Route Origin Authorization

$ cd rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/

$ rpki-client -vvf ACC8833824DE11EDAEC0E529C4F9AE02.roa
File:                     ACC8833824DE11EDAEC0E529C4F9AE02.roa (download)
Hash identifier:          fbeUqMei0oc1tL//qccoT6fh9AtNp70VG6In2jB48io=
Subject key identifier:   F2:06:93:C5:8E:10:CD:2B:54:B1:E4:D1:E0:B0:91:F0:A0:34:0D:F7
Certificate serial:       1861
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
ROA valid until:          May 28 00:00:00 2023 GMT
asID:                     2914
IP address blocks:
    1: 116.51.16.0/20 maxlen: 20
    2: 116.51.40.0/21 maxlen: 21

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6241 (0x1861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Aug 26 01:30:32 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=63082238-cce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:ef:e6:40:fc:db:51:95:c4:26:6e:b9:f5:
                    95:8d:4f:56:3d:de:f3:8d:ba:f7:e2:f6:15:03:49:
                    f7:e5:58:25:97:b0:1a:27:c6:6a:7c:92:09:8e:38:
                    1f:87:10:be:a4:14:66:48:90:01:a0:1e:e2:0e:3b:
                    95:06:88:06:2c:b8:77:40:73:7e:2f:eb:73:95:21:
                    7e:35:bb:d2:31:e3:d9:b1:83:ee:0c:ed:0b:a1:61:
                    06:bf:43:d3:6e:61:9c:03:d5:14:e3:c3:fe:bd:f8:
                    75:1d:58:f5:a2:c4:9b:85:37:f9:09:61:c0:83:2a:
                    fc:32:b1:d8:2d:ec:e7:33:71:ad:f2:1e:5c:e3:5d:
                    af:d4:35:40:8f:15:64:79:6a:e7:0d:dd:fc:13:43:
                    d1:2f:7a:05:05:d7:7e:ce:9f:56:ca:7a:09:97:da:
                    cb:69:35:4c:04:c1:60:c7:88:db:a0:04:d6:1f:88:
                    1d:04:0f:1a:8c:91:56:12:b5:ed:d4:7a:42:38:13:
                    cc:89:ff:d7:d7:53:95:de:ab:18:ce:cc:e6:23:8f:
                    5c:99:f1:98:e3:80:7c:77:59:8a:11:ad:c9:9e:f3:
                    f0:31:07:95:38:e1:fd:49:f2:19:91:42:51:1f:3b:
                    5e:d2:80:7f:58:f8:99:df:9f:b6:79:99:71:31:76:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F2:06:93:C5:8E:10:CD:2B:54:B1:E4:D1:E0:B0:91:F0:A0:34:0D:F7
            X509v3 Authority Key Identifier: 
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ACC8833824DE11EDAEC0E529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.51.16.0/20
                  116.51.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:ad:f8:5a:1d:00:b1:98:9c:6c:d0:57:17:c9:fc:f6:2d:
         24:e6:5a:58:00:fe:22:30:f1:c9:77:8f:72:af:11:00:52:62:
         09:86:84:c7:72:42:7f:2d:9d:f8:d2:70:bf:a7:40:4d:a6:c0:
         ec:13:5b:4e:b9:f3:96:a7:a0:27:c8:4b:65:ed:26:7c:9c:61:
         2a:96:47:4f:4f:bf:9c:e2:6b:d8:b8:ef:55:aa:6e:6e:cf:32:
         af:93:6b:53:0e:c8:85:b1:7a:95:db:fb:c5:c0:cb:ce:55:d7:
         47:11:83:d0:4c:09:f4:f3:07:79:b4:75:c9:00:7f:c0:91:80:
         49:06:e3:76:e9:fb:0b:4e:56:14:86:cd:c6:bf:1c:86:d9:6a:
         1e:78:e6:31:11:84:10:f5:9a:a6:54:25:44:4b:a7:1f:22:a8:
         5f:ad:36:67:68:34:14:ad:18:7c:b2:d4:ef:c4:60:b9:25:f0:
         de:a0:4f:ac:1a:cb:3b:52:33:91:79:82:b7:7c:4d:47:6f:0e:
         aa:6a:53:b1:75:c7:63:30:b1:83:d1:44:78:67:3b:b9:d4:00:
         c9:c8:aa:9f:d7:d2:e0:43:a8:3a:ec:18:a1:04:4d:e6:f9:d4:
         38:4d:1e:c8:4c:3f:60:b5:95:8f:1b:e3:48:e2:79:72:11:91:
         d7:0a:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 07:08:24 2022 by rpki-client.