Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/DF27F546D12D11EE9F451355C4F9AE02.roa
File:                     DF27F546D12D11EE9F451355C4F9AE02.roa (raw, json)
Hash identifier:          CjqDrCi2hZTQZyfoAe0SHwRX5l3G8AvvnnXcLvjS3v8=
Subject key identifier:   7D:E5:9A:94:E0:0D:0E:0F:74:21:36:E0:B7:7B:09:C1:3D:BC:5D:8B
Certificate issuer:       /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
Certificate serial:       0855
Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/DF27F546D12D11EE9F451355C4F9AE02.roa
Signing time:             Thu 22 Feb 2024 02:55:44 +0000
ROA not before:           Thu 22 Feb 2024 02:55:44 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     131164
IP address blocks:        113.197.74.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl
                          rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516
        Validity
            Not Before: Feb 22 02:55:44 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65d6b7b0-630c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:53:27:8f:d8:15:6d:3c:c6:5f:44:c1:d6:
                    94:e7:71:89:7f:57:f7:0e:e0:74:9d:5f:5e:3b:a6:
                    0b:63:fa:ee:44:c0:38:da:1a:5e:9b:49:a5:67:4a:
                    68:aa:c9:09:67:15:b1:0c:1d:c2:c0:d3:05:67:a6:
                    1b:2e:84:eb:0b:80:e7:4a:8a:ed:29:ee:07:1a:e0:
                    c4:e0:1c:b8:5f:de:94:e0:cb:99:6e:79:65:1e:b1:
                    46:29:d5:1b:9e:e5:0b:cd:12:9f:1c:f9:88:41:67:
                    65:9a:64:27:ea:3b:c5:28:5e:d2:51:ca:d1:31:b0:
                    e4:da:74:ff:cd:eb:76:71:b3:bb:db:8c:47:de:75:
                    b7:6f:b1:c1:65:50:8f:bc:e7:c6:eb:4b:63:9a:2d:
                    2d:e5:fb:f9:c5:d6:02:38:01:03:c1:60:3d:d0:a1:
                    f1:18:de:d6:ec:d0:48:16:fb:4c:33:0f:05:3d:70:
                    cf:1d:cf:6e:bf:dd:c9:2c:36:dd:ba:6a:ae:a2:f2:
                    7d:9b:cc:c0:62:c7:a5:6f:fd:4b:9c:e4:8c:9b:15:
                    62:c5:fe:92:6c:51:df:76:2e:9e:36:82:73:7c:0d:
                    0b:f9:70:35:4c:40:83:b6:1e:11:1c:19:9f:cd:78:
                    7c:82:ed:c6:90:47:55:c0:b9:3e:1b:ce:82:e1:d7:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:9A:94:E0:0D:0E:0F:74:21:36:E0:B7:7B:09:C1:3D:BC:5D:8B
            X509v3 Authority Key Identifier:
                keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/DF27F546D12D11EE9F451355C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:b6:8a:81:2e:05:01:e0:3f:1b:a1:13:a5:c5:72:8f:61:
         26:54:f9:34:6a:8e:59:48:d1:3f:c5:d6:0d:28:29:60:e3:92:
         e4:72:33:67:cb:ad:34:19:64:d2:74:7d:12:85:1a:e2:bd:fa:
         c1:79:b3:7c:14:a5:d4:bc:93:b0:12:fb:c8:b7:91:fc:1e:30:
         16:8d:57:a4:bb:a1:a0:f3:22:f5:55:0e:d2:d1:10:7a:10:dc:
         60:5f:68:f5:3c:e6:45:f5:2d:90:26:3d:78:76:97:5e:a1:7a:
         2e:f0:17:3c:97:16:02:55:7d:35:32:18:e1:16:ef:13:d7:ee:
         c7:2e:f9:2b:74:9e:e1:86:44:8b:83:21:f8:39:3c:cd:2c:ea:
         9c:0a:52:bf:77:4c:8f:ed:c0:80:bc:83:51:44:77:6c:39:08:
         09:de:d5:92:b1:f9:73:cf:a1:95:97:09:64:2c:51:d5:31:44:
         b5:db:d7:35:8f:2e:e0:11:a0:73:6a:3b:a2:16:cf:ea:ba:87:
         07:e6:1f:ed:8d:ae:00:d5:84:35:c8:5f:ab:f8:53:4e:39:01:
         ea:65:7e:a8:2b:80:56:b2:e4:1f:5f:03:c8:3e:dd:3d:31:91:
         34:15:fb:ca:d6:0b:c7:60:33:d2:18:1a:91:23:02:96:40:23:
         33:c9:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org