Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
File:                     41D286CA51CE11EC83E7510AC4F9AE02.roa (raw, json)
Hash identifier:          YHr2GpU1dTkOpsILcVWo5/zVrGv3tN6oZ1g/zs34T6Q=
Subject key identifier:   A4:20:51:EB:72:90:4E:6B:AF:D6:E0:3C:2B:16:A4:7E:38:81:5F:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7177
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
Signing time:             Wed 10 May 2023 16:48:24 +0000
ROA not before:           Wed 10 May 2023 16:48:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38021
IP address blocks:        203.190.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29047 (0x7177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:48:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bcad7-e80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:a6:37:c7:ff:51:e8:35:99:16:c4:83:cc:
                    5b:f1:00:3b:ce:29:ba:31:c9:51:05:e6:92:2a:3f:
                    6e:cb:a3:3d:ef:d8:db:c6:9e:d1:51:90:d7:9e:f7:
                    cc:96:d6:42:36:64:43:25:a8:38:41:a6:0b:c1:52:
                    c0:4b:c6:e8:4d:e9:3a:d3:a6:d4:a6:b0:cc:5c:c7:
                    f4:2e:80:d9:db:4f:34:88:76:41:24:e2:03:01:c4:
                    f9:18:6f:7e:d2:ce:f4:0e:85:3a:31:19:de:78:ab:
                    b6:02:f5:2d:92:b8:f2:b7:51:0b:12:0f:d1:46:26:
                    e2:03:cd:a5:8a:77:e9:a5:1b:b7:c5:65:b0:99:57:
                    77:ce:69:df:20:45:96:e4:ed:2f:10:b9:de:ae:d8:
                    4b:d4:29:c4:e3:18:d7:20:73:66:92:68:8c:da:27:
                    7c:b0:2a:08:2b:fd:4c:ff:01:9a:7b:3c:b5:3a:1a:
                    8d:6c:f7:0b:6a:13:cc:0e:c6:fa:e6:f3:c4:73:a0:
                    f7:91:25:e2:e8:e1:70:c4:56:79:4c:bc:6f:1b:9d:
                    c6:f0:4b:98:be:c8:c2:70:2e:14:aa:e0:2c:3f:73:
                    73:ec:28:25:7c:40:61:59:98:ab:bb:6a:f8:74:92:
                    5f:bb:cc:ac:5a:b0:7d:80:52:ce:0a:16:dc:fe:9e:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:20:51:EB:72:90:4E:6B:AF:D6:E0:3C:2B:16:A4:7E:38:81:5F:8A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41D286CA51CE11EC83E7510AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:be:54:b1:13:bb:da:36:80:11:ef:5c:27:6c:d8:76:33:68:
         3a:b8:8e:8a:8c:9b:2b:32:28:cd:d1:f3:f2:12:27:31:01:f8:
         51:7c:16:57:df:b2:16:6b:f5:52:50:00:dc:77:5e:ef:9d:e9:
         21:df:bf:ce:51:33:48:93:98:f2:b3:e7:68:48:0c:b5:f1:15:
         c1:89:62:32:a1:1d:94:13:93:bd:f9:c6:5d:3e:0d:3e:2a:f6:
         90:c5:8e:23:83:9b:1f:47:b7:cc:40:5c:80:8c:d2:f7:e5:69:
         1a:20:1f:3f:09:a5:08:7c:87:66:21:a5:77:d9:af:7e:b1:27:
         27:65:25:18:2e:da:6c:bc:23:50:49:d4:f8:27:8d:aa:f3:03:
         54:9b:b7:9d:25:af:9b:b4:bb:98:a2:c6:e1:86:87:13:d8:a4:
         c0:a8:5f:49:70:fb:78:3b:65:35:69:f2:bf:a2:98:25:86:f6:
         27:89:43:99:7c:5b:80:ed:1d:b1:51:f1:e7:26:95:36:28:c6:
         48:77:6f:50:65:33:dd:1c:92:ea:d0:e1:e1:1f:f6:1f:41:19:
         50:69:61:52:48:2d:19:9d:37:13:ce:ae:28:ac:6d:06:2f:66:
         cf:f3:39:4f:de:3e:e6:96:3e:9f:5a:a2:7c:1f:17:24:6e:38:
         4b:af:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:30 2024 by rpki-client on console-ams.rpki-client.org