Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
File:                     957D5E14366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          pgOaeP/yDCO2Cd6nEAR34lCV049Kw8nNm7xRomHrUYU=
Subject key identifier:   4E:8B:17:77:59:44:53:7E:22:F4:DB:91:AB:FD:84:11:C1:5A:C0:57
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       CD
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:21:42 +0000
ROA not before:           Tue 25 Jun 2024 06:21:42 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     132920
IP address blocks:        83.118.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 25 06:21:42 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a61f6-0c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:49:50:a0:f6:8a:5d:eb:d0:7d:ae:7d:a7:
                    40:15:86:3f:6f:0f:62:7c:21:27:ad:44:19:ff:66:
                    cf:b8:62:d9:46:1c:41:40:f8:71:2a:bd:f0:b4:8b:
                    d8:b0:af:0b:4b:6e:35:81:54:52:01:aa:b9:ee:f5:
                    ea:fa:98:fa:72:27:29:a7:c7:39:76:3f:3a:3c:cb:
                    7c:a6:c7:1d:d8:7d:7d:12:b5:14:3c:5a:99:7c:76:
                    10:44:13:92:78:02:dc:b7:53:ae:ac:b8:24:b4:99:
                    36:f8:9a:86:0a:49:1d:32:b0:eb:98:60:9e:2c:f4:
                    07:56:4c:ea:0a:ab:f7:67:84:a6:63:f6:cd:fa:7e:
                    35:b6:1b:d0:e1:8d:ce:7d:98:82:02:08:83:69:d4:
                    74:2f:53:c6:6b:97:dd:31:26:dd:b3:cc:48:f2:e6:
                    5f:78:f3:ed:11:0a:9f:47:48:aa:a8:a3:eb:61:13:
                    c2:f9:d1:bb:c2:d4:36:7e:ae:84:49:44:7b:43:fe:
                    39:79:e4:d6:3d:92:eb:d1:a1:e5:bd:43:13:0e:1e:
                    fa:60:25:95:53:0e:2c:fb:57:fc:e0:d6:f5:96:61:
                    66:46:b8:ff:0a:1e:03:ce:68:2c:15:28:8e:02:4c:
                    05:8a:f2:22:80:f6:6c:01:c0:aa:1e:e5:4d:b0:ce:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:17:77:59:44:53:7E:22:F4:DB:91:AB:FD:84:11:C1:5A:C0:57
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/957D5E14366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b3:e5:2d:c5:a7:8c:b4:22:92:02:9c:c1:35:ca:42:a6:75:
         0f:1b:a2:ea:5e:d1:19:37:e9:2e:2b:31:40:78:72:62:06:48:
         01:d1:94:9e:fe:4a:2f:2d:46:c2:33:03:da:a8:e0:48:05:ef:
         51:8a:ce:5a:50:5f:12:64:0c:9e:bd:2b:0e:74:4e:13:b6:cb:
         f0:71:b8:e6:2b:93:2b:1a:7b:a6:0f:16:53:42:ce:36:fb:ec:
         dd:87:c1:1a:83:36:cf:83:06:70:be:a6:ed:ad:6e:04:12:c5:
         ff:ee:02:83:c1:52:eb:bb:dc:49:8d:a3:55:be:7b:3c:a9:eb:
         d3:ed:8c:b6:66:06:40:24:f5:f6:9a:26:57:1f:8c:3e:97:00:
         08:71:38:55:cc:c1:a7:51:ea:03:18:7e:6d:45:93:1a:bc:ce:
         d8:5c:09:81:88:8e:d8:72:2e:9a:18:a7:b4:5c:04:f4:e6:09:
         d8:d7:91:72:b1:8a:52:69:63:0e:a0:c5:c4:1f:01:0a:7f:03:
         bf:d6:5f:c2:7a:2e:6d:b1:cc:58:46:0f:22:20:7d:32:47:d1:
         af:63:fb:7d:53:1e:d2:0e:e4:fe:44:cb:14:6f:8d:bb:dc:23:
         7f:a4:aa:a7:60:b9:af:1a:3c:46:00:cd:69:db:39:db:93:dc:
         36:82:03:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org