Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
File:                     986FD2A0366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          GhhggZHcmG8xazItX7R9+gh23ZMJG7qSLYcPNvSJFoE=
Subject key identifier:   8A:4F:57:8F:52:5D:89:8F:DF:81:A4:B2:CD:2D:89:18:39:A3:00:9A
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       D3
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:21:46 +0000
ROA not before:           Tue 25 Jun 2024 06:21:46 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     142609
IP address blocks:        83.118.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 25 06:21:46 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a61fa-78b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:69:73:8c:7c:56:de:28:1a:8d:51:b9:82:
                    08:2a:37:71:a2:1e:7b:ef:c4:1f:ee:62:48:f8:5a:
                    4a:d7:0e:95:0c:69:84:6a:b2:6a:61:bd:49:ad:35:
                    bf:a7:a8:8b:02:9c:c2:e2:9f:14:87:53:00:43:2f:
                    b4:31:41:d7:1c:5a:9f:dd:63:f9:61:69:b6:6e:f8:
                    7b:93:06:82:e5:80:97:31:ed:5c:8c:f8:4d:b8:b5:
                    56:58:04:b6:c2:4b:a1:31:4e:94:68:fc:15:64:4d:
                    18:ec:f8:d5:f4:3c:75:81:25:5f:d5:5c:30:d8:d1:
                    d0:7c:07:e2:6b:15:57:5c:69:9b:38:57:3b:ce:4f:
                    7c:2d:90:8b:80:8d:27:3c:11:4a:a7:74:2b:dd:81:
                    05:70:5d:34:69:a4:58:f5:6b:21:f0:f7:ec:10:7e:
                    9e:6f:46:89:9f:bf:c4:82:c8:15:59:e4:cc:94:4e:
                    16:8f:10:91:39:d1:c0:ff:48:34:45:a1:62:46:ed:
                    80:58:50:fe:a6:6b:f3:fd:f0:48:d0:6d:a2:f8:58:
                    a4:4b:df:91:67:c2:e7:39:95:69:9c:b1:13:26:e7:
                    dd:53:37:48:1d:32:0d:ab:b3:98:8f:bb:6f:61:aa:
                    6d:1f:42:1b:62:64:6c:ec:4b:71:74:17:5c:1d:8e:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4F:57:8F:52:5D:89:8F:DF:81:A4:B2:CD:2D:89:18:39:A3:00:9A
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:2e:f5:54:a7:df:e2:76:1f:cb:8e:3f:d7:57:3c:28:db:
         3c:3f:98:d3:e4:0b:84:f4:b4:05:06:4d:7e:56:b6:9d:1d:83:
         06:34:5d:7d:46:0b:e7:91:d4:a8:bf:5e:9f:9a:ee:f5:1c:7f:
         03:86:d0:71:a8:19:64:3e:d4:42:c1:de:a2:22:1f:90:0d:64:
         6e:4a:d7:32:4e:0a:85:7e:f1:00:a1:c2:37:a2:e7:88:45:9f:
         f1:31:77:8a:a9:43:b2:c4:d3:6d:d3:e7:8f:bd:71:71:4c:ee:
         93:3d:2e:9c:16:91:1f:36:aa:56:3b:d4:29:a9:3d:7b:25:57:
         b9:b3:de:04:5b:fb:64:5a:1a:25:24:5d:fd:1e:9f:25:81:8a:
         53:a9:0b:16:76:07:5b:7a:14:52:b0:cd:11:37:10:ff:f5:fb:
         bc:a7:df:9c:5a:62:14:e7:f5:04:0d:90:08:df:55:e0:a3:72:
         09:ee:97:9a:ea:bd:99:3e:4d:34:8a:e3:5c:6b:73:46:dd:e2:
         79:9b:86:ce:64:df:7f:97:30:8f:0c:e1:8f:ab:42:26:7b:bd:
         81:59:91:2b:4b:05:f9:8a:1d:af:54:a3:96:6e:90:57:0c:a0:
         a9:b2:9f:40:53:70:9f:0e:e1:0c:16:3f:4d:d8:c3:f5:1a:9b:
         56:d7:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org