Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
File:                     2ACF9E0C855C11EB8C076013C4F9AE02.roa (raw, json)
Hash identifier:          4TkDiS4BXR3T4N5XwdICjn7FuRsbCcoxM3qg2k7EAn8=
Subject key identifier:   D0:D8:65:E0:F1:53:C8:11:31:3F:EA:A2:5D:98:3C:F5:9C:01:E8:03
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       33BE
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
Signing time:             Wed 22 Nov 2023 15:00:50 +0000
ROA not before:           Wed 22 Nov 2023 15:00:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     38196
IP address blocks:        203.124.26.0/23 maxlen: 23
                          203.124.26.0/24 maxlen: 24
                          203.124.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 14:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13246 (0x33be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Nov 22 15:00:50 2023 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=655e17a1-5492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:fc:6d:41:c1:0d:32:6a:74:9e:fe:b3:eb:
                    f3:3f:0f:ca:79:33:3d:f8:5e:b8:f8:cd:04:38:30:
                    87:b0:0b:d5:36:22:57:07:d5:38:6a:d2:d8:7b:dc:
                    5a:46:84:98:3b:54:d6:e9:51:d3:c2:8c:6e:01:a3:
                    72:aa:c1:01:f4:11:65:42:c8:af:8e:b3:a8:9c:3b:
                    dc:51:5b:84:19:0c:f5:ea:e0:ab:5a:cb:5d:ff:7e:
                    b9:0c:16:06:d1:b5:e4:dc:bc:8e:ed:42:e1:a9:c6:
                    fd:90:ce:bf:54:bb:c5:af:cc:40:07:41:fa:e1:e1:
                    a4:a9:57:fa:21:df:a9:f1:a4:06:7c:e5:cd:eb:46:
                    d7:7f:fb:fd:8b:29:71:95:43:75:93:90:cb:89:19:
                    73:04:88:a7:2b:fa:68:9c:db:06:ce:58:46:2d:1a:
                    9f:6a:41:04:1f:21:11:2f:ae:9f:f4:0f:00:25:3b:
                    58:10:c6:a9:91:5e:50:29:1a:a8:f3:07:20:5d:72:
                    1d:6b:04:c3:31:11:a2:27:d0:32:a7:b7:78:13:a2:
                    f3:59:70:02:f0:bc:9a:2c:e4:0e:33:f7:c9:f7:ba:
                    53:2d:69:f2:16:b8:d1:74:d6:e0:a7:27:3d:d7:03:
                    3c:dd:a3:0b:75:1b:3d:c0:13:bc:e3:97:75:75:3e:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D8:65:E0:F1:53:C8:11:31:3F:EA:A2:5D:98:3C:F5:9C:01:E8:03
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/2ACF9E0C855C11EB8C076013C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:2b:11:2e:4a:57:57:f0:58:76:27:e7:1b:93:53:dc:58:96:
         6a:ee:c8:53:81:63:fa:de:41:b8:84:1f:8d:c0:26:da:0b:27:
         03:01:89:79:e8:ea:89:af:82:7b:93:ac:d7:fa:71:8a:7d:68:
         57:28:66:70:54:ea:22:89:d5:18:ca:45:fc:0f:2a:bc:3b:b0:
         75:6d:28:3a:ad:db:15:02:3a:4e:60:78:91:1e:9e:7d:ad:2e:
         ee:da:8b:b0:0a:f4:bd:c4:b4:63:05:b8:7f:1c:29:8d:f9:fe:
         f0:a8:b1:18:bc:14:8f:21:3c:38:72:00:f7:1d:ae:fe:ad:af:
         f3:bc:5d:63:fd:e7:20:8c:f1:f9:3b:54:e5:8c:60:22:ee:5c:
         6f:ad:95:20:0b:14:0e:b8:ce:97:c6:d0:89:31:d3:19:8e:8c:
         45:03:f1:cf:7f:ab:f1:f1:ce:ea:3d:85:96:4b:9f:20:e0:eb:
         d0:05:88:54:d1:89:43:70:2e:cf:1a:a0:0c:6f:cb:58:96:0b:
         8d:89:6d:73:f1:f9:b4:b7:d5:1a:b4:b3:7a:d4:2a:3e:62:7b:
         9a:ad:98:29:c5:7c:3c:98:bc:02:ed:b6:62:41:70:fc:66:a4:
         21:e6:da:ac:ed:6f:98:6e:39:e0:d4:f4:ff:d7:a0:36:9d:f7:
         a4:e7:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:38:45 2024 by rpki-client on console-ams.rpki-client.org