Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
File:                     58A35B90EA5611EEA9708773C4F9AE02.roa (raw, json)
Hash identifier:          rDV2Bqm6eu0V34tibuKUZctwH1/aGEeBJq9xYgfrF4M=
Subject key identifier:   EB:AC:17:47:22:FB:A6:0E:64:B2:2B:04:17:36:EA:18:58:4F:78:79
Certificate issuer:       /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
Certificate serial:       228D
Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
Signing time:             Mon 25 Mar 2024 03:18:27 +0000
ROA not before:           Mon 25 Mar 2024 03:18:27 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     202595
IP address blocks:        203.82.24.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl
                          rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 16:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8845 (0x228d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D
        Validity
            Not Before: Mar 25 03:18:27 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6600ed03-e876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:12:a2:ac:a1:b0:30:d6:3f:ca:bb:04:c2:
                    02:c1:79:b7:d6:14:34:fe:0b:88:d5:c9:96:61:de:
                    00:2c:0b:40:1c:93:0a:ab:db:5d:43:c4:6a:0e:14:
                    d7:20:4d:72:aa:1b:b8:71:bc:b2:97:93:b8:21:81:
                    95:a6:a6:6e:cb:49:68:e2:dd:9b:a7:a0:ff:88:ca:
                    d9:94:89:25:c8:5d:22:1a:76:a8:80:75:5a:fd:a9:
                    36:a7:02:04:33:41:0b:e4:d1:f8:9e:3b:59:23:d6:
                    9e:69:be:71:e8:0d:50:f1:3d:ca:50:b0:50:b7:c5:
                    55:10:4e:1e:c7:90:03:ab:98:74:a2:72:c5:48:64:
                    82:9d:01:f8:61:48:ce:07:b1:9b:b8:05:76:49:d4:
                    7b:ce:68:ce:34:6a:51:42:b7:47:da:46:1f:b0:b5:
                    fd:53:14:04:93:21:98:58:2f:d6:6c:34:bf:5e:f7:
                    fd:90:ad:69:cd:12:d3:6a:ed:8d:58:8f:c4:77:4b:
                    77:f6:af:61:09:49:c6:e1:45:54:14:78:e1:7a:5e:
                    d1:f4:c8:e9:3d:91:ab:cd:ef:e1:73:25:93:67:72:
                    4f:13:a9:3c:ef:c8:eb:1d:54:b0:fb:af:66:ea:a9:
                    11:4d:44:6e:85:e0:b6:56:31:98:96:f0:6b:be:93:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:17:47:22:FB:A6:0E:64:B2:2B:04:17:36:EA:18:58:4F:78:79
            X509v3 Authority Key Identifier:
                keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/58A35B90EA5611EEA9708773C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.82.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:e0:88:58:7c:bd:04:4a:46:e7:b8:75:4b:8e:17:ae:c1:3f:
         61:ca:7e:46:59:6c:02:d6:78:53:f5:dc:fa:da:4d:64:f0:07:
         e2:f1:e5:38:44:db:27:b8:b2:5e:ff:a4:0c:52:e9:d8:ab:bd:
         c0:8c:6c:cd:21:1d:cb:20:bb:d7:e2:f5:72:d5:26:c8:16:94:
         74:50:d9:8e:f9:95:44:2f:08:05:62:6b:a3:1f:91:e3:04:b2:
         d7:14:99:cf:55:88:68:7e:27:d1:91:33:71:52:c7:87:a7:2e:
         54:8e:cc:22:58:b7:fd:74:a6:96:c5:b8:a4:a2:fe:56:fd:62:
         06:b2:82:b0:58:1d:f3:1e:7e:14:9a:58:b0:ee:f8:9c:f4:20:
         8c:31:f9:7c:c3:00:a0:8d:18:d5:f6:58:3f:6d:15:ed:69:33:
         8e:91:39:67:5c:1e:61:db:df:ba:37:93:a1:2f:0a:61:45:a4:
         46:53:23:a1:b6:75:18:91:99:65:bd:d4:e6:7d:ab:11:ca:62:
         43:9a:c2:d8:d4:5b:4f:31:e0:8b:e7:17:c7:37:d0:b1:c1:41:
         6b:87:2d:71:80:6f:96:f7:60:f7:eb:ae:74:a3:8c:c7:5e:a5:
         1d:fb:ac:14:ab:b0:ef:14:c6:ce:08:28:52:db:78:55:90:b3:
         b6:00:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:16 2024 by rpki-client on console-ams.rpki-client.org