Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5B4FCE48F5911EE94746164C4F9AE02.roa
File:                     E5B4FCE48F5911EE94746164C4F9AE02.roa (raw, json)
Hash identifier:          93dxAlc0GxHISalNb2zpZnZFMxMlSt83pBHCFp2gpTo=
Subject key identifier:   65:35:E8:51:4F:0B:DB:70:72:DF:42:0C:52:17:EE:A8:02:99:2D:FA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7F13
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5B4FCE48F5911EE94746164C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 08:24:37 +0000
ROA not before:           Thu 30 Nov 2023 08:24:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140543
IP address blocks:        210.79.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32531 (0x7f13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov 30 08:24:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=656846c4-a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:b6:37:b3:c2:c3:a4:2f:3f:1e:7b:9a:60:
                    13:b0:8c:94:b7:32:bb:71:2e:6d:b4:08:10:70:fb:
                    e9:00:6a:a8:7b:4b:aa:02:d7:86:04:9d:d5:9f:99:
                    ca:b8:2d:48:53:30:da:cb:5f:1c:c6:ac:e1:7b:c0:
                    96:db:ac:ef:83:ca:ff:1c:b8:05:7c:3b:c2:51:c6:
                    b0:47:24:e5:32:1e:ca:c0:52:f0:3a:7d:fe:e0:b9:
                    2b:59:ed:c9:31:aa:0d:3f:41:29:fa:57:3c:2e:3f:
                    64:35:49:ec:25:89:ac:3d:ab:cd:2b:72:95:64:08:
                    f3:6e:56:23:29:53:4e:dc:6f:6b:b6:40:59:52:94:
                    ed:7b:be:fb:cd:42:fc:43:76:c1:8e:22:c9:2b:fe:
                    6d:4c:ae:b9:61:a0:18:ff:b5:e7:cd:60:ff:b7:33:
                    44:e6:82:38:fb:87:e0:c0:ac:79:e1:79:97:c9:0f:
                    d9:5a:9c:d7:19:d1:60:f8:dd:28:8d:ef:84:b1:fa:
                    de:15:9d:a2:b3:6f:d0:0e:bf:32:35:5b:58:7b:12:
                    16:e7:ee:78:ff:ab:a1:2f:74:8f:1d:45:d7:6f:95:
                    b9:47:09:a8:0b:39:c0:97:cd:c4:1b:8d:ff:2a:2d:
                    77:c0:f2:c2:ab:7e:73:f5:65:c7:b8:08:85:ba:0a:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:E8:51:4F:0B:DB:70:72:DF:42:0C:52:17:EE:A8:02:99:2D:FA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5B4FCE48F5911EE94746164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:75:0b:28:9a:2b:98:7b:9b:e6:45:9e:2f:f0:f9:a1:c1:bf:
         d7:7d:8d:fb:2a:b9:26:c8:6a:2e:39:34:93:b3:6b:4c:34:d2:
         90:e1:53:6c:4e:93:10:0c:fb:02:3d:12:34:43:c3:a8:cf:cd:
         e4:4c:82:52:5c:4f:4d:a5:bf:a6:a4:f4:9d:f6:ab:06:73:7f:
         d6:65:97:f9:de:44:09:32:ac:dd:b0:8c:5c:53:7c:6b:00:58:
         4b:83:d0:4c:aa:4f:37:83:bf:61:d5:08:a3:86:ac:54:4a:94:
         77:c6:a4:75:8e:63:94:3c:a7:33:fd:46:9a:11:e7:ec:c7:49:
         f7:e4:6e:a4:86:bf:e6:1b:a6:52:17:1a:44:7f:a5:58:94:fb:
         29:e5:73:f1:a5:68:56:46:4e:b8:3d:b5:7b:87:89:71:76:33:
         64:22:36:af:fc:ba:09:3a:1b:51:ae:20:d5:86:55:9f:5b:f0:
         cb:a7:16:e7:2c:98:fc:87:28:9e:f3:01:25:71:81:e1:9f:b7:
         9c:ec:18:ee:9a:88:06:8e:d1:a4:09:fa:d9:98:f8:f2:0e:8d:
         97:9f:78:c1:01:91:88:e1:58:2a:39:3c:c9:cd:52:6b:af:10:
         10:e7:26:1e:df:3c:58:c7:09:6d:29:84:5a:c5:5d:1b:01:90:
         b8:b4:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org