Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/599239543B9411EC80D49544C4F9AE02.roa
File:                     599239543B9411EC80D49544C4F9AE02.roa (raw, json)
Hash identifier:          6nLSj9xdZWWjyT3mv0y224FBMY+K/mZ7DlgaWzJy8bo=
Subject key identifier:   20:BE:48:B3:C2:DF:D4:CD:29:E9:D8:2E:2A:71:DF:FC:55:2C:A0:04
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       717C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/599239543B9411EC80D49544C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:48:29 +0000
ROA not before:           Wed 10 May 2023 16:48:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396421
IP address blocks:        1.7.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29052 (0x717c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:48:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bcadd-1a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:6a:7c:eb:e2:c9:1b:93:33:46:ef:fb:8e:
                    c8:03:fc:e7:0c:fd:35:06:8a:07:86:31:ee:95:52:
                    18:ab:7f:05:9b:39:16:a2:b9:26:01:34:18:1c:27:
                    81:f4:13:35:41:82:9d:d2:70:24:07:d2:0c:21:b9:
                    8e:b2:df:4a:88:d1:22:34:f1:38:cb:f3:6b:7d:bd:
                    d7:d2:92:56:48:a6:1f:25:7a:ad:58:e2:93:94:c1:
                    80:c4:cd:95:df:f5:cc:37:3c:4e:53:25:9f:b7:a1:
                    59:6e:59:c3:cb:db:ab:f2:a3:61:0c:d0:1a:ff:72:
                    e9:2b:d2:c8:5a:d6:c4:31:17:b7:49:f3:ca:58:06:
                    cc:5d:b7:37:31:18:25:55:4b:56:72:8c:ef:88:53:
                    e1:e8:e5:66:ab:8e:03:b0:c2:d1:6b:a3:ea:72:68:
                    05:37:e9:ce:1c:6d:da:50:33:af:68:69:f1:9f:3f:
                    e8:21:bc:e8:c3:9a:6e:66:58:84:20:42:0b:a9:dd:
                    eb:2a:f0:6d:90:75:af:8b:12:54:ae:e8:99:bd:b2:
                    fb:b7:89:d1:26:50:86:20:14:96:a3:a0:57:d6:46:
                    12:89:1e:38:ab:b8:e0:eb:7e:d8:45:60:9e:b9:a5:
                    1f:b6:52:23:02:6d:bc:2b:b5:f6:1f:b2:5c:c8:2b:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:48:B3:C2:DF:D4:CD:29:E9:D8:2E:2A:71:DF:FC:55:2C:A0:04
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/599239543B9411EC80D49544C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.7.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c2:7a:5b:76:b5:6e:a5:6c:7b:7e:c8:50:1d:f5:67:97:9c:
         74:00:da:53:19:8e:bf:59:86:4a:b9:68:17:ad:2e:9e:db:05:
         88:c6:a7:1d:82:44:85:73:70:16:23:9e:83:98:29:a0:37:3e:
         36:41:18:42:de:42:e4:f3:d7:f8:95:08:eb:28:cd:80:aa:95:
         4f:5f:cd:69:38:14:f7:76:18:46:48:c2:ae:bf:56:75:a4:77:
         8e:c6:99:ea:a9:80:63:db:8b:ff:85:19:ea:7f:13:4a:0c:e1:
         07:de:35:cb:bb:ac:b7:da:53:77:13:c8:f5:85:f0:3a:07:10:
         40:79:06:00:6b:27:be:c0:b3:b9:45:d0:e6:c9:15:46:b7:91:
         90:3f:9e:d5:61:5d:d8:2a:c3:19:64:87:08:d2:2b:90:df:eb:
         8f:2d:b0:27:83:56:6a:08:43:99:9f:eb:b0:f0:99:24:66:ef:
         0b:9e:8b:81:b8:a1:10:12:62:1b:ad:29:84:87:fc:53:48:de:
         37:09:d7:a8:38:28:9f:f7:b1:1d:02:47:b7:52:30:2a:11:40:
         71:36:9a:9c:32:22:6a:fc:d7:56:4f:73:fc:21:6c:aa:68:2b:
         9a:5a:1d:bf:e0:93:8c:52:14:20:c8:5b:06:de:4d:29:c1:bd:
         0a:fb:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org