Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
File:                     E12607CE6F0411EEA5298939C4F9AE02.roa (raw, json)
Hash identifier:          nCTIr/V5xZEh3ugXoBfi7Q8QPkS4NVpO4v5sjD/rMzo=
Subject key identifier:   18:41:68:80:FC:CF:B4:0B:F2:9B:2A:93:15:16:4D:FF:EF:FD:49:E7
Certificate issuer:       /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial:       34
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
Signing time:             Mon 08 Jan 2024 20:29:11 +0000
ROA not before:           Mon 08 Jan 2024 20:29:11 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     7575
IP address blocks:        132.234.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
        Validity
            Not Before: Jan  8 20:29:11 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659c5b17-8e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:3b:54:50:52:66:18:c1:93:3d:66:a9:70:
                    a3:80:b4:c7:be:2b:77:00:05:1d:ed:e3:1a:f9:25:
                    e3:b9:3a:a1:15:7f:2a:52:a4:f3:cc:1b:0f:6a:d1:
                    c1:db:8b:60:dc:0a:41:f5:28:72:35:11:08:14:c8:
                    79:ef:0c:da:b5:ae:06:0e:37:ab:00:05:51:2b:37:
                    c2:2f:01:59:f8:14:4b:90:99:f5:c2:12:93:d8:c2:
                    94:8b:56:3b:32:cf:a0:ea:84:25:d7:fc:65:cb:d8:
                    d6:23:45:8d:4a:91:d1:e6:38:67:a5:89:ea:42:6a:
                    1a:1c:33:9c:63:ed:8f:91:c5:f7:1f:98:e8:4b:4c:
                    da:c2:e1:c4:17:45:97:da:f9:28:a1:51:f2:68:b3:
                    d6:58:cd:35:f3:4a:01:e7:9c:53:2f:cf:8b:f7:8c:
                    2f:67:88:99:10:33:df:68:c7:c6:de:03:59:df:b9:
                    fe:8d:bf:8b:2e:bc:3c:66:ce:7d:7a:fc:f1:e7:4d:
                    ad:e7:f6:9e:f7:3e:db:e2:85:38:0c:66:21:b3:33:
                    73:4b:2d:53:f7:a6:72:7b:dc:4d:a7:20:c7:c5:3f:
                    65:b3:8f:d3:0d:82:6c:04:26:6b:9a:60:ec:0e:a9:
                    8a:62:cc:17:e6:83:ee:b3:48:52:f0:cb:50:3e:72:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:68:80:FC:CF:B4:0B:F2:9B:2A:93:15:16:4D:FF:EF:FD:49:E7
            X509v3 Authority Key Identifier:
                keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:20:90:b1:66:6c:70:36:bb:8c:be:04:3f:d3:f0:c0:51:
         30:92:9b:16:38:6a:d4:49:dc:29:62:f2:1b:00:64:4d:e1:9d:
         29:0f:3d:b0:61:99:c7:4e:60:be:9d:b6:1c:f7:88:c8:d2:f3:
         52:4b:e6:68:a2:c9:e3:a3:72:7d:b6:c3:54:b8:33:39:b0:34:
         e1:b1:a0:8d:db:c8:12:22:f6:43:4c:21:b4:fa:f9:36:4a:ba:
         d1:c6:d6:23:3c:84:9a:cd:0e:6d:a0:e2:99:a3:a9:13:14:29:
         b7:5c:e1:10:e7:57:16:3c:c5:9a:5d:4d:8a:f0:d5:08:99:b7:
         99:3a:01:98:24:59:f3:43:82:54:35:aa:03:03:ce:f8:8f:38:
         6d:2b:c1:7c:0d:87:51:0b:d8:32:a9:d4:cf:6d:8d:1d:91:8a:
         22:ae:94:60:1e:42:cb:16:1d:5f:c4:2a:5d:1b:00:2e:17:40:
         05:90:ac:b8:f5:c6:49:5a:54:58:b0:dd:02:37:40:d1:ce:78:
         82:25:f5:f2:d0:d7:c2:d1:0c:5f:e7:fa:f8:b3:61:1b:82:9c:
         bf:4f:09:b5:ce:57:4c:55:ce:3e:15:0c:80:3c:cd:62:ff:0c:
         76:6c:e0:13:76:6d:b5:bb:67:12:22:cd:16:fa:df:dd:23:53:
         07:34:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:08 2024 by rpki-client on console-fra.rpki-client.org