Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/51BD88882B6011EEB0127E84C4F9AE02.roa
File:                     51BD88882B6011EEB0127E84C4F9AE02.roa (raw, json)
Hash identifier:          81gMp9DGHYjkYLUL7/F49o0KJ2c+VbzZxj1jqOt4vVU=
Subject key identifier:   BD:77:0A:E6:BF:07:BF:03:46:2D:0B:80:B1:84:45:99:FA:36:9C:17
Certificate issuer:       /CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
Certificate serial:       30
Authority key identifier: 07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/51BD88882B6011EEB0127E84C4F9AE02.roa
Signing time:             Fri 13 Oct 2023 05:57:48 +0000
ROA not before:           Fri 13 Oct 2023 05:57:48 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     151607
IP address blocks:        202.14.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl
                          rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123600/serialNumber=07D85A83798BB176BC03153D510A6B96326CF564
        Validity
            Not Before: Oct 13 05:57:48 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6528dc5c-382b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:40:7a:0c:df:b9:5c:7c:db:00:49:5b:a2:6c:
                    c6:aa:5a:61:a2:da:8f:9c:1d:73:53:7a:08:8f:54:
                    c2:79:19:8e:d4:17:ab:ad:c3:84:6b:9d:5e:4c:5d:
                    f3:9b:91:05:0c:e4:d0:32:7b:e8:ef:57:c0:c5:e8:
                    38:10:46:c8:35:c2:30:a9:c8:11:25:85:3b:be:72:
                    f6:d2:9f:6d:22:3d:93:8e:df:5a:ea:82:2c:16:e8:
                    8b:00:d2:93:7a:73:90:1c:ea:9d:77:61:eb:c6:45:
                    bb:b6:0d:b2:5a:9c:d8:4a:70:76:78:d6:d2:0b:2b:
                    53:c3:ca:3f:67:5c:a1:17:52:5a:42:bf:82:87:5e:
                    b4:f2:ef:15:07:6f:48:2e:ac:f1:b0:05:9a:87:89:
                    0e:37:86:cf:09:5e:5a:b3:b3:fd:89:50:b7:fa:61:
                    8f:cd:50:64:71:cd:82:b5:7e:81:17:ef:a0:2a:18:
                    e4:00:f8:bb:46:ba:69:d3:ea:19:c1:6e:00:9d:3e:
                    68:d7:3a:83:f7:0e:02:96:61:01:ba:65:57:1e:53:
                    ba:81:e8:d4:5d:df:ac:7c:9b:80:2c:33:67:a6:7c:
                    14:49:7c:e5:f9:34:3f:e1:23:d2:79:b5:0a:1f:e4:
                    7b:ed:f1:fb:9b:7e:50:5d:a6:b1:00:c8:ac:e3:48:
                    6e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:0A:E6:BF:07:BF:03:46:2D:0B:80:B1:84:45:99:FA:36:9C:17
            X509v3 Authority Key Identifier:
                keyid:07:D8:5A:83:79:8B:B1:76:BC:03:15:3D:51:0A:6B:96:32:6C:F5:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/B9hag3mLsXa8AxU9UQprljJs9WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B9hag3mLsXa8AxU9UQprljJs9WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123600/AC964F582B2C11EE8A53D314C4F9AE02/51BD88882B6011EEB0127E84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d7:bf:67:04:f5:1b:91:29:30:a4:e3:1f:9d:f0:7a:ee:61:
         8f:e9:71:a2:8a:5c:18:f3:46:0c:14:3d:45:a4:d7:df:3f:ad:
         d1:23:17:ed:09:a7:03:c8:9f:89:b0:4f:01:a6:6d:1e:b5:f9:
         55:4c:94:79:b5:6b:9e:e2:a4:40:e9:13:1b:34:ce:15:cd:da:
         07:59:56:b4:61:58:f0:c0:97:49:08:2c:47:6b:c4:38:32:9b:
         ee:ea:ae:fe:6b:94:15:6a:86:50:be:50:39:0e:65:49:ba:72:
         6e:26:b9:de:6d:2b:47:33:5a:b2:1e:f2:50:7b:42:26:a0:aa:
         77:70:88:a6:e2:0c:84:4a:54:fd:41:0b:64:1f:86:9c:5c:d5:
         aa:fe:1d:ce:16:20:1b:64:32:54:d2:ea:b2:2f:c9:b3:a2:41:
         68:2b:79:9f:3b:49:f4:43:4d:a2:83:d6:d9:72:a2:6e:da:78:
         06:15:41:f1:8b:e6:55:2e:ba:59:0e:fc:2f:ca:14:91:25:59:
         a9:37:f1:84:b7:5e:d8:f9:86:b2:66:fe:97:da:a7:d5:78:43:
         d4:6c:9b:85:15:ae:be:ad:3c:81:4e:e6:6f:92:65:c1:c8:2d:
         dd:aa:42:7e:0e:5c:03:b8:f4:72:61:c9:65:b6:ea:e5:be:2f:
         1c:a1:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org