Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
File:                     96EE3F5C366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          nKAYyKucul0PyVEQSP4KtKeozkeHS/TQ29ApmSMXdwE=
Subject key identifier:   FB:6C:30:4D:87:7B:72:90:AE:E8:94:19:36:C4:44:60:98:A3:9C:53
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       06
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:46 +0000
ROA not before:           Wed 09 Aug 2023 03:19:46 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135381
IP address blocks:        83.118.16.0/24 maxlen: 24
                          83.118.17.0/24 maxlen: 24
                          83.118.28.0/24 maxlen: 24
                          83.118.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Aug  9 03:19:46 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305d1-0868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:2a:ed:20:bd:fa:c5:62:c3:33:18:1f:a8:
                    7b:8c:02:ea:08:35:10:34:95:4d:c3:cb:be:4b:00:
                    a4:5a:89:6a:ea:76:f0:fc:28:ae:80:fb:48:85:11:
                    8d:c3:61:aa:d6:cd:73:9a:f9:6a:ca:d7:6d:a3:3f:
                    39:dc:80:a7:1c:b4:74:80:68:d5:b6:96:5a:25:5f:
                    ba:6a:2c:c8:35:c7:09:5e:88:36:62:6e:c2:07:ba:
                    f2:83:f0:71:a1:ed:86:74:d8:77:4a:8f:59:9e:6d:
                    27:bb:98:e3:b7:96:4f:c7:63:f2:cc:db:91:6d:ca:
                    1d:f1:04:68:8d:37:a4:eb:23:3f:1d:98:57:c8:48:
                    1c:50:38:db:7e:6d:66:18:6e:19:3f:b1:a1:a9:f5:
                    c3:e5:95:e6:69:2d:99:19:8e:a8:d5:d7:7d:5a:8e:
                    2f:5e:5d:95:b0:8b:30:d8:cb:f4:df:2b:19:ae:ac:
                    1a:a9:5f:81:dc:74:f2:6e:14:12:7f:b9:c0:fa:6a:
                    f6:00:f9:b7:ff:8c:06:f9:d3:fe:40:04:2e:6c:d4:
                    7a:26:cc:02:ff:7d:0e:b0:cf:c0:2e:7b:2f:e8:6a:
                    25:17:9e:5d:a3:fe:40:99:24:15:df:ce:41:ce:ca:
                    2b:52:14:99:26:45:a5:73:78:bb:e3:fb:7e:5e:53:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:30:4D:87:7B:72:90:AE:E8:94:19:36:C4:44:60:98:A3:9C:53
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/96EE3F5C366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.16.0/23
                  83.118.28.0/24
                  83.118.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:74:30:17:aa:22:2b:15:da:73:df:c2:8a:bb:69:4c:fe:2b:
         c6:1f:62:aa:b3:2c:98:d1:8b:5c:ac:83:7a:a2:8d:b0:22:29:
         cf:bb:19:ed:c9:f1:05:0d:d3:3a:65:36:41:bc:76:eb:53:e4:
         8c:eb:82:29:c2:ca:1d:a0:40:54:be:ad:43:86:2a:01:d5:0b:
         09:65:3b:bd:94:8e:ef:fc:d6:44:dc:54:76:3f:1f:4e:1c:92:
         72:5d:85:98:3c:4c:8b:23:35:fa:bc:69:76:d1:6e:a5:0c:65:
         2f:42:64:b0:84:7c:b0:bd:90:66:3d:2d:e5:f1:45:d2:3e:bb:
         90:27:9e:ff:ab:6d:a2:6e:17:14:c8:dd:89:14:99:8f:61:9c:
         68:9e:75:71:ec:46:f4:5c:a7:de:74:56:7d:86:36:fe:66:82:
         71:7b:56:58:32:99:28:2f:4a:a1:e4:8f:92:86:ba:7e:76:1b:
         1f:b8:d9:1e:62:e9:e4:e2:29:0f:9c:ef:3b:cd:52:3f:18:3f:
         69:f1:d3:7a:99:60:21:dc:dc:b3:39:40:4d:6e:9f:e5:24:2a:
         4e:b2:12:78:8a:dc:72:e8:2c:43:de:2b:e1:36:4b:1c:86:c2:
         a2:13:f1:6b:f6:a9:04:68:5f:2f:19:b5:ef:de:ef:f4:6b:7d:
         68:38:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:21 2024 by rpki-client on console-ams.rpki-client.org