Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
File:                     9663A3B0366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          wnmUO76JZp85+6TihvqjqAM1N82zX1eYSMWfhDXNXJY=
Subject key identifier:   78:52:A7:BC:17:59:E5:EC:77:E8:86:A6:2C:9E:62:EE:ED:63:7D:F2
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       CF
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:21:43 +0000
ROA not before:           Tue 25 Jun 2024 06:21:43 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135329
IP address blocks:        83.118.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 25 06:21:43 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a61f7-e0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:1b:2e:41:63:58:6c:f6:10:8b:99:73:1d:
                    ab:84:c6:c9:95:38:1e:b1:c0:d5:ef:b1:69:ac:82:
                    2e:2c:c7:90:b5:40:71:7a:50:0e:c3:1b:1d:0e:d7:
                    b4:f6:78:8d:83:77:75:3f:78:8a:81:ca:3c:b7:88:
                    e6:87:29:3b:f2:b2:74:b1:c7:68:b3:7b:9a:89:30:
                    fc:57:0b:42:38:d4:8e:99:c5:da:57:d1:4f:8d:08:
                    c6:e5:37:9b:91:e7:9d:56:9d:58:a0:b1:63:ee:68:
                    8d:f5:23:94:09:27:a1:19:b5:bf:93:f6:e3:a0:3d:
                    09:8f:98:25:92:c5:a5:d9:02:2a:f9:a3:b6:28:8c:
                    4c:61:46:ec:82:b9:71:7f:0b:78:8d:1b:f4:b9:bd:
                    d2:e9:99:a0:2a:07:ee:ec:ca:9a:10:47:d0:a1:55:
                    58:d7:75:af:62:1c:94:9c:a8:4d:15:a7:53:7d:ad:
                    78:45:0b:05:65:f5:49:68:30:53:2f:4c:3d:2a:d0:
                    34:65:2e:e7:c9:8f:77:d5:4e:3f:9b:4e:08:cd:5c:
                    48:89:f7:6e:ac:c4:0b:a6:f3:58:de:12:8f:3c:b5:
                    a0:86:db:5e:3c:ac:df:c6:2b:23:ea:db:2c:d4:ea:
                    17:e9:65:eb:02:3f:e7:59:7d:77:96:82:10:63:97:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:A7:BC:17:59:E5:EC:77:E8:86:A6:2C:9E:62:EE:ED:63:7D:F2
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9663A3B0366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:91:28:95:b3:2d:ea:d0:c3:53:d4:e5:cf:11:ff:cb:be:ac:
         c9:b9:c8:a3:f5:bd:ac:3a:cc:9c:23:0e:9e:f2:8f:81:3b:e1:
         dc:8a:6e:8f:0f:11:7f:95:e6:6c:5b:1d:7c:2b:b9:74:b7:63:
         87:47:b6:fa:30:26:1c:8f:b2:bd:31:18:73:f6:dc:92:00:fe:
         30:4e:f0:a3:70:96:90:85:a2:17:74:42:69:63:d7:06:e6:f5:
         fa:5a:85:16:cf:ee:bf:51:a4:1d:b4:c6:8a:fa:43:c6:f3:3b:
         04:3e:9b:a3:5b:6c:08:fc:ed:73:d7:85:08:43:9c:a8:07:fa:
         a4:25:fe:f9:7c:9a:5f:8a:24:70:b2:a3:9a:5f:5e:7e:a7:93:
         8a:05:ab:67:ec:e0:c3:86:8b:43:04:8e:76:0b:84:3f:3b:a6:
         a9:5a:ed:c4:57:02:2a:1a:f0:2e:dd:10:96:7d:a0:ad:84:2a:
         f5:43:a7:3c:df:0b:06:d6:55:86:31:35:17:d8:c6:2b:9b:f1:
         aa:6d:df:6b:4e:d6:78:ae:44:3a:f4:2a:a1:71:e6:83:ad:93:
         ce:ec:3c:1c:4e:f2:dc:a3:ca:a8:43:70:1d:45:36:a8:bf:56:
         f9:29:3a:ba:f6:fd:93:56:4e:a7:24:b8:96:7b:cf:85:f4:11:
         f4:11:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org