Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa
File:                     F3AA4E86721511EFA7D82D3EC4F9AE02.roa (raw, json)
Hash identifier:          QiEEvFu9Ii4FsFTglWbN+ftpR4P6wRRSuMbRPjoqt6U=
Subject key identifier:   92:1C:5E:77:5B:73:0D:7B:9A:A6:18:92:26:A6:EF:F1:75:7F:D9:7A
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       36
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa
Signing time:             Fri 13 Sep 2024 21:20:08 +0000
ROA not before:           Fri 13 Sep 2024 21:20:08 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     10227
IP address blocks:        202.29.82.0/23 maxlen: 23
                          202.29.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Sep 13 21:20:08 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66e4ac88-0830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:6d:a0:8d:98:c9:47:35:f9:1b:cb:97:6b:
                    de:ab:25:1b:c4:16:44:4b:0a:59:1e:2f:b2:b6:1d:
                    00:c9:69:6e:8f:10:07:ab:36:62:bf:da:4b:cd:09:
                    69:d0:c8:85:4b:00:21:86:db:34:c0:b2:b4:42:6f:
                    d4:be:07:a7:64:bf:d8:c4:fc:c0:aa:6e:7c:f5:80:
                    dc:93:dd:8b:ee:72:ad:66:77:8e:07:8d:4a:57:3f:
                    58:9f:fd:82:f8:84:11:23:2b:a0:e2:d7:97:e1:d3:
                    a9:68:03:83:34:0a:04:c3:76:53:79:12:61:c7:a3:
                    ea:3c:ef:e0:d3:f8:9b:36:37:72:4b:fc:b4:dc:2f:
                    a9:14:22:66:89:3f:f0:49:97:fe:b6:69:61:2e:91:
                    d0:c3:fe:f3:2a:70:b9:8e:65:aa:f3:ba:24:4c:53:
                    f7:6b:63:d4:b6:90:d4:52:c7:6c:18:af:e8:ac:4b:
                    86:b0:33:be:d8:0c:33:f6:9a:08:aa:c5:ec:31:27:
                    f2:0c:ee:19:91:0a:0a:f7:67:a4:5e:fa:33:ae:ca:
                    c5:8a:52:1a:2d:5b:98:04:ca:cd:94:15:42:fa:ce:
                    2f:f8:2d:58:6e:b4:06:d8:30:18:3f:d7:cf:92:cd:
                    b0:28:9a:ea:ba:f6:da:6d:a3:2c:cd:cd:5a:98:f4:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1C:5E:77:5B:73:0D:7B:9A:A6:18:92:26:A6:EF:F1:75:7F:D9:7A
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/F3AA4E86721511EFA7D82D3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:db:d9:47:96:47:03:d8:bf:b5:31:70:45:09:34:3b:ef:
         7e:3a:fb:1e:63:82:66:1a:ab:66:77:1c:5f:c2:4e:f6:ca:f4:
         9c:92:69:30:9e:55:2a:03:d5:0c:47:1e:80:d1:a0:51:f7:74:
         87:ca:c6:26:7d:69:78:6a:af:9e:98:ab:cd:7f:17:29:51:b7:
         c6:77:27:34:99:ce:78:f6:11:67:fa:ed:20:f1:87:1e:b6:77:
         63:cf:93:2d:2d:90:10:9f:82:0b:f1:65:1a:90:7c:68:35:70:
         43:88:f0:c4:3e:e8:4d:2a:53:0b:3b:f4:50:9f:9c:1d:2a:65:
         8e:08:db:30:28:d7:a7:41:5b:29:80:2d:72:7c:cf:54:8f:34:
         0a:76:6b:f7:3f:1b:64:1f:65:2d:2f:8a:0a:61:59:97:93:b6:
         5e:c9:b8:4a:9c:95:2a:f0:1b:fd:f6:3e:02:4e:8c:3a:09:de:
         a0:ee:1e:89:4c:25:c3:6c:c4:f6:f8:81:f5:39:3d:38:3c:5f:
         5c:d2:04:06:c9:0c:42:ed:fe:c1:46:2b:9c:4c:63:0d:26:21:
         cb:86:c3:05:e7:8b:1a:7b:88:13:14:22:6f:ac:64:48:2e:a9:
         2d:45:39:73:89:01:a3:4f:4d:20:86:9d:90:ce:6b:75:39:9f:
         04:07:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org