Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/1921C8926CDF11EAB92A3A24C4F9AE02.roa
File:                     1921C8926CDF11EAB92A3A24C4F9AE02.roa (raw, json)
Hash identifier:          IkqW+PwyXlQ+AUTKEJ4fHo5q5mHtKj5Ve8Q8p0ADu48=
Subject key identifier:   49:26:AE:28:0D:90:13:5A:99:CB:59:CE:22:87:E1:BE:C8:58:DD:FF
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       2E62
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/1921C8926CDF11EAB92A3A24C4F9AE02.roa
Signing time:             Thu 11 Feb 2021 14:20:12 +0000
ROA not before:           Thu 11 Feb 2021 14:20:12 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     24021
IP address blocks:        203.147.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11874 (0x2e62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Feb 11 14:20:12 2021 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=60253d1c-84e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3b:a0:e0:b1:c4:e8:a0:f2:c1:a3:2d:23:de:
                    78:92:75:ff:63:ff:13:47:ab:e8:e0:2c:4a:ca:90:
                    6c:50:68:c9:6a:85:8a:49:72:ca:bd:ca:c5:af:8d:
                    66:9e:54:13:8f:18:00:73:b4:45:4b:fa:f7:76:fa:
                    55:9c:70:29:4f:70:90:bd:0b:45:63:eb:9e:ce:8f:
                    51:13:bb:bf:b8:1b:2c:fe:d9:bf:01:d6:57:fb:30:
                    33:31:48:b5:7a:f3:97:20:cb:d1:30:b1:6a:0a:43:
                    ba:93:3a:1d:ba:29:7c:d4:68:0e:23:57:59:e5:47:
                    81:e2:12:0a:c2:08:aa:c4:b8:4d:f3:bb:99:80:9a:
                    71:fe:14:e1:5e:e5:90:70:d9:f2:65:d7:cd:0c:2c:
                    11:19:c0:41:42:19:96:f5:13:4a:ea:56:49:36:ce:
                    5d:dd:a4:23:80:91:05:a2:47:ae:f9:2b:b1:23:65:
                    6a:03:70:50:59:d2:1a:06:9e:18:57:4d:74:00:a3:
                    e2:31:68:11:d2:d1:84:44:60:dd:e7:ec:2b:24:43:
                    65:57:d5:8c:6e:06:f2:5c:62:a0:d3:94:b9:a8:df:
                    0c:3c:93:ac:71:bb:66:d4:06:b8:02:55:7e:5b:75:
                    6d:22:e3:64:95:97:41:f5:9c:c7:d0:47:65:ff:d4:
                    22:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:26:AE:28:0D:90:13:5A:99:CB:59:CE:22:87:E1:BE:C8:58:DD:FF
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/1921C8926CDF11EAB92A3A24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:93:8d:0e:eb:a8:13:5d:1b:a1:9a:1b:6f:8a:9d:61:16:b8:
         cc:cd:75:52:80:e8:64:2c:ed:4f:90:be:15:ac:f7:4e:ba:89:
         15:2f:93:7c:91:2c:17:a4:c4:82:e9:88:d7:11:8a:39:c3:d1:
         ec:41:90:b3:68:17:8f:e7:19:da:79:0c:68:47:36:13:86:fb:
         94:5b:95:85:e3:7d:d8:26:a6:32:31:ba:33:7c:78:19:a4:9f:
         e5:82:d5:78:d1:23:43:5f:21:09:a1:93:0c:9e:78:17:fe:8b:
         f5:c7:51:8a:13:49:2a:49:e7:ea:4e:c9:cb:b3:51:eb:e6:a0:
         8b:b4:0a:a2:43:16:03:81:e6:f6:91:a2:99:04:18:ed:d6:2b:
         e3:cc:c6:c6:b6:ea:31:e9:cc:a3:29:05:bf:38:ba:2d:57:38:
         bb:18:60:8e:d1:a0:d4:76:2f:81:19:3f:91:f6:87:39:90:d3:
         15:20:ee:e2:af:73:67:60:8c:66:f2:0c:ba:76:62:eb:4c:91:
         7c:6f:c1:34:48:c3:14:02:28:e7:45:04:86:c5:1d:a7:d1:91:
         0a:e1:ed:2f:8c:e7:3d:46:41:0a:d3:46:5a:e1:11:ad:1f:dd:
         cb:f5:33:21:1f:35:0d:21:2c:b5:93:fb:44:0f:8d:62:a4:f8:
         cb:cb:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:38:08 2024 by rpki-client on console-ams.rpki-client.org