Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
File:                     9DB1FB565EA511EFBA70FD68C4F9AE02.roa (raw, json)
Hash identifier:          4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=
Subject key identifier:   17:C3:E3:5A:E3:0F:79:67:17:6C:93:72:4F:A1:27:0F:E3:85:46:BD
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       F8
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
Signing time:             Tue 20 Aug 2024 03:38:08 +0000
ROA not before:           Tue 20 Aug 2024 03:38:08 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152915
IP address blocks:        83.118.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Aug 20 03:38:08 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66c40fa0-d384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:ad:9a:cc:b3:c0:1b:49:c8:13:c2:2c:1a:
                    8a:c2:9c:7c:6d:f6:04:60:81:1d:2e:6b:c0:b3:f6:
                    0d:43:f5:6e:c0:bc:2b:f7:e4:e3:a3:ee:2f:d5:f8:
                    4a:67:a3:24:e1:89:b6:d6:db:c5:0d:e1:36:ed:28:
                    49:4c:79:93:4f:ae:d7:c3:f4:c8:bd:20:06:bb:ca:
                    a8:98:11:3f:2f:af:fe:2e:fb:19:35:8f:c8:11:37:
                    a7:33:0d:7a:04:3c:9f:cc:a3:bd:57:3f:dd:6a:dc:
                    91:51:82:10:a5:7e:7b:c0:3d:81:be:0c:38:65:ec:
                    3c:4a:17:ce:13:15:30:d8:05:8b:88:c1:05:79:49:
                    d4:3a:6a:9d:14:dd:e0:1b:c5:59:9a:aa:69:96:3c:
                    20:a1:50:83:ef:a2:41:28:2d:91:ec:bf:8e:63:3d:
                    8c:c9:fe:8d:0c:76:0e:d4:5e:67:ed:be:60:12:eb:
                    b4:88:80:67:c0:f1:5f:cc:4d:2c:6a:7e:06:20:e1:
                    51:a7:2c:0b:14:30:12:5d:0e:7e:04:61:e4:bc:e5:
                    ba:55:62:ed:55:74:04:de:f9:f1:8d:85:c1:53:fd:
                    ab:9b:01:f8:5a:89:e0:29:06:f0:8e:c0:87:20:d0:
                    de:99:cb:ee:13:3e:61:92:31:42:9c:5b:3c:6a:38:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C3:E3:5A:E3:0F:79:67:17:6C:93:72:4F:A1:27:0F:E3:85:46:BD
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:8f:7f:75:a8:68:88:8a:25:69:f2:db:3e:d6:fd:a1:7a:
         a7:6b:56:ff:a4:0a:a3:80:b1:28:31:13:57:bc:e9:20:6e:4d:
         1b:a3:41:d5:4e:4b:1a:f1:40:da:4f:ab:02:a6:b2:18:74:c8:
         a2:66:da:de:87:b6:d5:96:87:d4:99:9a:f0:37:64:b8:d0:dc:
         a7:85:ef:87:3a:76:9c:81:39:0e:f3:69:ce:89:20:d1:06:39:
         1a:b7:57:9f:e0:a5:86:f7:80:60:70:08:be:8f:a6:1e:fb:e2:
         25:36:74:1a:9d:b3:75:d5:1b:59:c4:aa:88:10:4c:7b:6f:f8:
         c9:b2:61:d6:3d:68:dc:63:75:cd:e7:89:b1:79:93:33:91:2c:
         20:9b:70:2e:1a:da:e4:95:01:d3:8d:7d:5d:4f:63:d7:df:e2:
         af:ae:05:b6:71:7c:e3:a8:58:1f:08:65:73:f3:b5:0f:c2:73:
         3b:4b:0d:87:23:14:09:25:e3:b6:9c:08:34:96:04:4d:85:0c:
         19:47:0b:cc:79:b3:14:d5:4c:c0:5d:5d:d3:56:ba:34:c8:10:
         39:fa:a8:73:79:01:a3:5c:34:e0:67:53:eb:27:72:6b:18:85:
         da:29:f6:23:19:84:be:97:ae:59:71:47:89:b3:26:32:d6:39:
         31:3c:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:01 2024 by rpki-client on console-fra.rpki-client.org