Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa
File:                     A084D2B2F92E11EA8946AD6AC4F9AE02.roa (raw, json)
Hash identifier:          ZMGcpYpyDrx5Nlm3hmxSXoAmdIiGiv7MUzbtEfqvlWM=
Subject key identifier:   A0:1C:48:89:E4:3A:CC:C7:7B:93:40:EE:45:B1:B3:5A:62:81:B5:34
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1731
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:14:14 +0000
ROA not before:           Wed 02 Aug 2023 17:14:14 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        116.90.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 17:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5937 (0x1731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Aug  2 17:14:14 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca8ee5-be2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:f8:d0:96:f2:71:c1:21:1b:4f:3e:f4:f8:
                    ea:fc:39:a6:ed:3e:57:23:c5:a5:b3:3c:42:a3:d4:
                    ca:40:28:0e:aa:f2:90:bb:80:ad:f5:16:a5:6c:ae:
                    ee:77:0d:6d:cc:d4:d6:3a:ff:01:37:17:50:b1:5d:
                    d4:16:d2:c5:3c:a1:13:2e:1a:fd:f2:fc:c7:df:51:
                    eb:b9:cc:6d:94:2a:ea:f9:ae:73:1e:8d:fc:7b:14:
                    e3:35:1b:51:30:25:1a:db:e3:03:06:b7:a8:09:9f:
                    e1:6b:a4:bb:a1:51:88:00:10:fb:9a:c1:12:e4:ee:
                    19:86:d7:f1:65:32:96:73:97:1f:8b:c8:94:cb:3f:
                    25:8a:63:bb:15:8d:41:64:6d:11:0d:a6:32:b2:b2:
                    47:66:0a:df:15:b6:86:66:97:0f:4b:04:81:8c:ce:
                    bf:78:e3:fb:4d:3d:4d:0b:9b:88:5f:38:1f:13:b6:
                    d5:9b:68:71:95:8e:bb:e4:bf:10:e0:d8:44:72:07:
                    62:76:d3:fb:5f:2d:8d:25:c5:74:d2:8c:3e:6e:bd:
                    b1:be:96:fd:bd:6a:b1:c2:5f:2e:37:8e:53:e9:87:
                    8e:69:52:7d:5e:fe:48:c0:2a:de:a4:24:29:99:8a:
                    1c:4c:32:f0:74:cd:da:93:24:6c:2e:f2:a2:84:65:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1C:48:89:E4:3A:CC:C7:7B:93:40:EE:45:B1:B3:5A:62:81:B5:34
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:1a:2a:9e:f4:16:fc:d4:4f:64:03:ae:da:81:ce:0d:44:
         6d:c8:62:c1:42:b1:ca:4d:6e:81:89:4f:21:7d:d0:6a:0f:2a:
         d7:77:50:91:0b:37:58:56:33:39:d6:7e:22:05:0d:0f:49:4f:
         26:d7:d8:1f:96:c9:39:09:b6:ac:5a:7a:60:d8:b6:80:4a:66:
         21:76:72:2a:c1:35:1d:59:e5:25:18:37:63:9f:d7:9b:23:91:
         60:0a:11:9c:0e:49:91:05:ee:78:0d:a3:7e:01:5b:61:ce:95:
         e2:0a:3c:fb:57:6d:ae:ff:6f:bd:54:4b:67:a7:25:5a:e7:f1:
         b1:ce:ef:3d:9d:0e:b7:f2:61:01:61:09:ee:b4:33:2d:fd:37:
         a8:a0:c0:31:eb:32:80:3f:70:b2:ca:dc:2f:70:81:9f:18:6b:
         9c:8f:c0:02:17:f8:bc:cf:d1:67:6f:a1:86:98:83:11:62:e0:
         56:db:2d:95:30:e7:0b:33:6e:54:14:3e:d1:5e:2d:61:34:e2:
         e5:d4:ff:06:1b:f6:3e:af:a7:33:92:b7:e5:46:7b:f1:20:b6:
         b8:8e:a5:65:f9:07:16:fc:81:97:cb:db:c1:bf:cf:53:94:9d:
         86:b1:5d:b0:c5:4d:34:11:63:d2:86:2e:64:93:4e:23:2c:67:
         e8:a2:ca:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:43:01 2024 by rpki-client on console-ams.rpki-client.org