Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/5AFDCA16390611EF9290C361C4F9AE02.roa
File:                     5AFDCA16390611EF9290C361C4F9AE02.roa (raw, json)
Hash identifier:          4k7Wpo9Aaw6PXG9ws+iY+Olsll069lbNbaTcR7YIY9Y=
Subject key identifier:   1A:40:01:58:D7:55:D5:BB:97:2F:25:15:20:2B:AB:FD:D0:EC:F8:94
Certificate issuer:       /CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
Certificate serial:       02
Authority key identifier: EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/5AFDCA16390611EF9290C361C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 06:34:53 +0000
ROA not before:           Wed 03 Jul 2024 06:34:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     37978
IP address blocks:        203.18.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl
                          rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91874B6/serialNumber=EA61183D7F071DAED45564311B8A1A75BDCE70D6
        Validity
            Not Before: Jul  3 06:34:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6684f10d-250c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:4e:55:68:de:e3:a4:83:53:27:06:bf:84:
                    54:15:6a:0b:df:f3:98:60:12:46:ba:5a:1d:56:a3:
                    3f:ef:b2:e0:46:2e:ca:30:93:dc:80:31:80:05:4c:
                    53:10:c1:36:f6:73:cf:7e:28:aa:28:42:e5:bf:0a:
                    1c:2e:6c:42:26:62:76:00:20:1e:20:5b:95:fc:bc:
                    96:19:f8:15:49:b6:2d:a9:f2:55:8b:c1:81:ee:05:
                    2e:dc:e1:8c:ee:be:9a:3b:eb:7a:d5:d7:2a:90:0a:
                    20:79:9c:65:f0:4a:9f:65:48:b8:93:65:a4:df:e9:
                    63:d2:09:58:e8:c8:d5:bb:6a:51:aa:20:05:84:c6:
                    1c:d1:c2:d9:a5:67:51:a4:ce:da:2c:68:46:54:f9:
                    90:66:80:5f:1c:84:71:27:e7:64:1f:76:3d:6c:9e:
                    3b:8e:ca:70:44:d9:fc:60:ca:68:55:ab:b3:b1:1a:
                    46:ba:6f:2b:8b:26:48:ff:af:fa:ba:da:7f:d5:3b:
                    27:9d:b8:d8:32:3f:8b:b1:26:9b:e1:c0:4c:f0:98:
                    83:15:5f:16:c3:63:78:cc:cb:5a:9f:4a:38:2e:c0:
                    5f:be:48:fd:ef:d2:16:35:52:5a:ca:b2:66:04:3e:
                    4c:c4:0f:15:e8:cf:29:9c:ac:10:da:e4:31:38:76:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:40:01:58:D7:55:D5:BB:97:2F:25:15:20:2B:AB:FD:D0:EC:F8:94
            X509v3 Authority Key Identifier:
                keyid:EA:61:18:3D:7F:07:1D:AE:D4:55:64:31:1B:8A:1A:75:BD:CE:70:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/6mEYPX8HHa7UVWQxG4oadb3OcNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mEYPX8HHa7UVWQxG4oadb3OcNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91874B6/BE8911F4390511EFBF187A4AC4F9AE02/5AFDCA16390611EF9290C361C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:ec:d0:78:fb:43:e8:88:53:36:b2:8c:30:f1:dc:e7:38:ab:
         4b:3c:b2:85:f2:3d:17:fa:88:63:90:ff:b0:4d:ff:ae:46:c4:
         64:82:69:ad:59:60:26:97:8d:47:c2:35:90:71:ff:d8:0b:f1:
         e1:90:2b:9e:76:df:73:58:57:9d:c6:a4:ff:51:99:a3:3a:a2:
         6e:9d:77:c1:6c:cf:48:a0:be:98:ed:df:72:a2:b7:40:f4:5d:
         c5:35:27:c8:04:33:68:9c:47:30:6e:42:dd:f4:6b:2a:53:b1:
         aa:c3:d8:35:c9:28:c1:d8:e1:5b:5a:2c:f4:42:87:e9:58:11:
         a1:7e:38:54:6e:19:2d:19:78:68:82:c3:cc:97:82:92:86:a1:
         a3:78:69:20:7d:98:d4:8a:e9:99:67:49:fe:e1:1c:7f:92:1a:
         f4:41:b8:77:e9:df:a7:00:88:ad:31:af:a6:64:2a:d7:ba:01:
         ac:aa:d1:c6:19:27:b3:72:ce:a3:3d:4c:30:b2:ac:5d:06:1e:
         7c:d3:f9:81:03:0d:fe:15:7a:73:a2:83:f6:d9:31:53:56:89:
         ad:5a:17:21:ac:71:00:3c:59:b0:2b:2c:71:c3:bc:42:8f:a4:
         64:a9:77:9c:e8:56:11:22:00:cc:0c:5a:86:be:9b:9a:7f:ff:
         91:86:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:13:54 2024 by rpki-client on console-fra.rpki-client.org