Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16BF6942E73D11EE8DEA7557C4F9AE02.roa
File:                     16BF6942E73D11EE8DEA7557C4F9AE02.roa (raw, json)
Hash identifier:          mEden+ZL6AprpGBwQdsicZV5E+5pVyJeJDiZk89o9PY=
Subject key identifier:   1F:0A:C7:75:2F:22:87:57:E8:8B:93:50:F1:E4:AF:12:78:08:F9:5A
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       034B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16BF6942E73D11EE8DEA7557C4F9AE02.roa
Signing time:             Thu 21 Mar 2024 04:40:05 +0000
ROA not before:           Thu 21 Mar 2024 04:40:05 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     200239
IP address blocks:        203.32.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Mar 21 04:40:05 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65fbba25-75f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:42:fc:37:64:bd:0c:00:66:46:58:c0:12:
                    21:8b:ee:02:ba:f9:33:19:27:f3:6f:af:3a:ac:1b:
                    bf:5d:a8:1f:d3:d6:54:3e:3a:f9:13:aa:3b:16:fc:
                    61:bc:f2:92:4b:e8:cd:91:3d:64:c3:79:ff:4d:06:
                    6f:4c:e2:97:fe:98:64:47:6e:fa:67:f2:40:bb:46:
                    f4:90:25:a5:c5:60:db:f6:f3:c7:f0:0b:5a:61:40:
                    0f:b1:fd:b9:aa:08:fa:72:68:68:1f:dc:86:9b:92:
                    4e:1a:09:53:15:af:78:bf:2f:e6:e0:ab:fb:2f:ad:
                    01:de:58:c9:54:79:ed:c5:cb:7b:f3:30:ca:38:cd:
                    47:86:29:78:1d:fa:d7:96:5c:68:f1:dd:cc:f9:28:
                    69:8c:bb:15:e6:4f:2a:e5:b5:b8:4f:f0:20:e7:0e:
                    dd:0e:a7:88:44:8f:64:fc:09:e5:0a:1e:c3:48:b6:
                    8c:25:f0:7b:60:ee:06:70:09:2a:cc:a3:63:55:82:
                    73:6b:19:7b:fa:d6:70:99:94:09:a8:38:24:60:54:
                    1c:57:97:37:3d:2b:4e:31:ca:ae:80:5e:3f:2c:8d:
                    11:8b:6f:48:e1:49:bd:27:46:ec:98:94:4c:a1:0b:
                    c2:bf:7c:62:d0:2d:a4:8f:ac:0a:ec:65:b8:a9:c5:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:C7:75:2F:22:87:57:E8:8B:93:50:F1:E4:AF:12:78:08:F9:5A
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/16BF6942E73D11EE8DEA7557C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8b:ea:cf:d4:b1:78:12:f6:a3:09:99:ab:7f:1d:a2:44:c7:
         48:f4:fe:a4:97:91:47:cf:5e:26:bc:e6:34:4a:b4:0a:66:37:
         5d:31:5a:78:c8:85:cd:70:45:a9:42:8d:23:23:f7:71:39:b9:
         38:0e:42:49:54:36:86:b4:d1:85:26:ae:56:10:7a:1f:f6:44:
         14:ce:3a:ce:6c:01:64:fb:fc:7e:49:88:2f:44:dd:a2:40:d9:
         16:a2:b3:ba:41:d5:d7:bc:d8:c9:7c:3e:a3:99:91:d0:55:f3:
         77:34:e6:90:b0:92:f6:8d:81:ec:6d:ea:a1:50:af:14:cf:15:
         53:98:7e:96:83:8d:eb:79:ec:ab:7b:b3:41:dc:fc:29:81:ee:
         9e:64:0e:36:28:2e:55:1b:35:14:df:32:d4:8e:47:59:93:6e:
         ff:0c:da:7a:14:2c:6a:9e:c5:42:f4:77:54:90:7f:c6:62:d4:
         34:69:15:05:15:d1:23:e5:8c:c6:19:12:c4:69:87:da:d9:2b:
         79:b9:e8:e2:ae:7d:1d:8c:e3:5b:b9:a0:2a:cd:01:cc:9b:f1:
         4b:fc:e5:b4:cf:e6:e4:d6:48:84:50:79:b1:c0:05:60:7a:07:
         f6:6a:18:64:a9:b8:0d:d6:57:7b:b4:18:c7:75:0e:37:42:f5:
         d0:1e:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:05:12 2024 by rpki-client on console-ams.rpki-client.org