Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
File:                     E3A83166063511EF81D98D5EC4F9AE02.roa (raw, json)
Hash identifier:          JY/9Mrotlj4kyV7+9fbvlzU4R5g8Z2UU9l54u689StU=
Subject key identifier:   83:C7:81:86:FD:6E:EC:1E:38:A6:2B:23:15:BF:96:91:AE:03:0B:85
Certificate issuer:       /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial:       0B89
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
Signing time:             Mon 29 Apr 2024 14:36:39 +0000
ROA not before:           Mon 29 Apr 2024 14:36:39 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147314
IP address blocks:        202.53.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
                          rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2953 (0xb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
        Validity
            Not Before: Apr 29 14:36:39 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=662fb077-5630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:1d:23:8b:ea:90:c8:49:bc:46:b1:b3:cd:
                    bf:dc:cc:93:78:c7:ca:5a:f7:16:60:94:1c:5d:de:
                    20:0a:45:00:29:50:87:50:75:d6:14:b1:30:f1:b5:
                    2f:ea:41:72:72:f8:ad:e1:fd:f1:f6:ea:74:86:ca:
                    b7:06:eb:58:fc:1b:79:d2:e6:ac:23:78:e9:6d:3c:
                    87:38:7d:3f:24:8e:93:f5:10:43:48:1f:fb:e0:3f:
                    78:16:c0:49:ea:f8:0f:31:82:55:51:0f:a3:86:f6:
                    70:b8:35:61:e3:8f:e7:4b:cf:19:c5:73:04:b8:dc:
                    dd:ea:4d:9b:06:24:b9:9a:44:55:1f:04:11:b1:73:
                    6f:ad:e4:16:d0:46:f0:93:bf:b5:a6:72:e5:82:e6:
                    7e:8a:31:ad:0a:3d:cc:40:43:35:6f:96:b8:ca:5b:
                    55:c8:c4:ce:e5:24:e1:25:47:df:3c:5e:46:17:18:
                    bd:ee:33:11:72:7a:dd:94:b7:d2:12:40:43:06:fe:
                    fc:2b:41:cd:32:eb:72:3a:ec:07:de:7b:ac:f4:55:
                    37:71:39:bb:c8:76:d7:fe:eb:e8:53:6a:bd:b3:cd:
                    2f:09:bf:0b:9d:fb:cf:30:50:ee:0c:6e:4a:b6:4f:
                    10:3f:7a:80:c2:8c:17:43:b3:43:5e:98:fb:d0:c9:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:81:86:FD:6E:EC:1E:38:A6:2B:23:15:BF:96:91:AE:03:0B:85
            X509v3 Authority Key Identifier:
                keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/E3A83166063511EF81D98D5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:2c:67:be:b5:86:92:4d:13:80:fd:41:e1:55:8a:64:8b:
         5e:5d:63:f9:bf:9f:f6:c0:84:fa:cb:6a:0f:a8:a1:b3:15:75:
         29:b0:c5:ba:6b:74:00:41:c6:84:18:47:46:b3:f3:10:5f:1f:
         3d:d0:58:e0:7f:a5:55:62:dd:ec:89:5b:81:d8:71:37:c3:b5:
         c7:11:c3:a1:22:d9:d0:26:1c:84:7d:69:24:13:4e:cf:9a:40:
         39:9d:29:c6:88:08:08:a1:47:4e:72:5a:68:eb:63:45:d1:5a:
         26:09:0a:0d:7e:7b:bb:5d:7e:71:2d:52:10:96:5f:fb:da:ea:
         bb:c9:00:cb:31:a9:91:55:59:60:2e:d9:c8:03:c7:c1:92:9b:
         6b:22:4c:5a:f7:7a:17:49:d0:2d:b6:2a:6a:8c:07:93:d3:35:
         c0:18:df:df:3d:08:10:12:34:7f:ca:fe:7f:75:b5:f3:e3:22:
         fb:b6:80:72:18:b4:33:b6:d2:13:8a:87:13:ef:87:48:30:45:
         16:53:b9:8b:dd:88:32:13:a3:19:82:53:ce:16:56:21:46:d1:
         71:ea:63:78:a4:7d:02:ac:cd:23:96:6e:6e:e5:39:bf:3a:0f:
         8d:18:37:e7:b4:16:df:ae:cb:25:34:b2:67:75:36:6b:19:1f:
         b8:47:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:45:29 2024 by rpki-client on console-fra.rpki-client.org