Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
File:                     AB4B141CA24211ED92C4107BC4F9AE02.roa (raw, json)
Hash identifier:          4fwK/7GPLlnhmbhkjNyRaiOCTRCnPsD8/p+clG0tiBU=
Subject key identifier:   58:4E:C7:EF:0E:F6:9E:07:F0:86:BA:2E:C0:A6:14:B3:F1:5E:BE:4A
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0507
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
Signing time:             Fri 29 Sep 2023 12:44:19 +0000
ROA not before:           Fri 29 Sep 2023 12:44:19 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     3836
IP address blocks:        203.185.96.0/19 maxlen: 24
                          2001:f00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 00:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Sep 29 12:44:19 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6516c6a3-7066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:e6:7c:e9:d6:27:30:73:fb:b1:6a:af:45:
                    40:08:e0:31:89:cb:47:8d:5c:ee:05:85:d6:45:3d:
                    d8:16:41:39:75:ca:38:aa:9b:9a:0d:53:fd:93:ee:
                    c6:40:56:da:b8:ac:d9:d6:ee:27:c0:79:7a:08:ab:
                    91:77:b1:4e:0b:e7:9a:c0:79:43:93:3b:6f:f5:26:
                    6a:7a:6b:5b:73:55:36:77:d7:45:d2:fb:56:7a:d8:
                    91:3d:e3:a0:ce:24:8d:92:e2:41:4b:1a:b5:ab:af:
                    33:61:c9:de:dd:24:2a:4f:9e:5c:87:26:80:7f:23:
                    cc:53:03:49:e5:0f:bb:9c:4a:ac:21:90:12:fe:b3:
                    35:f4:26:ed:36:16:45:55:b7:c1:ff:35:b5:55:54:
                    13:2b:f9:1d:97:bd:33:36:4e:38:29:a7:73:c4:f8:
                    da:11:ee:35:71:c4:71:12:f7:ba:7d:d7:86:0f:b0:
                    8b:ea:b2:4a:08:21:b5:8a:7c:83:b2:2e:eb:c8:3f:
                    b5:fb:f5:cc:54:8b:79:d0:50:2c:68:5c:97:88:25:
                    8c:36:4f:d5:a0:64:37:2f:db:39:e9:2b:45:18:12:
                    88:34:16:df:47:ca:96:c2:00:d2:69:06:91:a0:de:
                    b1:ff:bc:12:41:8f:67:27:63:65:70:b5:97:e6:a9:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:C7:EF:0E:F6:9E:07:F0:86:BA:2E:C0:A6:14:B3:F1:5E:BE:4A
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/AB4B141CA24211ED92C4107BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.185.96.0/19
                IPv6:
                  2001:f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:e9:88:22:12:f1:0c:bf:bb:1c:82:f8:07:98:a0:1d:92:30:
         12:02:32:67:08:2e:0c:40:a7:4c:89:c7:aa:64:ed:fc:d4:e2:
         2f:a4:d8:3d:6b:f5:65:a1:e3:ae:8f:66:93:45:ef:86:1a:8b:
         b1:3a:3e:da:ae:80:66:55:cd:b8:dc:e4:42:5e:a5:8c:60:49:
         5a:b3:ab:eb:b3:71:a5:1a:fc:81:2e:8a:43:29:e0:a6:41:d2:
         5d:f8:d7:9f:84:9a:97:5a:cf:12:46:a1:bb:81:6f:9e:96:0c:
         10:24:25:2d:4d:f0:0c:77:54:c8:7a:65:3a:ce:80:cc:d4:7f:
         85:1e:6a:02:78:e4:31:e4:7c:6d:79:67:7c:ef:7f:c7:8b:bb:
         cb:60:b6:66:df:ac:e0:fe:c9:99:38:45:fa:87:b5:7c:99:c0:
         87:09:2c:f9:a4:9f:f3:19:fe:ec:bc:5b:24:33:34:5f:b0:3e:
         6b:d1:c5:99:65:b9:a8:34:c3:17:8e:13:43:55:ab:28:64:33:
         19:25:91:74:c8:be:16:b9:fb:61:b4:df:c7:eb:d5:f5:0e:6f:
         0f:aa:36:c8:71:b5:3b:92:0e:62:f8:c5:7c:14:b1:58:15:ed:
         f5:26:4e:d9:7b:59:7a:26:ba:76:2f:61:c0:ef:c2:43:d8:04:
         fb:a7:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:23 2024 by rpki-client on console-fra.rpki-client.org