Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
File:                     857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          LCASSlw73kj8RjI+w/Ba5rk4QWoYYoa/QySnVh2z4EE=
Subject key identifier:   D1:06:27:9C:CB:1B:41:5F:8E:78:EE:CB:C6:04:49:21:5E:2C:A1:FB
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       063A
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sat 27 May 2023 00:07:07 +0000
ROA not before:           Sat 27 May 2023 00:07:07 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     45600
IP address blocks:        202.92.148.0/22 maxlen: 22
                          2400:b000:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: May 27 00:07:07 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647149ab-57fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:da:79:df:6e:9a:9f:77:7a:64:1d:af:c6:
                    e4:98:28:2a:9d:32:f3:ac:3c:2a:b3:cb:f2:43:aa:
                    80:34:e4:02:fb:4a:c0:f7:42:66:07:56:b5:f8:9e:
                    8a:c8:0c:a0:9e:41:7b:dc:e1:6a:84:ec:c1:67:31:
                    ee:df:aa:58:cc:b3:f1:ba:65:ad:cf:09:13:57:a4:
                    8d:cf:cb:95:d6:c0:64:60:5c:78:db:d2:ec:fa:92:
                    5e:b8:0a:ad:dd:39:d0:75:7a:40:4d:58:65:34:ac:
                    3b:d2:d8:45:0d:a2:f9:f4:4b:58:f6:76:e2:cf:88:
                    4f:6e:79:23:dd:b2:7a:14:6e:39:46:80:3a:05:ed:
                    87:78:75:17:9b:7c:c3:5d:ce:70:b2:f6:ad:f2:4e:
                    f9:3f:70:8d:5e:fd:c4:91:7b:c7:f7:7c:df:7b:ae:
                    45:ed:8e:ee:8d:82:ea:94:cd:a7:5b:e6:cb:b7:f2:
                    ac:da:0a:38:78:98:af:48:b6:45:f8:6a:4e:bb:8d:
                    d1:72:93:56:c8:00:95:37:5e:3a:27:33:0d:70:a4:
                    42:1c:89:f9:7f:c8:35:c0:c6:33:30:9c:60:af:fb:
                    ad:25:bf:77:59:0d:d7:5c:1a:f5:52:68:4d:0f:f9:
                    25:60:68:d5:b5:1e:22:d1:6b:b2:51:72:71:98:bb:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:27:9C:CB:1B:41:5F:8E:78:EE:CB:C6:04:49:21:5E:2C:A1:FB
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/857A6BC00E9711EB9A6C2B3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.148.0/22
                IPv6:
                  2400:b000:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:14:11:c8:9a:7c:35:ab:0e:89:02:3c:02:9f:79:81:4e:da:
         34:92:ae:00:57:3c:7e:39:5f:99:c5:33:06:98:0b:2d:a6:f3:
         23:8d:69:25:75:44:df:c4:1a:cc:02:31:e7:a0:2b:39:1b:53:
         d9:a8:79:63:9e:a5:45:09:92:ae:3a:c7:32:4c:dd:35:ed:0b:
         8f:66:01:45:a0:13:d0:98:43:72:77:df:c4:f9:3a:29:aa:59:
         db:bb:64:8a:6d:c9:f4:ac:b3:61:0e:d1:10:79:f6:c9:3f:ac:
         64:a5:8c:67:78:4e:03:46:df:ad:b4:01:66:d7:67:3d:69:d9:
         af:56:11:b1:b3:3e:9b:c9:34:12:4a:69:77:17:0b:c5:4a:a8:
         14:b0:14:be:6d:45:c0:75:92:7e:2c:0d:97:3b:bd:5c:cc:ae:
         86:c3:3b:88:94:e2:10:b7:a8:9b:1e:2d:66:40:e6:65:d1:5e:
         35:ff:ea:0c:7c:b9:cd:8a:a5:dc:49:0a:e0:64:ae:77:f2:e4:
         10:c2:31:79:35:b9:46:b1:01:8d:55:3b:2b:7e:dd:25:bc:62:
         ec:c6:8f:91:01:b4:69:0d:e5:05:79:4f:60:67:cc:93:f0:3b:
         82:9e:7d:60:14:c7:17:89:b5:8e:dc:ca:e3:61:1f:bd:5d:fc:
         5d:83:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:39:13 2024 by rpki-client on console-ams.rpki-client.org