Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
File:                     C49CE482BEA411EB85828650C4F9AE02.roa (raw, json)
Hash identifier:          hooAX2OxbnAxEYVV3GefPOYGFhwfni9EQuxarxtyOcg=
Subject key identifier:   5A:B0:44:07:AA:5E:3A:36:A6:05:5E:E6:81:06:F1:D8:E9:61:F9:F6
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       0469
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
Signing time:             Fri 07 Jul 2023 00:20:28 +0000
ROA not before:           Fri 07 Jul 2023 00:20:28 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     1221
IP address blocks:        203.19.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul  7 00:20:28 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64a75a4c-1af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:b4:cf:02:5a:0c:69:5d:36:c2:3a:5b:0d:
                    86:69:0b:22:5b:29:79:64:86:22:4d:37:17:e5:57:
                    f6:14:c4:2d:df:8d:63:7e:a9:88:15:13:b7:05:35:
                    d9:b9:b2:37:e6:42:6c:d2:82:6a:28:ab:05:43:d7:
                    a3:38:2c:d8:f1:74:80:e6:f4:1d:d0:ce:fc:cd:c7:
                    3c:c8:f5:27:50:00:3c:6a:be:e6:53:38:6e:85:3e:
                    e7:0a:ac:c4:6f:17:f4:57:1e:84:ce:5c:6e:3b:4c:
                    fd:8c:ee:b2:35:3e:ae:52:22:be:88:00:f5:29:92:
                    df:36:ac:f6:1e:f1:63:46:eb:31:a0:66:44:fc:75:
                    dc:c6:bf:f1:54:fb:b0:f6:d9:41:89:5f:3a:11:00:
                    41:d2:df:9e:81:bc:27:64:9c:db:75:66:3c:6b:6c:
                    57:5a:79:73:5e:4b:c5:34:4c:18:95:14:56:5b:b2:
                    67:4e:4e:79:16:f8:1e:0f:a9:7b:35:b2:2b:5e:1c:
                    8d:47:40:6e:37:19:c6:b5:ef:b7:d9:cf:ec:06:1f:
                    a7:d7:e1:96:73:b1:80:bb:d2:a3:2e:8d:79:92:e1:
                    5f:92:43:67:e0:75:a4:97:43:e6:d1:f9:79:67:72:
                    9c:7c:58:d0:de:45:02:9e:12:63:2c:4c:a5:b9:35:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B0:44:07:AA:5E:3A:36:A6:05:5E:E6:81:06:F1:D8:E9:61:F9:F6
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:2b:49:58:2a:07:e6:bd:8f:90:ce:c8:66:db:71:9a:fd:94:
         fc:ef:fa:91:29:b7:78:ca:d9:d0:9f:d5:3c:d5:95:ea:f3:e1:
         27:c7:7f:27:ae:d2:1c:79:b3:cf:fd:85:6c:33:ed:61:74:31:
         5e:64:bc:2d:58:c1:37:3d:1e:59:75:7e:e6:0d:b7:71:70:7b:
         bc:69:f4:1c:47:9f:fd:f1:42:e4:5a:d8:6e:37:1b:60:9a:4e:
         c3:c9:5d:5e:28:bc:02:5e:e3:a1:82:25:30:d0:6a:c6:de:69:
         2c:f6:8b:4d:7c:04:60:e4:b8:6a:ee:df:d0:98:42:78:32:c7:
         47:40:b3:4c:4d:83:2b:fa:da:0f:33:50:ea:d9:5d:73:ad:b5:
         c5:bc:cc:db:6a:7d:74:8d:7f:d3:7a:cf:e6:69:0b:06:69:3a:
         eb:0a:f5:bd:2f:f4:83:9d:0b:55:93:ff:f3:84:ae:be:d4:06:
         df:81:f6:d6:63:6a:a7:a7:11:07:c7:58:94:99:3e:02:40:6b:
         2d:ee:b8:86:d1:32:57:ea:32:c6:22:aa:2c:22:ae:ac:9f:90:
         67:66:f2:fe:df:a9:1f:af:b0:05:0c:35:dc:f3:bd:4f:1a:e9:
         0b:a1:99:d0:e9:b3:2a:02:b8:7c:f8:fa:82:f6:27:9c:1d:b8:
         f3:d6:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org