Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/3032F85ABECC11EF8992CD85C4F9AE02.roa
File:                     3032F85ABECC11EF8992CD85C4F9AE02.roa (raw, json)
Hash identifier:          rpMLyoZvQyb1ho+FopwPvoVgmXiLOFz0MQlXsd/Ou7U=
Subject key identifier:   FD:BD:04:0A:B8:81:5D:94:49:2D:F0:3F:5C:7C:5F:0D:2F:22:6C:40
Certificate issuer:       /CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828
Certificate serial:       1E
Authority key identifier: D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/3032F85ABECC11EF8992CD85C4F9AE02.roa
Signing time:             Fri 20 Dec 2024 12:16:06 +0000
ROA not before:           Fri 20 Dec 2024 12:16:06 +0000
ROA not after:            Sat 01 May 2038 00:00:00 +0000
asID:                     45163
IP address blocks:        203.176.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl
                          rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287/serialNumber=D8B1E2389BA591FD79B9A504AF5A44DAE0A6E828
        Validity
            Not Before: Dec 20 12:16:06 2024 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=67656006-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:e8:4a:1a:cf:41:0b:2f:23:f7:fd:8c:ca:
                    d0:fd:cd:55:80:7c:59:96:a3:2d:7b:12:1f:12:72:
                    45:2b:cb:2e:3b:17:53:a8:d8:2d:3c:a3:ba:5a:40:
                    e0:29:a2:c6:3e:69:4b:70:87:85:52:bc:62:8f:7a:
                    24:b2:66:98:bb:4a:90:0e:09:0d:50:c2:5c:8d:7d:
                    60:ba:a0:aa:24:8d:e3:ea:88:ff:14:ac:fa:af:e6:
                    2a:6f:b8:c1:a3:f0:26:aa:b9:cf:b2:4a:f9:3c:85:
                    15:e0:99:23:12:ba:00:9e:e9:51:ce:aa:a0:4d:d1:
                    b6:41:bb:5a:1a:8b:13:05:99:3f:1f:63:8a:d8:1b:
                    93:2e:39:13:73:7e:48:8c:9d:ef:41:ee:53:c1:95:
                    58:1b:ab:c4:eb:14:3b:d0:36:b4:f9:1b:11:d0:e7:
                    26:42:2d:15:da:5f:20:c8:6d:47:76:25:b1:ef:1b:
                    d9:07:2b:fe:cd:92:27:3f:6e:94:22:34:78:3a:29:
                    f2:db:53:34:cf:bc:de:4a:57:fc:04:40:fe:63:2b:
                    68:d7:66:fc:fe:54:d7:bb:5e:85:1f:d0:39:92:94:
                    96:d0:1a:48:48:a7:91:73:d8:c4:dd:c4:0e:a0:14:
                    b0:7f:40:7f:e7:de:b5:88:b7:f0:44:36:57:8f:b7:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:04:0A:B8:81:5D:94:49:2D:F0:3F:5C:7C:5F:0D:2F:22:6C:40
            X509v3 Authority Key Identifier:
                keyid:D8:B1:E2:38:9B:A5:91:FD:79:B9:A5:04:AF:5A:44:DA:E0:A6:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/2LHiOJulkf15uaUEr1pE2uCm6Cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2LHiOJulkf15uaUEr1pE2uCm6Cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/307CFF1EB37711EFB9184D7AC4F9AE02/3032F85ABECC11EF8992CD85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:78:06:53:f9:79:46:2a:17:50:f0:da:fa:ce:63:71:00:
         93:11:0c:db:ba:cd:00:ae:21:1d:e7:6e:62:c1:ea:d2:68:d3:
         9e:b2:40:67:87:21:74:a2:2a:32:01:c3:35:7a:bc:07:9e:ce:
         55:e2:5c:2f:40:f4:55:82:8a:9b:44:cc:20:80:08:54:22:55:
         05:38:3e:1f:34:6f:04:34:f6:60:c0:b0:63:c7:dd:69:30:6a:
         e3:61:21:a0:79:d1:d5:82:d0:f6:7f:7e:2e:74:50:be:40:51:
         ff:15:c9:e0:4e:aa:ec:04:be:b0:d2:1d:e9:9c:57:18:7d:45:
         b4:a6:90:13:2b:4b:54:32:f1:50:4d:e9:79:44:0e:a0:aa:a0:
         5f:8c:78:c1:07:12:b6:6f:21:de:c2:c5:b3:b1:a4:b4:49:87:
         ae:01:a3:23:0d:f2:1a:33:92:89:16:a9:32:9e:4d:01:7d:86:
         10:86:8e:cb:8f:5b:00:2e:92:34:a6:14:6b:f9:4d:e8:dd:ac:
         3f:ed:65:09:d0:36:f5:c3:01:b5:1a:ad:09:86:e9:82:4e:96:
         c0:07:07:5b:15:f1:b0:0a:22:cb:c6:bf:ec:0e:a4:d3:6c:60:
         2d:93:0c:17:71:50:9b:78:5a:39:f6:12:6f:6d:5b:4f:51:a5:
         d2:c3:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:43:26 2024 by rpki-client on console-ams.rpki-client.org