Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
File:                     783FBEE4430711EAB1201F6BC4F9AE02.roa (raw, json)
Hash identifier:          0iqs/HxuwqHawKwVtyf9NZs5o720KQbaDZmDxQoYfvM=
Subject key identifier:   27:0A:F3:3B:C6:7F:0F:75:7C:D4:8F:C2:54:BA:49:F8:61:1E:B5:D6
Certificate issuer:       /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial:       0A0B
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
Signing time:             Mon 08 Jan 2024 20:29:12 +0000
ROA not before:           Mon 08 Jan 2024 20:29:12 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     7575
IP address blocks:        203.2.136.0/22 maxlen: 22
                          2405:ce00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 20:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
        Validity
            Not Before: Jan  8 20:29:12 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=659c5b18-5da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:64:39:d4:1a:0a:06:68:b6:ce:a5:63:2f:
                    15:8e:fd:93:06:f7:07:ca:09:bc:98:55:cf:fc:14:
                    6b:6c:2c:72:6c:62:0b:b3:3c:30:e0:cd:0f:fe:d2:
                    f2:a9:13:54:5a:a7:ca:c3:da:73:d2:55:93:eb:e5:
                    6e:47:bf:62:e2:dd:09:2a:a3:48:9e:b2:ea:e4:d5:
                    39:68:08:17:49:26:18:59:01:2f:ea:f1:66:6e:eb:
                    51:90:5f:92:af:a7:86:7c:b5:c2:80:74:c3:03:9d:
                    dd:53:f2:80:8d:ec:ad:dc:81:19:79:ef:9a:f2:91:
                    0d:ed:6a:ec:70:d6:f4:ba:30:e1:44:94:93:b3:6f:
                    e7:86:43:30:6b:c8:5d:9d:fe:f9:77:d0:07:da:de:
                    4d:41:cf:aa:86:a6:93:b8:c9:e4:ac:2c:55:17:b6:
                    c8:9b:c0:64:54:1c:45:a8:5a:62:61:ae:d1:b8:a7:
                    5a:ea:ec:3f:18:bb:b6:62:c8:47:79:a1:5d:bb:40:
                    1d:3c:f3:3e:c0:a5:45:a5:65:99:5a:ea:50:25:ff:
                    74:b2:47:70:6b:95:cb:4e:7e:09:0f:7b:ba:4c:af:
                    fa:da:28:43:99:37:5c:73:22:75:6b:27:d7:c7:a6:
                    3e:86:ba:64:af:f1:ef:c5:4d:1d:9d:77:52:74:7c:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:F3:3B:C6:7F:0F:75:7C:D4:8F:C2:54:BA:49:F8:61:1E:B5:D6
            X509v3 Authority Key Identifier:
                keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/783FBEE4430711EAB1201F6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.2.136.0/22
                IPv6:
                  2405:ce00::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:36:bb:46:12:df:c6:cc:90:3e:b3:91:17:43:f2:5c:8f:0f:
         50:19:fb:19:be:27:ca:6a:a9:cf:99:fc:b1:f3:ef:b1:ac:05:
         4f:b5:fe:a5:2f:69:c2:8f:0e:40:08:b4:aa:3e:8d:5c:75:f5:
         1d:c0:f5:b3:8f:e7:f2:b1:4e:01:84:ba:65:97:2d:8d:df:70:
         64:be:1c:8f:0f:ae:5c:ae:3e:29:88:8f:f3:e3:4b:5b:c5:c0:
         26:d8:a9:37:ff:90:ae:3d:45:5c:3e:25:d6:e8:4c:28:72:7a:
         27:4a:d8:00:5f:29:05:ac:c6:61:6e:1b:fd:01:e0:41:60:e7:
         2f:00:f1:f8:c9:20:64:3e:28:ce:1c:92:b9:5a:7e:9a:04:b7:
         03:fe:67:4f:04:3d:d9:5e:61:03:0d:8f:6f:a6:27:9f:bf:4f:
         b1:bf:ae:6a:30:65:0a:5b:eb:40:e8:cc:69:08:d8:2a:9d:99:
         d7:a3:d0:79:65:fa:a3:be:fe:d9:83:d5:65:72:da:89:89:a8:
         99:99:d6:ad:e7:8e:9b:a1:34:86:fc:ff:1b:c2:e6:28:99:bf:
         de:8d:a9:be:19:48:df:f8:64:9f:9f:1f:01:a5:bb:c1:67:2b:
         03:28:75:a5:7d:f9:61:eb:5b:68:49:25:15:4b:b7:80:9b:50:
         9e:5d:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:43:18 2024 by rpki-client on console-ams.rpki-client.org