Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa
File:                     699C6052D60D11E9A0539B2EC4F9AE02.roa (raw, json)
Hash identifier:          egwXe+hYW2bCiV2LF5q8lygEeHHqU8dTnoRrIQkKPco=
Subject key identifier:   46:C3:B3:FA:65:B5:16:55:15:5C:34:FC:41:C2:D8:B0:46:79:34:89
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2815
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:02:54 +0000
ROA not before:           Thu 28 Dec 2023 16:02:54 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     136605
IP address blocks:        202.80.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10261 (0x2815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:02:54 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c2e-af47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:c1:c1:7a:bd:f5:3c:6d:84:a9:1f:b3:7f:
                    0f:e2:c0:8d:e0:62:6a:cd:52:99:6f:ff:32:f4:ea:
                    d9:19:a0:30:09:eb:b1:cf:f8:84:c7:d3:fe:bc:1d:
                    1f:ad:ed:8f:cf:c2:f3:e1:51:47:2d:33:fa:24:62:
                    ce:c5:21:e2:12:e6:4c:fa:d6:70:9c:7e:b4:8c:1f:
                    c0:1a:d7:00:1a:47:1e:84:cd:da:ae:77:38:0f:ae:
                    42:36:fb:46:24:98:ae:40:af:39:6e:8f:17:6a:04:
                    c8:65:50:da:25:6a:42:d4:2f:d0:6e:0a:1f:2e:58:
                    87:62:30:01:3f:1b:74:3f:76:42:56:d4:98:0a:13:
                    fb:35:6b:5c:3a:3c:be:2d:c6:fa:9e:ce:fa:31:0e:
                    ed:cb:e9:35:7d:f0:72:57:7e:14:82:02:29:22:54:
                    eb:6d:fb:fb:a7:80:b9:30:c8:a4:05:0c:59:a9:78:
                    80:3e:36:41:58:4f:2e:fa:88:57:b6:44:dd:7f:cf:
                    87:cb:19:ac:53:8b:b5:04:c2:a1:10:a5:c7:68:21:
                    ac:2e:61:74:7b:fb:28:b1:74:18:5a:d3:d6:98:ed:
                    9d:80:51:ac:52:a9:80:a5:c2:a7:f5:d5:71:20:dd:
                    cf:eb:79:28:18:27:df:a3:64:a4:6b:e0:23:05:d7:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C3:B3:FA:65:B5:16:55:15:5C:34:FC:41:C2:D8:B0:46:79:34:89
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:99:2d:5b:d6:56:f0:e9:a6:96:5a:90:0a:28:59:2d:dc:
         44:b0:bc:38:06:78:f2:ef:99:96:31:b9:36:e8:ea:d4:75:fa:
         f0:c1:ee:10:e1:b1:9b:d3:11:61:e6:ad:21:67:a3:59:2a:33:
         a9:6b:8d:16:b0:03:0d:03:27:d5:b6:f0:be:66:81:ec:cf:3f:
         10:05:67:28:2a:29:be:7b:28:6f:f4:9b:8a:06:c3:3b:09:ef:
         9d:f4:37:bb:9e:b0:82:e7:b1:73:79:9c:3f:ee:65:07:59:8b:
         a7:fa:12:5f:47:1d:1b:e7:15:7a:b8:b6:05:b7:1a:e4:65:72:
         8f:82:70:c0:43:60:7b:0f:d3:3b:b6:11:c3:17:37:54:2b:48:
         8f:68:8f:20:a2:a9:c6:10:2f:b8:9c:98:8d:4c:7e:7f:e3:a1:
         c3:6f:e4:2e:7e:23:32:f5:62:2f:16:ab:f9:b7:2d:ca:8f:33:
         f1:bf:85:97:a2:7c:a2:e4:5d:e0:01:22:43:67:6a:b6:02:4a:
         dd:63:07:7f:e5:f2:1e:7c:08:c3:c5:82:97:c5:70:58:5b:67:
         39:8e:37:de:f4:61:cd:ed:91:f1:2a:54:e7:27:52:52:9d:ee:
         5f:18:a3:f1:e5:28:8c:30:88:b1:fd:07:2f:96:c7:29:85:81:
         28:09:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org