Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
File:                     B5629336843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          X614Nr7ujJ8UnBOJIaOHUT2BrUgmubnzmFfczIemC/w=
Subject key identifier:   1D:D5:54:46:38:97:12:7D:85:7E:6B:D9:59:BE:76:E6:E6:EA:0A:62
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1730
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:14:13 +0000
ROA not before:           Wed 02 Aug 2023 17:14:13 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     10145
IP address blocks:        203.98.69.0/24 maxlen: 24
                          203.98.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 17:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5936 (0x1730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Aug  2 17:14:13 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca8ee4-3b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:3d:39:c5:16:e5:f0:ba:01:11:bb:5a:ed:
                    22:57:f5:5b:5f:13:9b:a3:e1:5c:9f:af:ed:0b:d9:
                    0b:d8:8d:e6:bc:ee:c8:92:a0:fe:48:9f:a3:3d:2c:
                    2a:32:5d:f3:14:5e:15:21:ac:b1:5e:be:aa:7d:6e:
                    35:58:c6:c6:08:8b:78:11:7d:13:1b:da:01:06:74:
                    a2:e5:ed:74:0a:7a:c2:2a:af:30:e5:17:d5:12:ac:
                    5c:b1:03:fb:3d:cd:6e:0b:12:f4:f6:8b:c1:51:b3:
                    c5:88:e1:58:d1:50:92:98:81:08:53:4b:ea:c1:8f:
                    38:bd:4c:4c:c0:4f:df:1a:91:64:8d:7b:b1:97:ed:
                    7e:c0:00:97:35:30:ac:b6:c8:92:80:a8:42:e7:01:
                    9c:41:a0:f1:00:82:2f:d2:ae:8a:cf:c7:97:82:43:
                    71:aa:88:3e:ea:4f:e2:5d:5c:5d:ae:51:c4:d8:d1:
                    c1:ba:1b:2a:58:95:d4:4d:90:16:ea:7c:82:a1:2d:
                    6b:7b:21:df:fe:bb:df:fb:ed:ee:0c:80:9d:b6:e2:
                    f0:20:21:56:7e:62:24:11:78:61:1b:9e:f6:cb:f3:
                    0d:47:4a:08:92:81:81:fe:d8:e3:ce:d5:68:bb:50:
                    01:78:51:39:79:29:d6:7b:6b:dc:59:68:51:cb:90:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D5:54:46:38:97:12:7D:85:7E:6B:D9:59:BE:76:E6:E6:EA:0A:62
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B5629336843011EAB4270B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.69.0/24
                  203.98.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:5a:b5:13:55:57:20:0d:69:1a:19:0a:98:46:70:f0:00:01:
         21:95:61:37:47:cf:ff:6a:51:90:92:0a:f9:e5:95:a0:c5:64:
         4f:e6:aa:84:e4:00:3d:f6:1f:14:5f:91:2a:5d:4e:ad:ed:a4:
         98:50:50:a5:d4:0f:6b:da:ae:0d:81:36:d0:89:74:d0:e1:2d:
         83:2e:dc:a3:6f:f3:be:e8:95:20:a2:5b:49:5d:0c:3f:2f:d6:
         71:b4:84:4b:b1:1b:3b:4b:52:eb:e1:7c:3d:c5:f1:1f:93:f4:
         b8:71:b0:d7:a3:fe:01:df:ff:89:4f:e8:9b:b8:2b:81:73:83:
         cc:ae:d8:c4:ad:e0:7d:90:16:2f:c3:b1:23:5e:ff:a3:e8:cf:
         9f:be:36:45:82:89:5d:a1:6e:05:80:31:05:6d:e3:71:6d:e4:
         90:d1:2e:3c:27:4a:28:5d:f3:7a:78:4c:86:5d:48:c7:d6:2d:
         03:c1:49:73:d5:2b:8a:0e:7e:0e:b8:a6:d6:c9:ae:3a:10:12:
         9a:c3:93:cd:e8:ff:98:b8:cb:38:f4:b4:f8:0d:83:38:dd:38:
         0a:17:0c:d2:3a:9a:9e:bd:9c:88:78:ef:9c:dd:75:77:bf:c0:
         ba:b9:8c:e6:53:71:5f:92:e3:2a:4d:59:de:32:09:e5:67:86:
         35:9a:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:06 2024 by rpki-client on console-ams.rpki-client.org