Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
File:                     673E7D66F73911EE8BEC0A76C4F9AE02.roa (raw, json)
Hash identifier:          yCObzbtV27l5/z/K4jU5ZOK5OZGZWWAdqaoCjC2eBGg=
Subject key identifier:   E8:B6:9E:42:24:7E:6D:DF:00:EA:20:F7:3F:0A:D1:E2:BE:06:35:3A
Certificate issuer:       /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
Certificate serial:       33B3
Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 12:54:01 +0000
ROA not before:           Wed 10 Apr 2024 12:54:01 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     139829
IP address blocks:        202.78.27.0/24 maxlen: 24
                          202.78.28.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl
                          rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13235 (0x33b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D
        Validity
            Not Before: Apr 10 12:54:01 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66168be9-5f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:9c:80:a2:b0:e3:53:72:d1:13:ba:86:86:
                    82:f5:c3:29:ea:d2:bd:5c:f2:b4:d4:6f:00:e4:a5:
                    42:69:a9:d8:d0:d6:00:f0:a1:c9:9c:ab:ee:07:08:
                    85:b7:10:50:b0:6b:8b:e9:5c:32:df:47:54:26:40:
                    01:bd:00:eb:bc:dd:32:34:1a:75:fe:1f:74:85:4a:
                    2c:69:ff:95:5b:3a:19:df:3b:65:54:d3:ff:78:fd:
                    02:cd:73:97:ec:dc:44:f9:7b:19:a4:6a:a9:f5:ee:
                    26:cf:41:27:26:91:33:9e:a4:be:b7:f6:a7:03:7f:
                    56:bf:a5:86:bc:54:aa:58:10:d1:d5:9e:fd:9d:be:
                    54:b7:fe:48:97:9e:b4:97:4a:9a:18:c4:13:1d:5d:
                    2f:ec:63:a0:7d:d9:75:54:d5:83:bb:81:d5:2b:5a:
                    aa:af:49:9b:ea:74:7b:25:b9:c0:6a:97:d3:08:62:
                    e8:0f:2c:92:30:a4:5a:5e:bc:ee:88:a3:2a:a8:6c:
                    ca:75:7b:4b:41:69:b9:93:b6:eb:12:e0:20:b7:2c:
                    52:f5:82:e3:76:f8:9e:e0:c1:4b:89:98:87:f6:e9:
                    33:db:a8:c3:c8:8c:de:86:d8:91:2e:6c:e3:94:17:
                    fe:36:c8:bd:7a:8d:e1:2d:0b:71:6e:85:98:d0:f0:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:9E:42:24:7E:6D:DF:00:EA:20:F7:3F:0A:D1:E2:BE:06:35:3A
            X509v3 Authority Key Identifier:
                keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/673E7D66F73911EE8BEC0A76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.78.27.0-202.78.29.255

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:dd:be:6e:22:36:76:2f:28:7e:19:4b:62:ca:0e:f5:bf:
         ec:c4:e8:0e:f4:bb:86:08:96:df:25:3b:63:7c:ac:08:15:b8:
         4e:fd:b4:73:ac:81:ee:86:ee:67:05:83:3b:6c:0d:9f:21:4e:
         5b:e8:9d:67:cd:0d:4b:d1:56:c1:87:94:af:10:c5:5f:ec:aa:
         47:df:97:16:6a:f4:60:2a:a7:99:e1:09:56:49:eb:40:e4:70:
         74:5b:16:79:b1:1a:8c:a4:10:a4:11:0a:4b:5d:56:56:01:89:
         37:ea:1b:ea:1e:db:b7:9c:91:dc:8b:1e:92:4b:99:23:af:0d:
         c0:cb:a4:2a:99:c0:49:3b:d7:7d:41:07:f9:84:0c:f0:d4:73:
         8f:55:69:ac:4c:6e:76:32:06:d7:95:2c:93:32:43:fe:f6:9a:
         c6:81:ba:4e:c9:a0:44:25:af:91:db:82:72:77:b1:4b:67:60:
         46:50:30:a7:1e:37:3c:6b:2f:5d:aa:c7:a5:0c:d0:50:d6:b9:
         60:04:4d:03:c9:0f:f7:df:0b:30:f1:66:2e:06:f6:11:13:fc:
         7d:6a:43:f4:4f:0b:64:7a:b6:71:cc:e3:c2:71:8e:6d:45:03:
         75:e6:41:16:36:e9:9a:85:db:9c:35:1b:25:8f:2c:d1:e8:e8:
         98:a6:3a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:09 2024 by rpki-client on console-fra.rpki-client.org