Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
File:                     3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (raw, json)
Hash identifier:          Zat3lfoJd7wHrgdR1LUW98aWngZsNPzvM6G1u6eboFc=
Subject key identifier:   F1:A7:7A:18:14:03:B4:AE:7A:95:96:B2:98:CE:3E:BA:58:75:5C:8C
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       33B8
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
Signing time:             Wed 17 Jan 2024 12:23:35 +0000
ROA not before:           Wed 17 Jan 2024 12:23:35 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151981
IP address blocks:        182.252.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 13:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13240 (0x33b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jan 17 12:23:35 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65a7c6c6-f608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:92:ec:83:11:6e:4e:e6:86:52:68:dd:6d:
                    f3:99:7a:e6:69:c1:bc:86:c7:9c:15:c3:21:43:8e:
                    7a:af:2e:ef:2e:b7:24:07:ed:58:58:b8:ba:10:30:
                    21:2a:50:4b:01:c0:e9:3e:4e:d0:2c:fb:fb:5a:c5:
                    c4:1d:8c:65:a1:dd:4d:5a:aa:be:f6:1b:9a:c5:95:
                    1d:dc:e1:09:3f:22:6f:21:4a:0b:02:f8:7a:14:3a:
                    0b:fd:13:bc:b9:d5:09:d9:e7:cb:f7:66:fb:a9:0c:
                    76:15:41:35:a6:d6:19:be:8f:cd:6f:ac:a6:37:07:
                    87:45:bc:44:ce:0f:72:7e:46:47:a8:e3:ff:f7:bd:
                    1e:bc:02:8b:85:6c:cd:c9:35:64:5d:ee:e0:20:db:
                    cd:bf:61:51:1e:b1:93:9e:2e:55:c0:be:e8:e1:86:
                    e5:c2:5c:04:c8:de:11:f3:5b:13:41:d3:25:45:8d:
                    64:c8:c0:a3:24:63:d7:da:1a:81:23:f5:81:b7:86:
                    b2:f2:d0:2b:ee:8c:e0:44:7a:d1:02:60:d9:89:82:
                    9e:8b:bc:ff:a1:38:48:f8:0c:01:94:8b:70:bc:bb:
                    5e:56:5d:4b:e4:18:70:cd:27:c3:7e:e8:59:61:01:
                    33:1a:50:07:69:d2:9b:b7:6c:52:b3:2c:af:72:6e:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A7:7A:18:14:03:B4:AE:7A:95:96:B2:98:CE:3E:BA:58:75:5C:8C
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/3BC5B9F8B53311EE9D8D774EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.252.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:35:9d:b8:86:61:ef:ba:bb:20:43:6b:90:a2:8e:e5:b7:35:
         f6:61:fb:c6:e6:72:06:f6:31:fc:2b:49:27:27:e4:5e:83:1e:
         c0:02:21:72:bd:04:85:36:f2:58:7c:26:c9:ed:9e:28:71:6b:
         72:f2:a1:16:29:89:69:d3:4a:a0:36:ed:3c:69:58:39:a1:50:
         b1:35:a8:22:c5:23:59:11:14:81:35:68:89:80:a3:81:66:2f:
         de:0b:3b:09:9d:60:99:62:cc:30:74:ca:bb:ca:24:8c:9d:3e:
         c2:e3:e0:bb:c4:65:25:49:04:60:9e:e4:2c:8f:02:28:e2:db:
         3a:ac:1d:b4:b7:24:b6:9e:d9:3e:68:18:62:71:25:50:cb:14:
         a0:5f:9d:e3:22:2b:f4:49:ed:5b:a0:1f:75:8e:88:31:5e:70:
         bf:88:14:ff:18:0b:9d:17:5f:ad:ec:4f:69:ee:42:1c:ba:78:
         38:39:90:21:c8:1d:d4:5d:9e:b2:78:60:bb:57:24:03:e8:fc:
         fd:ec:8f:3a:93:46:d4:83:a3:a0:2e:ff:de:9f:a1:18:28:ea:
         38:85:c6:03:05:28:79:61:6f:4b:4c:da:15:d6:5d:c4:39:c2:
         6d:86:50:af:bb:a7:34:a8:9f:2a:99:f6:51:e1:87:99:e0:70:
         30:9d:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:19:44 2024 by rpki-client on console-ams.rpki-client.org