Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
File:                     482C95F68DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          A1IUDPMC/Rxxzj5f79vVctc7IWAcASo/S4IA6PDargQ=
Subject key identifier:   FC:DA:C5:FA:8D:23:E5:F2:C4:EF:E8:93:4B:CC:13:12:2C:5C:95:52
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       33ED
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Tue 20 Jun 2023 14:50:34 +0000
ROA not before:           Tue 20 Jun 2023 14:50:34 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     55325
IP address blocks:        203.209.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13293 (0x33ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jun 20 14:50:34 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6491bcb9-dee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:2b:a7:33:7c:b2:38:d7:b7:b7:01:a0:72:
                    a8:c6:8f:01:5c:83:2a:6a:02:75:5d:69:b5:2f:de:
                    2f:cb:d5:68:da:6b:20:1e:7a:95:a0:8e:e6:2c:7f:
                    6f:55:2a:3d:55:ff:ca:3f:46:c7:5a:2f:7a:dd:c3:
                    be:9c:0e:13:dc:9d:d4:51:e1:a4:19:d2:5d:22:8c:
                    cf:be:b1:a0:f9:8b:76:6a:fe:05:56:e5:c3:45:23:
                    47:ba:79:05:40:b4:7d:36:26:a7:b4:7f:a3:ef:6a:
                    a9:14:cb:72:a5:00:53:af:2e:d2:2d:da:2f:f4:85:
                    7f:de:52:08:70:d4:5e:02:43:cb:4a:53:b5:9d:76:
                    0b:cc:30:42:40:7a:f5:03:7e:b6:fa:b2:7d:f0:cc:
                    cb:0a:72:70:3f:01:93:5b:d5:58:4b:62:f9:6f:92:
                    25:90:35:df:b4:2f:71:ab:94:99:c4:76:fb:71:04:
                    9b:24:6b:c7:ce:78:71:94:41:0b:e8:41:e9:91:8c:
                    09:74:e6:1d:3b:73:8d:4f:af:23:a9:f2:d1:8f:7c:
                    9c:20:4f:70:b9:7b:e0:41:27:19:5b:66:55:d8:6c:
                    2a:d6:b0:10:db:bf:97:34:c9:c0:5a:1b:03:82:e6:
                    7d:8d:0d:ed:6d:a3:44:38:4c:87:d1:0a:40:01:c9:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DA:C5:FA:8D:23:E5:F2:C4:EF:E8:93:4B:CC:13:12:2C:5C:95:52
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/482C95F68DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:01:a0:44:19:f0:4d:b9:26:81:a4:9e:7b:06:4d:e7:1e:
         46:d8:12:c5:a5:d6:06:55:87:f2:ac:bc:ce:09:e4:a4:b7:a5:
         9d:f6:06:c1:d5:74:9c:6e:c5:c9:36:88:cc:fa:ff:e7:d8:19:
         e1:8e:3d:45:3d:c5:70:6c:e9:e4:3a:46:33:4b:60:9b:b0:0c:
         68:40:12:7a:b6:77:4d:ef:9a:62:54:c7:78:9f:cc:b0:71:6e:
         95:ab:73:5b:53:7f:ec:74:e0:59:0f:a4:bc:01:89:d8:db:b9:
         45:db:9b:cd:2d:2f:96:8f:a9:e7:7d:44:67:c8:be:47:4b:68:
         f2:92:41:27:c5:ea:b2:6f:42:ac:d9:06:61:9f:ff:09:a2:98:
         26:bd:f3:58:57:ca:33:92:72:a6:51:00:f8:c6:57:87:e0:6e:
         37:d1:eb:3c:06:46:ff:0c:80:4c:2f:6f:0b:f0:d9:a0:47:9c:
         b8:6a:e8:7c:c4:60:08:12:66:4e:88:6f:cb:08:12:91:3e:72:
         77:8c:35:64:3b:f4:e1:d6:b6:04:ac:67:c8:64:29:e4:eb:03:
         36:04:d7:90:40:94:d1:05:70:42:b1:76:0d:d5:4f:6f:a3:e9:
         c4:3d:f5:cb:bb:69:94:be:87:b3:c5:e1:61:8b:86:4e:04:20:
         57:44:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:59:01 2024 by rpki-client on console-fra.rpki-client.org