Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
File:                     2E31B8FCB57211EEBB68526DC4F9AE02.roa (raw, json)
Hash identifier:          QgH9UbyFxRgfxwPE8R8dTFa1nTcHpK3nSt5bOKTmsyI=
Subject key identifier:   2D:36:6E:83:29:CD:B2:31:60:F3:13:64:B9:E4:02:23:1B:02:D0:D7
Certificate issuer:       /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
Certificate serial:       05
Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
Signing time:             Wed 17 Jan 2024 19:54:10 +0000
ROA not before:           Wed 17 Jan 2024 19:54:10 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     6461
IP address blocks:        64.124.188.0/23 maxlen: 23
                          216.200.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl
                          rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 08:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B
        Validity
            Not Before: Jan 17 19:54:10 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65a83062-395b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:2a:b6:0a:4b:2c:dc:ae:64:e1:4f:af:58:
                    29:6c:da:11:79:cb:d7:c2:4f:44:06:68:4f:b3:62:
                    6c:39:3e:b8:74:95:7e:37:f7:56:6c:c4:88:8c:94:
                    e5:d5:5d:fe:24:58:95:1f:b4:ff:44:98:32:7c:d8:
                    95:3b:dd:73:15:44:a3:9c:da:26:fa:98:66:79:aa:
                    16:28:ce:2f:6e:f8:2f:7d:ea:24:4a:79:49:a6:02:
                    62:bc:d0:e5:f3:27:e6:64:8e:1b:36:6e:91:90:16:
                    e6:13:13:37:ef:90:5c:6e:a7:2c:a5:10:7e:f8:d3:
                    4e:de:f0:8b:75:4a:c0:65:d3:78:75:c0:86:5d:13:
                    a8:06:f5:cf:8a:48:c7:cf:68:5e:ed:21:20:65:72:
                    ad:e6:02:5b:09:07:fa:9f:40:2a:aa:e6:c3:b3:b5:
                    23:c7:c8:32:80:6d:02:7f:14:ee:24:97:72:da:e1:
                    05:b9:e4:96:98:9a:32:50:23:a9:ca:6c:f6:0c:be:
                    7a:5f:7d:11:3c:35:0f:e9:c7:32:48:62:2d:91:61:
                    bc:a1:ba:17:8c:0d:9f:75:2e:23:b0:e9:2d:93:e4:
                    d0:9d:40:09:bd:f4:eb:17:e1:ea:f5:45:7e:2a:c8:
                    ed:18:3e:ea:69:8d:59:19:c1:98:82:e9:17:ce:7e:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:36:6E:83:29:CD:B2:31:60:F3:13:64:B9:E4:02:23:1B:02:D0:D7
            X509v3 Authority Key Identifier:
                keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.188.0/23
                  216.200.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:59:b7:ad:e8:df:3a:2d:58:7e:68:54:01:82:38:fa:cc:57:
         09:b5:ed:d7:d8:b6:f3:0b:90:3f:c4:14:8e:5f:65:dc:fd:d6:
         c6:40:f7:1f:d8:16:3d:d8:de:2b:d9:88:a2:8f:bf:66:c1:84:
         7a:42:94:ad:93:d9:0e:c3:ed:68:97:ce:92:8c:f3:36:89:0a:
         88:90:37:c9:fb:2d:5e:9d:4b:6b:39:bd:44:9f:e9:26:f2:98:
         75:9e:7d:69:06:d4:ae:12:91:75:5d:9a:41:72:5c:4d:85:0e:
         b3:a2:6c:33:9d:fa:fb:a3:b6:bc:9d:87:c2:64:b9:9b:be:35:
         d9:25:4a:2f:39:82:7c:c6:5b:34:4f:82:48:43:83:c2:52:cc:
         de:68:d9:b6:cd:a7:2b:04:b4:ed:c1:10:30:a4:a6:f1:cc:b1:
         d0:ae:fc:3b:8a:d2:13:e7:98:99:5e:e0:0a:f2:75:05:92:0e:
         f5:19:77:ba:20:84:4e:a3:13:8e:e9:90:7c:2b:ad:67:6f:fb:
         cd:9f:27:07:44:ba:6b:53:c0:6a:2f:4e:97:31:41:26:fc:aa:
         ff:f0:18:36:f0:0e:10:5b:fd:83:ee:f5:26:c3:8f:c2:d5:5b:
         fc:6d:af:0e:01:d9:26:07:88:03:f5:26:ec:15:7b:82:bd:3a:
         0a:15:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:34:09 2024 by rpki-client on console-ams.rpki-client.org