:42:e8:93:1d:fa:c4:c6:b2:ca:03:d0:14:91:
         ee:a3:70:0a:6a:40:da:39:18:5a:74:5b:14:43:00:2e:46:88:
         af:93:8e:7b:08:a3:fd:fd:e6:7c:41:b7:22:08:61:99:ca:0d:
         40:f5:3e:fc:93:b0:77:24:8a:b4:56:b7:33:1c:5d:da:e6:6c:
         0c:51:b8:72:53:27:01:43:e0:e8:a3:40:24:09:30:ed:e4:13:
         90:3e:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org