Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
File:                     B8B02658C16B11EEA7D01A7DC4F9AE02.roa (raw, json)
Hash identifier:          d87y0RU1JdMCx1tYhyDSj3d9fQ7O9wyqrkN2wHKJmw0=
Subject key identifier:   4D:F1:4B:6B:BB:AF:20:53:51:94:ED:27:43:E6:23:52:D7:5D:FA:5B
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       2F7A
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
Signing time:             Fri 02 Feb 2024 01:38:10 +0000
ROA not before:           Fri 02 Feb 2024 01:38:10 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     24434
IP address blocks:        202.6.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 15:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12154 (0x2f7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Feb  2 01:38:10 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=65bc4782-05f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:28:cb:6a:22:f6:72:81:bc:e1:c8:b5:21:
                    39:4d:bf:33:d7:82:6c:7c:21:6a:d0:83:07:41:ea:
                    8e:81:f0:d2:1a:cb:02:45:94:5c:f6:1a:03:be:f2:
                    c3:d2:fa:b8:ac:cb:19:2f:32:b0:58:d8:63:4a:eb:
                    90:b2:12:b1:1a:6a:47:40:5f:6e:e9:28:cc:d3:eb:
                    6d:16:cd:41:fe:63:99:ee:10:b3:a2:1c:cb:92:ab:
                    25:a3:6d:7a:2a:c2:d7:ad:87:3f:b0:41:0c:40:9a:
                    78:51:e2:55:be:e5:84:f3:dd:2a:e0:ea:60:c4:9c:
                    31:b7:c0:74:04:e4:06:12:c0:0c:ed:61:e9:51:11:
                    d0:d7:d6:04:43:4a:54:17:c7:a3:f5:ad:50:af:da:
                    70:19:2a:e8:d7:36:05:71:2e:96:95:26:2a:8f:71:
                    d4:47:b5:cd:89:af:72:02:b0:9a:38:61:1a:e8:2d:
                    a0:9c:50:f9:97:52:95:18:1a:ee:a0:08:cf:a0:50:
                    5b:38:ec:a2:16:50:82:5f:77:ac:5b:c6:aa:2a:55:
                    a8:6e:47:07:bc:54:17:42:45:bf:fa:e9:37:51:3f:
                    f7:e0:67:d2:9c:59:dc:5d:38:7e:a4:72:76:e6:47:
                    d0:e7:73:a4:5e:df:69:40:8f:32:f7:98:f1:0d:30:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:4B:6B:BB:AF:20:53:51:94:ED:27:43:E6:23:52:D7:5D:FA:5B
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:3a:99:ee:26:f4:e0:08:1c:62:b4:59:f1:d9:fa:9d:3e:
         b8:c7:6f:90:31:22:6c:a1:0b:fc:a4:3f:c6:16:6c:05:25:21:
         0c:ef:71:54:d6:bb:dd:f5:e7:b3:3e:45:0c:1a:33:02:5d:78:
         cc:f5:4f:aa:ab:bd:d8:10:6b:97:9f:a8:f2:51:0a:b1:57:42:
         f7:ba:68:5f:d8:44:aa:85:a9:81:8b:7e:f4:94:dd:f1:da:26:
         a5:a8:3c:95:7a:fe:b6:69:1f:d5:57:04:3b:ef:d6:eb:83:b9:
         c4:95:df:29:b8:bc:09:de:24:26:f6:97:46:bb:39:47:13:7b:
         50:8b:84:20:df:e2:8c:20:39:00:30:65:9c:16:e1:b0:34:58:
         be:02:98:51:0c:68:f3:ce:e2:aa:9f:f7:bb:22:d4:d7:cd:7e:
         16:6c:f7:b8:7c:21:08:18:0a:c6:64:b5:63:c2:22:aa:a1:7a:
         c1:a4:9c:91:83:ef:8c:19:12:07:ea:af:ab:b5:25:1f:23:ed:
         2c:30:1f:12:36:4e:c5:4a:87:68:00:fb:0e:d3:c1:e2:b9:34:
         35:3a:ae:59:ad:01:8e:b3:95:da:05:9e:3e:02:9a:9f:53:a8:
         f9:42:a5:92:da:f8:12:27:9d:f3:bc:bd:4e:c6:68:11:57:9e:
         92:23:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:10:34 2024 by rpki-client on console-ams.rpki-client.org