Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
File:                     09106CCCAD3E11ED8B645C39C4F9AE02.roa (raw, json)
Hash identifier:          jnX6zSA5GtMfSEQow6mSR/kbYFITaPVVsjCUvxeVvUo=
Subject key identifier:   6A:D2:2A:C8:47:18:8E:22:CA:47:56:54:18:26:FC:4C:12:4A:D2:FC
Certificate issuer:       /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
Certificate serial:       BE
Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
Signing time:             Mon 05 Feb 2024 05:26:34 +0000
ROA not before:           Mon 05 Feb 2024 05:26:34 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45577
IP address blocks:        203.20.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl
                          rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52
        Validity
            Not Before: Feb  5 05:26:34 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65c07189-a9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:14:83:90:a2:29:5f:73:f6:78:ff:19:1f:
                    34:56:d1:21:07:68:be:dd:82:35:e4:f7:ca:80:25:
                    cd:9d:21:ca:97:32:05:8e:7a:16:b6:62:d2:69:48:
                    84:2c:07:21:3f:78:47:64:53:e9:fe:70:09:6c:75:
                    92:7f:9e:50:b0:05:dd:5a:c4:bc:1f:29:86:dc:53:
                    2e:f0:e2:63:66:c8:ad:6a:eb:04:86:20:6d:65:d4:
                    fa:8d:ee:e7:d4:39:fc:f4:6e:28:0c:b9:b7:eb:7c:
                    69:60:9e:6f:66:f0:bc:e2:81:3c:20:f2:94:ef:04:
                    14:dd:2a:20:50:fc:b6:fa:e8:32:6c:2e:21:4e:88:
                    bb:24:6e:ff:b9:29:6c:f6:b6:76:25:ad:72:03:5f:
                    cc:ff:d0:b0:3b:9e:7f:a6:8c:21:86:fc:51:69:5c:
                    30:cb:87:e6:99:a7:0d:53:d1:78:eb:fd:2f:19:01:
                    3b:8b:c0:f0:e3:ac:49:87:09:18:80:88:93:e5:a3:
                    9e:e1:b9:88:25:01:20:bb:f9:23:68:1f:85:d4:90:
                    b5:4b:c7:46:b0:4b:20:ca:fd:f0:0a:18:62:f4:96:
                    b8:80:f8:f1:aa:8b:c8:8a:d5:b6:c3:a9:4e:d8:b5:
                    3b:de:54:74:27:be:68:66:01:01:34:e6:c3:14:bb:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D2:2A:C8:47:18:8E:22:CA:47:56:54:18:26:FC:4C:12:4A:D2:FC
            X509v3 Authority Key Identifier:
                keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:68:62:3f:6f:2b:3d:2f:4c:f6:51:67:54:c6:69:e7:50:
         46:15:94:4d:31:89:10:f3:78:c1:24:97:47:c5:e6:d3:c2:94:
         49:af:a0:d3:d0:c8:59:ec:31:30:93:a5:90:bc:2b:52:37:30:
         66:ac:f1:b8:4f:25:ab:4d:99:08:7e:de:28:cc:00:41:1c:cf:
         29:bf:fc:de:61:df:5e:80:02:f8:22:00:88:0d:68:b0:1b:25:
         dd:7a:62:89:08:de:0a:2d:c0:55:47:ba:77:05:06:12:a6:0c:
         2a:72:45:ac:b1:98:4a:ab:87:f1:09:c8:e2:05:9a:15:b1:a4:
         93:40:9f:90:50:84:e7:20:62:9e:5e:2a:85:04:2e:d3:48:4e:
         36:55:9a:0a:d4:51:d8:e1:d1:4b:0a:f7:7d:a3:d9:96:9b:3e:
         e4:9f:14:70:ec:78:22:3b:03:71:17:b4:28:86:1a:b5:b0:8e:
         9f:92:1f:33:1c:45:d4:e0:ab:c5:1e:91:f4:af:48:63:4e:b7:
         04:79:ec:5e:a0:df:c8:98:50:3a:36:74:91:ba:91:07:23:98:
         e4:b7:4c:13:42:d2:b0:39:58:eb:3a:69:f4:c1:d0:9c:0d:78:
         17:ce:f9:a7:92:e9:8a:1a:d0:14:04:bf:10:36:19:8b:71:47:
         1d:df:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:48 2024 by rpki-client on console-ams.rpki-client.org