Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A5A25326366311EEB376DC3AC4F9AE02.roa
File:                     A5A25326366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          20GYdHk6C/jkr7Nm3Kl/3ANeX73D06YHG0SPhzsF1Tk=
Subject key identifier:   67:97:6E:C0:C5:40:45:A2:C7:DE:40:59:27:D4:00:3B:DD:E8:27:B5
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       04
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A5A25326366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:10 +0000
ROA not before:           Wed 09 Aug 2023 03:20:10 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135329
IP address blocks:        2400:6280:160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
        Validity
            Not Before: Aug  9 03:20:10 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305ea-0502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:e3:06:0e:7f:07:d2:f7:5d:43:60:85:da:
                    75:28:e1:36:d1:14:be:7e:ef:4b:8e:0c:e9:c1:7f:
                    a1:b3:8a:ee:91:ec:96:55:a1:5d:81:1d:5e:ca:90:
                    5e:6c:46:8a:a8:d0:96:7c:b1:f8:55:64:23:21:70:
                    a3:5e:f3:85:22:c5:3e:61:d8:74:bc:dc:8f:f1:23:
                    f5:40:11:52:5a:73:98:84:3e:b0:9c:38:c7:18:d7:
                    a0:d0:3e:d1:e1:4f:ed:9a:f1:8d:56:9e:78:1c:40:
                    39:61:4c:28:4f:7c:f8:fb:89:d5:7a:54:49:32:73:
                    49:b7:4c:18:d2:6e:b9:c5:76:be:45:c6:cb:83:65:
                    a6:cd:00:02:70:e5:78:d7:6b:3e:24:ac:a5:85:4a:
                    c0:05:ec:12:b3:d3:77:70:80:cb:a3:e7:1d:73:a3:
                    87:80:13:5a:1f:1c:f2:58:d6:54:04:d7:16:b3:6b:
                    d4:62:e0:fa:1f:a7:a4:58:7c:b0:d7:97:d1:4c:4b:
                    3c:fb:5e:40:86:a1:7f:0f:fe:6f:47:38:bd:41:66:
                    b8:6e:64:d9:c9:c0:e4:5a:c1:73:99:ce:2c:76:35:
                    c8:08:ee:9c:5e:10:ac:44:1d:f9:f1:35:24:e5:fe:
                    62:9d:cf:d9:52:8c:c8:1f:15:38:a6:0c:55:4a:25:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:97:6E:C0:C5:40:45:A2:C7:DE:40:59:27:D4:00:3B:DD:E8:27:B5
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A5A25326366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6280:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:ce:de:bb:7d:53:ab:ad:76:2b:af:9b:df:6d:85:9c:c4:
         f0:0b:18:84:14:06:7c:5f:c8:c4:f9:40:e2:f9:aa:fa:21:8f:
         89:56:26:53:18:4d:66:70:83:73:13:33:40:de:39:c4:9c:67:
         77:a8:05:fc:e2:84:01:4c:3b:48:9a:0e:49:67:8e:e6:40:a4:
         55:91:a1:c6:49:a6:0d:a2:49:15:65:95:8d:d0:11:bc:5f:2f:
         94:a4:a8:e8:67:b3:72:de:e1:a2:48:1b:d8:66:da:e6:a0:19:
         75:a2:0c:34:5c:da:94:70:e8:75:eb:c2:b8:8d:3b:80:c1:a5:
         eb:0a:d8:15:64:a4:40:82:04:64:49:36:7a:2c:61:9a:e3:ff:
         d6:a3:06:a0:8c:9f:37:a5:bf:01:38:8b:0e:8c:0a:24:ad:e2:
         3f:97:23:ff:2f:f1:2f:fc:6c:9b:bd:7f:ef:4e:41:c4:07:f1:
         63:9f:59:11:4b:4d:2d:d6:47:6e:62:3f:65:0d:f4:98:06:57:
         80:3b:01:df:d0:67:d0:ec:cd:f7:fc:ad:a7:0e:62:f4:d9:cb:
         74:f9:e9:09:a1:87:cb:eb:67:45:b3:cf:16:71:53:e8:5d:92:
         f7:a8:6e:0c:8a:7d:cd:1f:22:fe:78:12:b5:39:8e:86:db:2d:
         61:0d:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:02 2024 by rpki-client on console-ams.rpki-client.org