Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
File:                     6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (raw, json)
Hash identifier:          CSGiYLZ6NekAj6P19BCgjbtyPLp1eMOjuUs3W4mDezA=
Subject key identifier:   AC:32:CE:3C:36:EB:2B:C5:46:BD:EF:25:F1:A7:E7:35:3B:57:DE:0E
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       01F0
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
Signing time:             Sat 09 Dec 2023 03:34:19 +0000
ROA not before:           Sat 09 Dec 2023 03:34:19 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     131254
IP address blocks:        202.137.224.0/24 maxlen: 24
                          2001:df3:9e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Dec  9 03:34:19 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6573e03b-1925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:d8:3f:a8:c7:e0:56:5e:03:fb:6c:f0:22:
                    52:0f:3b:6e:fb:92:c1:db:95:29:b8:bc:22:22:28:
                    e0:15:6a:00:4f:ed:e0:79:cd:25:6e:3e:a9:52:ca:
                    9e:19:ca:54:b7:6c:5f:f5:31:04:55:a1:09:31:65:
                    39:a4:e4:3b:17:44:9a:64:1b:20:f7:b3:32:36:e0:
                    72:ab:ea:bd:a2:2c:83:91:db:57:ee:e9:63:10:bc:
                    d4:f5:20:27:c4:be:80:aa:dd:ee:03:6d:45:90:31:
                    59:87:93:ed:41:71:03:70:dd:5b:73:2f:0e:d7:74:
                    7f:78:c1:ee:e3:03:7c:3a:64:b4:92:54:3e:f5:45:
                    f2:d0:d2:68:af:16:12:ac:36:50:d0:99:f8:85:bb:
                    05:33:86:aa:f9:38:3f:2e:23:5f:1e:23:05:59:03:
                    38:f4:4a:15:15:9d:81:b6:e0:d4:b7:42:17:1f:cf:
                    5c:a2:09:ab:50:47:9a:c3:a8:12:80:44:f5:e5:8f:
                    80:8a:60:17:3b:23:a2:35:58:97:ca:3e:fc:b6:3f:
                    3e:b1:04:06:ad:6a:3c:f3:4d:8c:a1:7a:b2:b9:19:
                    5e:27:4e:73:57:34:b2:f4:3d:92:06:c7:92:33:b3:
                    d4:bb:71:e8:f5:9b:12:5b:b2:22:92:22:10:34:98:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:32:CE:3C:36:EB:2B:C5:46:BD:EF:25:F1:A7:E7:35:3B:57:DE:0E
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.224.0/24
                IPv6:
                  2001:df3:9e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:7d:e9:ab:1a:3c:70:60:f2:77:6f:40:f1:59:48:7e:04:61:
         0d:33:48:d8:dc:6f:ef:b2:aa:df:e8:f6:47:e4:a8:82:27:d9:
         02:a8:1f:c7:e0:b0:25:ed:6a:c5:37:de:fa:c5:0e:fb:a0:a2:
         e5:62:71:8f:35:de:b5:81:db:0d:4c:d3:56:7e:44:ba:54:c8:
         86:a4:91:89:bb:cd:90:fa:cf:0e:3d:d7:00:eb:a2:a9:00:3d:
         cc:26:8a:47:a6:05:71:98:f9:05:27:24:62:66:d7:6f:46:ce:
         7d:b7:18:61:98:c4:42:9d:eb:e7:95:96:e9:d1:71:13:f4:21:
         7c:39:e4:b9:2c:4d:19:ff:2b:9f:65:6d:0b:63:37:b9:a8:77:
         df:2e:16:75:5d:92:fe:44:f3:9a:cb:9c:49:7e:87:89:74:2c:
         17:31:19:4c:05:0a:2d:8f:57:64:43:b3:db:a9:1a:cd:81:19:
         53:d2:01:4c:d3:a1:37:f1:7e:71:a0:8b:ff:5d:cf:13:51:2d:
         b7:22:44:45:94:20:26:f2:72:ce:88:bb:2c:6b:db:80:67:a8:
         4f:4b:e6:f0:df:44:0e:01:92:0e:0c:cd:bd:2f:ab:ef:3a:16:
         a4:11:48:7d:c6:55:72:f3:db:66:0a:91:ee:8b:d7:5c:be:dd:
         bd:36:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:22 2024 by rpki-client on console-ams.rpki-client.org