Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
File:                     DB0532B2635411EF8B6D364BC4F9AE02.roa (raw, json)
Hash identifier:          aBvIA0eeQ14OUWSBauC6xUgN/Yota75Po8HtX8rLsaQ=
Subject key identifier:   88:41:7B:E3:39:E7:0A:C5:1B:3C:4E:AB:CC:B0:FD:3F:10:1A:99:D9
Certificate issuer:       /CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
Certificate serial:       9B
Authority key identifier: 8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
Signing time:             Mon 26 Aug 2024 02:42:37 +0000
ROA not before:           Mon 26 Aug 2024 02:42:37 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     134184
IP address blocks:        203.23.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl
                          rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2A5/serialNumber=8CDCE578A239E58CE7FE7683BB4769F9DC5522BA
        Validity
            Not Before: Aug 26 02:42:37 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66cbeb9d-d38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:22:46:7d:b1:7f:13:8e:2a:e6:96:97:88:
                    c1:b2:34:0b:c6:ba:5b:ab:06:76:4b:06:01:d9:80:
                    25:e2:2a:84:16:c7:3a:a3:18:e3:f8:ac:b0:f1:4a:
                    02:7d:30:1a:8f:13:53:22:34:c1:89:4f:30:cb:18:
                    bb:cd:9d:66:1b:46:29:99:63:95:11:56:bf:cb:dc:
                    85:c1:ac:fe:df:6e:42:50:e3:97:38:e8:b8:db:6f:
                    40:40:91:d4:8f:00:3a:98:20:ad:5d:16:62:b4:09:
                    74:06:e8:f8:35:6c:1e:9c:47:d0:f9:3d:74:aa:7a:
                    a3:e0:3b:50:c5:32:0d:ec:da:bf:b4:e9:04:7b:50:
                    47:3d:13:02:7e:a4:b1:63:e2:95:2a:75:ea:78:53:
                    f0:ac:c6:83:99:60:55:f4:df:b9:29:4d:d5:cf:57:
                    21:b0:9b:33:d4:68:d5:5a:c7:04:5c:3d:50:06:26:
                    9a:70:54:f6:cf:b1:45:aa:52:95:11:ea:f9:20:13:
                    3a:c9:94:ca:2e:c5:79:81:9b:a0:b1:77:c3:66:28:
                    2b:88:84:d9:23:70:49:62:dc:33:f3:da:84:34:97:
                    14:c8:0c:f2:e4:54:80:0b:61:e7:c2:f6:91:bd:a2:
                    a8:b3:7b:93:cb:ed:08:2c:69:e1:1d:89:00:6f:70:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:41:7B:E3:39:E7:0A:C5:1B:3C:4E:AB:CC:B0:FD:3F:10:1A:99:D9
            X509v3 Authority Key Identifier:
                keyid:8C:DC:E5:78:A2:39:E5:8C:E7:FE:76:83:BB:47:69:F9:DC:55:22:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/jNzleKI55Yzn_naDu0dp-dxVIro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNzleKI55Yzn_naDu0dp-dxVIro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2A5/A1C04D0A76CB11EE93F58747C4F9AE02/DB0532B2635411EF8B6D364BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:88:1e:e6:41:8b:8a:ad:08:10:e7:ee:50:36:64:11:50:d1:
         98:2a:6e:2f:a9:49:5a:91:02:a1:eb:e4:ed:7e:6d:f1:8e:30:
         47:01:69:ff:5c:28:5b:0d:7e:36:78:ce:30:90:7e:40:c6:f1:
         39:df:65:1c:fe:50:98:9d:a0:06:18:06:32:93:49:4e:f7:91:
         93:07:30:e5:5c:f8:d7:1a:5b:f7:f4:a7:21:eb:8f:ab:40:51:
         69:73:51:f2:96:81:9a:e7:02:e2:b8:4f:db:c1:1e:04:a2:6f:
         96:76:41:0f:48:08:ec:4c:24:32:3f:e4:a5:dd:5d:cc:ac:a7:
         b4:ae:1d:34:70:b8:17:a5:03:6d:9d:91:fe:99:81:e5:e7:03:
         5b:b1:b7:63:7b:c3:52:08:84:9a:9a:cb:f5:ee:70:05:62:f2:
         43:0c:af:a4:f7:8d:47:98:65:89:a9:74:d8:c5:d4:3a:3c:ca:
         93:99:1f:9d:4f:0a:1c:4f:2d:2e:66:24:f3:5c:55:53:45:40:
         d3:6a:a5:21:99:63:38:84:5d:3e:4e:08:b2:6c:ea:01:0a:12:
         eb:3c:1e:e1:a1:44:6d:05:76:a6:fb:c4:3a:8e:08:49:c1:09:
         b0:92:aa:6d:1e:68:16:c5:13:ae:7f:90:74:4d:d2:97:4d:56:
         7d:ee:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org