Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
File:                     574C50C2D46111EEA07A4568C4F9AE02.roa (raw, json)
Hash identifier:          yAg/Axjbi58irXuozneFKa6Pv1ujK2zAVJ31mXGoztk=
Subject key identifier:   78:A3:DC:15:7B:85:B0:6B:29:94:94:D8:0F:38:43:FE:7B:2B:4A:19
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0170
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
Signing time:             Mon 26 Feb 2024 04:41:44 +0000
ROA not before:           Mon 26 Feb 2024 04:41:43 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     134143
IP address blocks:        218.33.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 05:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Feb 26 04:41:43 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65dc1687-19b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:ff:2b:d3:9d:64:61:36:86:85:7d:6f:32:
                    52:2b:81:ad:e2:e0:c4:a6:91:9b:3f:f2:d6:d7:93:
                    28:ae:a2:e2:6d:44:1e:34:6b:47:4d:80:bf:4c:ba:
                    0e:98:97:e2:20:ab:0f:30:2b:54:7a:20:d6:65:a1:
                    60:7e:2e:82:99:e9:74:12:2c:7e:92:23:28:26:d7:
                    ec:18:03:23:12:2a:05:09:9e:98:fb:3f:e5:ba:76:
                    da:9e:5a:1d:5c:57:bf:3f:8c:69:ec:fd:fd:1f:9b:
                    66:f7:a3:97:14:f0:a4:43:8a:6e:ef:5d:92:f9:43:
                    3d:53:44:51:4f:b8:d0:0e:d7:5e:b7:d4:70:5d:2e:
                    70:89:9f:e6:78:15:64:4a:69:2d:88:47:cf:d6:53:
                    cc:65:e9:8f:ac:14:b6:0d:77:7f:fe:a2:ca:aa:0f:
                    b4:dc:c9:88:db:e1:dd:f8:cd:65:40:1c:bd:d4:5e:
                    1d:3a:00:8f:ad:f8:62:7c:a9:68:bb:21:25:ee:4d:
                    84:d4:bf:8a:f0:bc:1a:08:6a:09:98:e0:8a:a2:f7:
                    1d:b2:b9:b3:65:85:82:6c:7e:32:07:ad:4a:bc:1e:
                    16:38:8c:03:1d:01:79:1c:dc:af:8e:47:59:4c:6a:
                    02:57:fc:3a:22:39:9a:1a:35:25:60:12:06:bf:e5:
                    70:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:DC:15:7B:85:B0:6B:29:94:94:D8:0F:38:43:FE:7B:2B:4A:19
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/574C50C2D46111EEA07A4568C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:86:92:5f:8f:5c:13:bf:fb:2b:73:81:b4:8a:1b:19:76:21:
         9e:59:8e:83:d4:91:07:dc:b5:03:21:2a:c3:87:69:c1:3b:5c:
         d2:15:10:38:dd:62:9c:4e:d2:82:98:73:1d:27:3b:a7:86:23:
         66:20:51:a3:07:68:ff:5c:5a:17:18:b1:28:a7:c0:e1:1a:d5:
         5e:7e:1c:e4:d3:f6:41:f3:4b:a6:f0:cf:b0:de:9d:da:42:a0:
         12:05:34:28:62:c9:05:ca:27:a1:0f:d3:03:20:ce:d9:55:78:
         a6:da:2c:e7:4d:58:92:21:b4:57:21:15:f5:df:74:e9:32:a7:
         00:15:97:eb:c4:d8:32:a2:31:50:3d:12:44:61:51:b7:a9:4e:
         17:24:78:ea:33:c4:88:66:1d:ce:b2:96:a0:44:a6:92:26:2e:
         33:75:2a:2f:c1:ce:1a:b3:a6:98:10:02:33:dc:cf:ea:7c:09:
         43:3c:38:a5:5a:8e:4f:f3:34:1a:77:dc:8d:84:3f:08:81:70:
         24:cc:d8:b4:da:77:f7:2e:50:9e:3b:8c:1b:a2:6c:9b:0d:72:
         81:86:65:da:fa:7c:cb:5d:6c:8d:2c:38:68:3b:f9:e2:91:ff:
         2a:4a:07:a3:32:a8:6c:b9:70:f3:13:96:a0:35:e2:5f:ff:48:
         d1:f7:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:18:08 2024 by rpki-client on console-fra.rpki-client.org