Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
File:                     707EE02E54EC11E791C3F825C4F9AE02.roa (raw, json)
Hash identifier:          yT6VnRLmIX4JBA9GtJaKAexfPeVPPL2P99luRa7FJpM=
Subject key identifier:   C8:26:8A:AA:FC:D3:ED:51:5C:6E:49:64:5A:33:4F:82:E1:22:17:59
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       2E64
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
Signing time:             Thu 11 Feb 2021 14:20:14 +0000
ROA not before:           Thu 11 Feb 2021 14:20:14 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     4608
IP address blocks:        203.133.248.0/23 maxlen: 24
                          2401:2000::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl
                          rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11876 (0x2e64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Feb 11 14:20:14 2021 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=60253d1e-8809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:f4:ac:0f:1e:5d:45:19:03:16:ce:b1:37:
                    51:de:bb:99:3b:c5:d0:65:a5:8c:c5:ac:21:12:f8:
                    8d:94:0e:36:0c:df:ec:92:ee:fd:07:ce:7d:82:19:
                    99:f7:28:ad:bb:c9:c1:63:fb:09:74:ce:a7:a2:be:
                    6e:92:c0:81:1d:e1:2c:d1:75:f0:12:32:97:df:10:
                    a8:65:5f:15:fc:da:55:3b:0c:a0:ee:57:0b:3e:c5:
                    2d:31:ef:53:8b:11:3f:ef:07:6b:c2:5e:c1:c6:9c:
                    2f:50:20:a6:46:8a:d7:39:df:d8:4b:90:89:ad:47:
                    9e:c4:f2:8c:57:33:c3:15:0b:3f:ec:37:ff:f4:a3:
                    75:bd:22:f5:09:19:da:72:87:7a:c7:3f:8b:4b:55:
                    a5:bb:8a:31:4d:51:f0:fb:56:8b:1d:5c:03:9c:d2:
                    27:4d:db:fb:0b:b8:53:97:39:53:36:b8:04:51:86:
                    f4:07:25:50:87:66:79:b1:0a:9d:40:8c:2f:6f:2b:
                    ad:73:b4:9b:6c:94:b1:bb:85:9b:07:62:f7:10:54:
                    b6:dd:c7:d5:b2:33:54:be:b2:33:ef:93:e2:77:99:
                    2a:60:3e:80:0e:46:8d:d7:07:e3:0d:ac:2e:3b:95:
                    2f:1a:d9:47:3a:33:9e:07:68:cb:71:c0:68:c6:86:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:8A:AA:FC:D3:ED:51:5C:6E:49:64:5A:33:4F:82:E1:22:17:59
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/707EE02E54EC11E791C3F825C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.133.248.0/23
                IPv6:
                  2401:2000::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:83:ac:34:bd:9d:6c:8c:9d:b9:b8:a8:24:52:21:60:e6:3f:
         ab:69:51:6d:15:4d:37:3b:1f:e4:17:81:e3:60:3e:96:87:3f:
         51:35:f7:f9:4e:bb:cc:9a:1b:67:fc:af:67:9e:1f:72:d1:a7:
         ad:b9:bb:4b:7e:a0:e7:db:cb:b2:b8:be:c0:90:36:44:52:67:
         1f:36:9e:00:71:b0:08:33:d9:91:b1:ed:6b:7d:ea:fd:e8:72:
         21:2a:25:10:be:86:c2:e6:86:ef:19:95:81:47:85:6e:72:7a:
         b1:3b:12:03:8a:e6:71:90:4d:32:ab:30:c0:98:81:49:a0:08:
         ab:2b:2a:cc:41:3a:99:7f:46:b3:d1:84:3a:5a:d7:10:5c:bb:
         24:fc:2e:47:fa:7f:cb:77:d9:05:aa:4b:8c:b3:31:c6:c3:f3:
         1d:b2:28:90:04:46:3d:bd:51:d5:fd:0b:68:87:5e:f7:23:47:
         e0:1a:30:c0:91:66:7f:ab:97:77:b0:73:b5:25:dd:6d:6e:44:
         92:30:f2:f7:ed:da:cf:7e:35:fe:8d:38:27:b9:c2:7d:dc:7f:
         cb:91:98:1b:68:be:83:a0:c5:ae:f3:a1:ca:84:75:b2:51:ba:
         5c:ec:59:5d:72:aa:63:25:f3:d5:b9:5f:d1:fc:75:c4:b1:74:
         1a:a5:e1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org