Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
File:                     7B44296E33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          E63S4M77ErgCAsLp4LJYBtAVx6YLw4+9EG/B85ued4E=
Subject key identifier:   5B:A8:7F:4B:EC:CE:50:DB:B7:21:B7:FC:F6:24:75:4F:0F:D5:5D:F4
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       05D5
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 22:49:39 +0000
ROA not before:           Tue 04 Jul 2023 22:49:39 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     17675
IP address blocks:        149.234.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 23:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493 (0x5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  4 22:49:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a4a203-d8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:27:7c:94:a7:48:43:f8:9b:a0:2c:0d:ae:
                    8e:93:bd:8a:b8:2e:ba:46:79:02:5d:02:1c:d2:e5:
                    7a:60:d1:d4:49:dd:dc:11:46:72:ac:24:68:75:95:
                    81:ab:71:b5:1b:8c:33:eb:0e:cd:ab:da:ad:d5:48:
                    13:a8:e5:cc:1a:f5:37:dd:75:fb:5e:0d:c5:f6:fe:
                    89:ed:3a:f0:80:91:c9:6f:e2:8a:77:ac:e5:65:4e:
                    13:38:08:0c:b8:6f:05:87:57:1b:3a:03:7b:78:32:
                    de:7c:8f:f3:8f:d5:99:31:10:5a:a3:7d:40:d3:79:
                    e8:b4:b2:24:d9:39:04:20:2c:5c:3d:23:63:75:8c:
                    cf:70:d1:79:52:17:97:14:00:59:79:8b:35:93:41:
                    4e:2a:7d:69:43:b0:2c:30:00:60:a6:28:60:cb:30:
                    8d:a8:82:cf:a5:bc:3e:89:1f:8c:a8:3e:06:df:52:
                    28:cd:28:fb:64:f3:20:f5:cf:d0:e9:25:f3:e9:33:
                    1b:d3:f6:d6:6c:bf:ad:a9:bc:64:1a:37:74:d0:36:
                    be:2e:81:16:ab:a0:ff:fb:6e:1b:2a:9e:fc:4b:a7:
                    a2:78:84:08:65:13:36:2b:c6:ae:16:43:ef:10:be:
                    79:3b:12:57:32:62:b4:d5:3a:5f:c0:eb:f2:da:da:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:7F:4B:EC:CE:50:DB:B7:21:B7:FC:F6:24:75:4F:0F:D5:5D:F4
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:54:70:7d:49:72:96:41:9b:e8:75:39:20:7b:82:41:23:a0:
         e8:2b:5e:e0:ce:41:65:df:19:01:73:d7:32:e4:f3:de:c7:05:
         45:74:8f:79:28:35:29:88:1a:c2:32:1e:55:f1:62:64:f7:70:
         c8:8e:85:2c:5b:47:bf:96:18:94:13:b3:f3:54:7c:88:f5:fe:
         50:31:c1:da:65:75:07:35:af:22:28:54:fb:3c:55:af:51:77:
         e2:e2:6e:b0:fb:ef:f4:df:74:bf:70:ec:15:1b:dd:e0:a6:83:
         5f:92:23:07:d9:fd:0a:3d:3a:31:01:8c:4c:dd:83:11:0d:0f:
         9d:2e:49:d2:7c:a1:25:43:98:68:ec:77:54:c6:8a:5f:32:7f:
         93:7c:14:a0:a5:29:51:e2:f0:09:54:65:96:2b:5a:39:16:00:
         79:39:4d:71:8a:aa:b3:c1:2d:e3:8a:db:b2:e0:61:f8:3a:1c:
         e3:c0:23:f5:fd:ac:73:7e:57:00:28:10:fc:81:5b:64:07:0b:
         5a:6b:50:63:92:cb:69:5f:f1:a6:b7:b0:aa:1c:bf:68:2e:f7:
         8b:4c:91:59:f6:2d:0d:6b:22:72:42:78:06:77:de:98:78:34:
         16:1d:4f:6d:5a:a5:67:1d:0a:80:13:02:db:3c:94:09:e0:56:
         7d:f1:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:24:21 2024 by rpki-client on console-fra.rpki-client.org