Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa
File:                     D895A576B8F411E982F74F7BC4F9AE02.roa (download)
Hash identifier:          zG+//YXp2atHGkwPcfJ1y2ZXpYQuzUKcfdAfeE5l0/M=
Subject key identifier:   ED:F9:CB:C7:62:60:D9:AD:F7:32:05:F1:4C:13:9A:7A:41:40:B6:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       5500
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     46071
IP address blocks:
    1: 202.65.128.0/19 maxlen: 19

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21760 (0x5500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 16 04:32:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6281d3e9-895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:f5:81:c0:ac:6e:b7:8b:b7:00:a6:44:f2:
                    ff:03:88:f5:dc:a0:cd:be:ce:8c:3a:08:2e:4d:e7:
                    62:99:da:84:24:f7:9c:4f:96:5c:9c:5d:72:14:6a:
                    71:fb:f7:9d:ed:60:73:1a:11:8a:84:cf:16:2f:da:
                    e7:8e:84:81:6a:a9:e3:89:ba:96:9d:e1:6a:96:af:
                    59:bd:e1:e1:c7:9b:99:15:ce:0d:83:bb:9d:c4:8d:
                    0e:10:e9:58:e8:6f:3a:44:4f:ef:7a:50:43:89:c4:
                    30:7d:e7:5f:43:16:13:f2:db:67:bf:1c:44:a1:73:
                    57:af:62:fd:84:c5:84:27:2f:f9:7e:97:5d:49:c9:
                    a2:fe:08:5a:05:f3:ac:02:77:ea:0f:06:44:48:74:
                    81:eb:b6:5e:1b:e7:9c:db:b9:ed:3a:39:32:c0:47:
                    59:f7:02:79:ec:6b:f2:c7:0f:3c:3d:04:bd:e7:4d:
                    49:47:97:e5:d4:95:38:de:14:b3:1c:2b:b3:9a:ed:
                    fa:0c:6a:70:69:7a:5f:e7:a3:3d:b6:41:43:96:51:
                    86:ae:01:ce:67:b2:db:77:71:67:81:82:67:38:f3:
                    1c:6e:68:fd:3c:96:4a:ad:91:f0:66:4f:61:63:e7:
                    a2:d3:ec:39:cd:8e:75:9f:f7:32:0a:bf:35:af:4d:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:F9:CB:C7:62:60:D9:AD:F7:32:05:F1:4C:13:9A:7A:41:40:B6:7B
            X509v3 Authority Key Identifier: 
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D895A576B8F411E982F74F7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.65.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:75:3c:86:de:f3:b6:3e:89:1a:1e:ed:6d:ab:b7:7d:4d:
         b5:9b:4e:9d:29:5b:13:a2:1c:1c:3d:77:1f:ac:57:3a:c5:d8:
         3c:cc:f9:69:26:5a:1f:a4:96:3b:1f:0a:7a:27:7c:5b:3b:04:
         05:de:f8:bd:de:6a:15:27:2f:f7:30:0c:c6:97:48:99:03:98:
         4d:a2:2e:af:78:70:bb:6c:d3:07:14:1a:34:cb:9f:3f:a8:0d:
         95:01:53:51:bb:3d:67:57:27:29:52:c0:5c:9f:25:61:7b:2b:
         b0:fe:41:cb:d8:b0:89:2f:e4:98:2a:a4:5c:af:b1:a8:16:0c:
         7b:21:5c:f5:7f:97:26:eb:aa:c5:e7:c6:ca:dc:85:1b:47:51:
         6c:7f:f3:6f:5d:32:db:16:ef:c8:98:7d:af:72:28:54:6d:bc:
         5f:17:f9:2a:60:7f:5d:55:26:4d:3a:f6:f7:05:65:b2:c1:4d:
         c8:cd:82:4b:42:24:c1:c7:68:8d:e0:fd:3d:dd:f5:96:6d:ee:
         8a:68:2b:b1:30:bc:c0:e5:22:23:b7:3b:c9:42:ad:75:4c:eb:
         cc:b4:13:3b:07:3f:24:57:04:8b:4e:c6:5c:8b:90:be:69:22:
         cc:25:ac:f0:e4:c2:f7:db:5b:a5:7e:e0:21:57:02:60:be:63:
         cd:82:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 6 09:41:05 2022 by rpki-client.