Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
File:                     26D56F6425FF11EBAF634966C4F9AE02.roa (raw, json)
Hash identifier:          3vTDoLxSMP6iCYPrTnRPa68156DbahM7Va7enXW/PyM=
Subject key identifier:   9D:31:86:46:AB:83:1E:33:EB:A9:A2:CD:D8:E1:7B:EB:39:5C:13:1B
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       06DB
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
Signing time:             Wed 22 May 2024 23:32:34 +0000
ROA not before:           Wed 22 May 2024 23:32:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     10229
IP address blocks:        202.43.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: May 22 23:32:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664e8092-c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:a5:91:69:11:76:d1:95:28:2f:e5:98:34:
                    b9:e3:26:0d:d0:e9:df:d3:5b:df:a7:58:eb:c4:5a:
                    37:15:dd:54:e5:0b:8b:f6:39:05:cd:58:1f:54:9d:
                    34:f4:fc:0e:f5:3a:3d:3d:21:61:3e:b9:ed:8d:72:
                    03:f9:0b:84:37:d5:16:3f:2a:c9:41:81:13:8e:96:
                    10:f0:c2:03:74:7c:ef:15:f3:6e:4b:23:92:dc:83:
                    04:62:94:5e:09:eb:a4:0e:08:1c:31:32:1f:78:bf:
                    b5:cd:da:d2:93:28:50:a4:e9:dd:c4:02:52:2e:36:
                    f8:4f:34:c1:83:c5:43:f0:1d:aa:13:c2:27:7f:2d:
                    cd:ce:be:0d:14:76:dc:7d:2f:fb:46:9d:8c:c2:16:
                    ed:0b:d0:34:1c:af:17:e4:38:68:a3:f0:59:8a:11:
                    71:9f:1d:3b:0f:47:3b:4e:6c:4b:ea:1e:ee:8d:08:
                    74:66:36:83:84:aa:14:94:71:e1:39:68:64:35:46:
                    db:cb:26:cb:fc:1e:61:ae:3f:9e:9f:2c:02:f3:e8:
                    53:bc:ea:a6:1e:73:7c:24:0a:66:e2:c9:87:fd:8c:
                    8c:20:21:29:10:a7:4d:31:26:7f:76:8f:43:15:60:
                    68:94:e6:9f:99:3e:ba:b7:92:51:7a:49:3e:bd:78:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:31:86:46:AB:83:1E:33:EB:A9:A2:CD:D8:E1:7B:EB:39:5C:13:1B
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:06:73:59:75:2c:90:87:f2:39:6c:c9:30:5c:ae:a2:47:56:
         58:b6:86:a2:fb:96:44:bf:28:b6:1c:a8:e6:e4:ce:63:28:6b:
         80:38:55:24:62:bb:84:e8:c9:db:69:fc:7e:f1:23:0b:dd:ca:
         83:a7:56:8b:a3:0a:07:7b:69:0e:72:98:a9:14:62:8f:b4:07:
         0c:b8:24:44:59:d4:dd:39:da:56:d7:6a:cc:33:e3:aa:e0:b8:
         19:a9:ff:9c:f5:de:c5:7f:a9:c1:85:39:e7:d2:c7:71:db:a1:
         f2:c1:2d:cc:c2:b9:09:58:be:73:f1:b1:6f:81:85:fe:41:0c:
         82:47:0b:0f:56:64:47:d7:f1:5a:d6:5c:22:f9:9c:c1:62:31:
         a4:89:d5:15:b8:77:f9:d0:ca:39:1d:f4:10:96:c4:07:18:20:
         17:32:aa:da:55:e4:d3:bd:2c:18:34:ed:a9:3c:5e:51:21:74:
         a0:87:d3:24:08:a3:4b:73:19:04:5a:e7:05:82:11:df:2e:3a:
         6b:8c:c1:eb:a5:a0:6b:e7:8f:d8:f8:87:aa:8f:cd:0a:59:10:
         35:ac:dc:be:a6:52:45:e1:64:02:0c:7b:4d:cd:b5:84:a4:d8:
         bc:8f:51:d4:eb:7d:24:82:c3:fc:0e:fc:e6:36:0f:c5:e1:21:
         9a:82:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org