Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
File:                     45490AB25AD611EB946A2C37C4F9AE02.roa (raw, json)
Hash identifier:          MvSnhG1Tw3jH9r3zlt7DFdvsRZP7y0XecmpUqHlHCS8=
Subject key identifier:   68:A4:26:15:85:25:15:71:FE:D2:6C:75:F4:2F:54:11:10:3E:88:3E
Certificate issuer:       /CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
Certificate serial:       05B2
Authority key identifier: 20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 23:51:38 +0000
ROA not before:           Tue 28 Nov 2023 23:51:38 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        203.26.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl
                          rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D897/serialNumber=20465A3A9C0837E7B6883073371DBA09222FBF4A
        Validity
            Not Before: Nov 28 23:51:38 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65667d0a-012f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:83:0f:0d:61:dc:bf:08:9e:55:43:2c:2f:
                    96:e9:20:3b:15:3a:81:83:1f:1d:d6:ec:fb:a9:ee:
                    fb:57:c9:2b:3a:8b:88:e6:61:38:f1:f0:bc:a9:26:
                    ba:f1:2e:f6:1f:ce:20:07:e2:9d:22:e6:c4:3f:f1:
                    d2:7c:02:78:27:e0:1f:41:a0:a4:4e:3c:87:a2:6d:
                    e6:84:2b:45:35:47:d6:d6:55:2a:6f:27:2a:e2:f4:
                    dc:d2:72:b1:92:47:1d:98:ac:bd:00:b3:5c:0f:b7:
                    7c:a6:91:b2:1d:0e:27:e6:58:b6:f1:ec:d4:d1:03:
                    46:80:26:80:4d:d8:1e:f5:e3:9f:b7:4f:57:f2:2a:
                    5e:f2:5f:37:2e:31:d7:43:5a:82:b1:10:05:d6:4f:
                    c2:53:21:2c:0a:d6:b1:36:cd:eb:65:38:d2:0c:cf:
                    9f:d0:7f:ea:35:32:8e:72:19:d9:cf:d0:18:c6:05:
                    2e:7a:b4:0a:8e:c9:14:93:91:f3:08:93:00:d2:6e:
                    8a:b4:c5:39:1f:f4:33:5b:fe:e9:6a:8b:a9:a9:7f:
                    76:38:c4:ce:47:99:7f:b8:d8:72:2b:ad:3d:dc:14:
                    27:ab:69:7a:98:f7:53:5f:a7:a4:1c:84:7b:88:4c:
                    db:4d:b7:cb:4c:5b:8c:95:f2:fb:1e:0b:2e:22:7a:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:26:15:85:25:15:71:FE:D2:6C:75:F4:2F:54:11:10:3E:88:3E
            X509v3 Authority Key Identifier:
                keyid:20:46:5A:3A:9C:08:37:E7:B6:88:30:73:37:1D:BA:09:22:2F:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/IEZaOpwIN-e2iDBzNx26CSIvv0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEZaOpwIN-e2iDBzNx26CSIvv0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D897/097711925AD511EB945C4B36C4F9AE02/45490AB25AD611EB946A2C37C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:0d:35:e2:b5:da:69:df:18:c9:96:c4:80:eb:65:c3:b1:
         65:af:01:33:f0:dd:6a:61:ff:79:51:d7:00:07:08:5f:a2:f8:
         05:24:4f:16:8b:e6:c4:3c:35:90:8a:47:85:4a:7a:fd:50:90:
         2a:d3:7a:69:c2:26:cf:c6:e4:52:a7:12:a7:52:01:4e:e5:7d:
         68:f2:e7:18:61:ba:55:75:0e:e5:78:a1:de:cd:6b:8f:80:cb:
         96:bd:64:12:ee:81:8f:26:db:b5:d0:4e:1a:e0:86:e5:83:72:
         78:ce:50:85:e9:0c:b3:05:c7:87:c4:17:97:b2:b2:27:21:3f:
         3f:8e:a9:6e:35:de:52:b1:77:5c:c2:dc:2e:44:b8:74:63:1d:
         1c:ef:30:07:62:c2:f5:c0:8c:7b:c5:55:3c:1e:a2:d5:d5:d1:
         aa:48:d8:1c:ef:a0:b0:a5:5f:c5:40:1c:db:d5:22:34:08:81:
         4b:fb:3c:cf:49:ea:4b:5c:bf:be:cc:d4:ef:07:44:4f:01:be:
         4f:58:46:65:50:a7:a8:ba:e0:d6:ea:4c:b6:a6:30:53:ee:a4:
         70:38:8e:d2:35:14:ce:bb:d5:b0:14:d8:9d:54:3c:c5:95:12:
         d6:57:95:dc:0f:41:14:3f:62:00:c2:13:e9:95:eb:42:4b:83:
         62:af:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org