Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
File:                     E8118BFA022C11EBAC47A831C4F9AE02.roa (raw, json)
Hash identifier:          HwVvfhhBB2RSjFMDjowAziG6alcP2zuXw5LmUAX2gK8=
Subject key identifier:   4F:35:1B:07:52:DF:76:B8:A5:DB:1F:39:7E:DC:88:BB:FC:B1:75:BE
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       1713
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
Signing time:             Thu 20 Jun 2024 17:26:36 +0000
ROA not before:           Thu 20 Jun 2024 17:26:36 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     132585
IP address blocks:        203.198.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5907 (0x1713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: Jun 20 17:26:36 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6674664b-3c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:0e:b5:6a:4a:e1:83:04:26:b6:33:32:0c:
                    21:b6:07:a3:d8:bb:b1:c1:98:e9:64:71:2d:e1:ce:
                    1a:d0:f7:25:ac:cc:ab:a2:0c:24:02:a8:1c:dc:4e:
                    f4:2e:66:db:ba:82:b0:71:a8:9d:49:b9:22:6a:cb:
                    a2:b1:68:0c:09:53:cd:b1:40:00:92:f3:bc:13:c9:
                    70:8b:09:37:63:64:84:49:c2:b4:30:88:96:9f:06:
                    9d:62:96:eb:86:49:ac:f7:c6:9d:76:69:08:18:33:
                    97:18:f6:0b:b5:21:48:5c:2c:2e:32:98:dc:6a:c0:
                    4f:39:08:ac:7d:dd:c8:ac:be:5b:1b:29:08:f9:f2:
                    e7:51:7f:7d:91:cd:b2:70:85:eb:e3:5f:c9:6f:55:
                    81:46:9c:ab:5f:b9:b8:c7:5e:60:6c:b2:66:30:fd:
                    6b:52:24:7c:4c:81:20:fd:45:dd:69:9d:d1:6f:89:
                    fb:94:39:fe:4a:30:bc:5c:68:e0:57:6a:c8:2b:c4:
                    e1:56:0c:f0:83:ea:5e:56:46:40:5b:6a:3c:c0:c4:
                    2b:f7:a9:d5:66:c3:99:69:23:cf:24:54:b3:f3:51:
                    ab:5d:40:9f:b0:94:08:45:ff:d0:cc:93:83:b9:36:
                    a3:13:f2:e3:4c:99:c6:37:ea:ef:e3:da:78:d1:6a:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:1B:07:52:DF:76:B8:A5:DB:1F:39:7E:DC:88:BB:FC:B1:75:BE
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/E8118BFA022C11EBAC47A831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.198.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:b0:26:a4:c8:be:7b:98:85:2e:77:29:49:d5:85:4f:9a:42:
         d9:42:04:f3:2a:03:35:cc:9a:1a:7a:c3:65:24:de:f5:58:d1:
         8d:77:ee:0e:fb:43:11:d2:0a:0b:b6:ae:a7:27:a0:0e:bb:54:
         63:8a:04:0d:e6:58:61:04:36:10:07:91:a3:0f:b1:df:22:0a:
         75:b2:24:d9:10:ca:4c:ab:d3:67:db:3c:18:3b:25:21:92:94:
         14:1e:c6:6d:89:66:48:76:ee:82:c0:d1:ea:2c:fe:d1:35:f2:
         d1:72:b2:cb:71:47:64:93:04:ff:9d:05:10:4c:b8:27:87:7c:
         ae:3c:ba:5d:70:c8:48:1d:a1:53:81:24:ec:73:62:a0:ea:1f:
         0e:7a:1c:32:de:2a:24:93:e5:8a:82:d5:fe:db:eb:5a:db:7f:
         c7:fe:3e:1d:9c:4b:1e:33:83:91:71:2a:f1:56:d6:46:89:24:
         40:e7:a6:de:4a:88:45:49:92:17:25:86:dd:81:a8:6c:0f:be:
         34:55:0e:27:89:08:b3:fc:2d:ae:51:48:0b:54:0f:49:19:0b:
         33:f8:ae:7d:19:99:df:6d:55:71:20:40:a3:21:16:bd:c0:da:
         c1:3c:d2:54:be:80:00:33:a1:d6:03:19:9b:c4:ee:dd:11:0c:
         51:df:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org