Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
File:                     830314BE0E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          8tAfjE5UOtWsk+PXFcghoh37/Uq2gO8SE28c+QSwwoo=
Subject key identifier:   A4:42:AA:3B:FF:73:69:7E:40:19:EA:9C:29:CE:5B:78:9A:6C:F5:81
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0636
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sat 27 May 2023 00:07:03 +0000
ROA not before:           Sat 27 May 2023 00:07:03 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132796
IP address blocks:        202.92.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: May 27 00:07:03 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647149a7-5116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:f5:6f:0d:bb:64:ec:01:fa:14:5d:53:d6:
                    4e:e3:f4:c8:7b:50:16:d7:2f:95:86:01:ab:cf:ce:
                    04:50:5d:3e:5f:91:58:d1:30:ad:36:31:97:68:b1:
                    e2:48:63:e6:2f:34:91:e1:95:16:30:64:62:b8:3a:
                    a2:7b:f0:01:b7:ea:31:fa:97:b8:e7:8f:66:ea:fa:
                    66:27:1b:f8:ed:91:bc:ae:1e:3b:e9:cf:8a:2e:56:
                    d3:1b:bb:90:d2:b8:4f:c7:50:75:63:42:c1:0e:aa:
                    fd:cb:8f:29:52:c2:0a:ab:0d:25:09:17:f5:5c:d3:
                    f3:26:e8:74:32:5b:65:16:82:35:bb:76:b5:ae:0c:
                    b9:9f:af:95:22:2d:b3:d1:6a:5c:c6:e3:e7:26:24:
                    bf:5e:f1:af:c0:2b:c7:b3:9b:34:06:09:d8:b0:97:
                    96:4e:b7:a7:7e:68:42:87:0e:43:74:f2:43:c2:0b:
                    4b:ea:22:72:eb:16:26:a5:ec:47:f6:ea:83:c8:8a:
                    0e:25:73:4d:10:a7:b7:e8:60:a1:c9:27:8a:a7:12:
                    0c:59:e1:31:00:a1:2d:6b:6d:b0:51:b4:c0:ca:61:
                    85:d8:0d:b1:5d:16:4e:0a:02:2d:8d:16:64:26:81:
                    36:cf:05:83:d8:17:a7:a5:27:6f:ea:00:e4:86:09:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:42:AA:3B:FF:73:69:7E:40:19:EA:9C:29:CE:5B:78:9A:6C:F5:81
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:45:cc:ef:95:8d:18:dd:4a:7b:78:e6:f1:17:6a:ee:8a:ea:
         eb:da:c2:10:de:3c:bc:e7:84:bf:cb:2c:27:db:c2:2a:46:b8:
         66:c4:ea:58:35:22:70:cf:48:b8:eb:b1:05:4c:74:22:f1:80:
         33:79:ef:47:82:37:77:c2:31:b6:23:0b:a2:ca:39:f4:07:23:
         c8:87:41:ea:ff:5b:db:79:66:77:e7:e1:6d:aa:e7:40:1c:24:
         7e:7e:b6:7d:e7:d5:3a:d0:2c:72:3a:12:39:ee:c7:dc:e2:55:
         88:cd:fd:92:df:8b:75:53:2c:b9:c6:73:74:49:3b:a5:e3:eb:
         97:48:ff:c7:48:73:cf:80:1d:b4:70:e5:10:bf:8a:03:98:f0:
         cd:5a:00:0c:c8:71:8d:44:0b:eb:73:6a:df:6a:ed:28:33:12:
         2c:d1:c0:4e:5f:6b:00:d6:b4:11:ed:d6:2e:54:bb:50:d6:1a:
         2d:0c:e3:6c:f4:9c:a7:18:09:f4:04:73:cb:95:c0:c8:ee:30:
         8e:3f:6f:02:2c:f6:80:e1:9b:b2:67:88:84:2d:3d:2d:84:68:
         f6:3c:88:e4:01:1a:d6:64:9c:9f:02:69:7f:11:a3:c1:7a:13:
         0a:96:41:1a:5d:98:0f:2a:9a:2a:c6:e2:9d:84:d2:21:4c:37:
         af:fe:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org