Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa
File:                     F22C58CEE69611EAA594260CC4F9AE02.roa (raw, json)
Hash identifier:          T2up6BLAo2bqeuWG4PUsHlE0/L5R2ojrPd9fvOrJMTU=
Subject key identifier:   7A:30:4E:0E:35:7D:7D:B1:E4:91:84:1F:59:F5:71:F2:02:51:95:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
Certificate serial:       1843
Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa
Signing time:             Thu 30 May 2024 15:52:15 +0000
ROA not before:           Thu 30 May 2024 15:52:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7633
IP address blocks:        196.12.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6211 (0x1843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8
        Validity
            Not Before: May 30 15:52:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a0af-2e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:a5:04:92:2e:46:59:f0:10:58:40:65:eb:
                    2b:f7:79:f9:d7:2b:0f:9f:98:d0:d3:00:6e:1c:64:
                    4b:4d:53:67:fa:b8:cf:e9:5c:9d:7c:c4:d6:ab:fb:
                    c7:87:d4:0b:a8:cb:bb:90:99:48:a7:39:28:9d:d7:
                    11:b9:42:85:21:d4:57:4d:4e:4c:d9:8a:ce:c5:29:
                    15:4c:da:d0:44:a7:47:08:ad:d3:62:7f:c7:57:6e:
                    82:b4:81:2e:35:d3:38:df:0c:53:ab:fd:fd:be:8e:
                    31:a4:a9:b8:15:23:20:3c:43:23:94:55:2e:1d:85:
                    31:f8:46:35:7d:6b:6a:6e:01:e5:5e:6d:a6:f2:03:
                    88:27:33:66:7f:09:c2:c7:31:0e:b7:40:74:c3:6e:
                    71:7a:90:1d:61:db:c5:10:1e:78:b3:0a:29:e9:db:
                    73:c3:d6:33:b0:14:8f:82:ab:e0:1f:1b:58:bd:f9:
                    a2:cb:36:65:01:53:fe:87:a1:b2:04:32:0f:3a:70:
                    8f:17:45:6a:b1:d8:98:65:9a:27:79:0a:55:1e:93:
                    da:ca:6b:27:ce:97:f1:ff:19:b5:0f:9c:e7:6e:36:
                    23:9d:19:57:32:ec:fb:ef:70:0e:ea:3a:6a:2b:fc:
                    fb:0b:4f:2b:04:4d:60:2f:5e:5b:e5:5b:8e:23:99:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:30:4E:0E:35:7D:7D:B1:E4:91:84:1F:59:F5:71:F2:02:51:95:0E
            X509v3 Authority Key Identifier:
                keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.12.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:3e:5e:7a:57:a6:f2:6b:ee:4b:f5:ea:63:a9:3c:c0:38:4c:
         02:a5:2e:3f:f5:95:e2:0c:b4:47:3b:4a:c7:3e:3e:8b:33:f8:
         91:e9:7b:40:33:65:1e:5c:ef:9e:d2:c1:1b:18:f3:23:49:38:
         12:a3:58:41:e3:31:6f:08:52:fd:8e:b8:1f:57:28:4d:54:ed:
         c4:6e:22:2b:58:48:6e:01:15:a5:7a:06:e0:2a:d7:83:48:b3:
         75:88:fe:0c:25:f6:83:5b:03:45:3e:10:a6:79:0f:52:c4:5a:
         ac:a1:96:52:0c:19:ec:1b:a0:9e:46:05:97:7f:3d:19:56:68:
         4b:8c:65:c1:61:97:4c:de:38:93:16:e7:c0:ef:2e:d4:0f:47:
         57:a5:3f:f8:1b:d2:a9:49:c1:03:a5:9f:07:20:9a:b2:c3:33:
         94:1c:5c:8c:b4:dc:9c:ca:dd:5c:d0:1e:d9:be:eb:d8:b1:0e:
         bc:d3:8d:eb:f7:39:20:83:b7:2e:8c:d5:ae:f6:b8:d5:86:c1:
         b2:f1:0a:01:a7:2d:3a:1d:82:c9:7c:55:3a:68:08:50:97:51:
         fd:25:e7:f9:bd:64:29:33:ac:12:06:6a:fc:65:29:a9:96:c6:
         87:ce:d7:11:12:3a:bc:e9:48:a1:dc:fa:24:6e:03:97:cf:bb:
         3d:c7:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org