Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86DD2732D86011E9AA427365C4F9AE02.roa
File:                     86DD2732D86011E9AA427365C4F9AE02.roa (raw, json)
Hash identifier:          YqdhsRXh/Uvb/jALz52v01Sa46hIk7tjTkI7qeiCYXk=
Subject key identifier:   A6:8C:9F:3B:8F:26:3E:AC:6C:E5:E2:01:C2:0B:D6:F8:8C:E1:C6:30
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2839
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86DD2732D86011E9AA427365C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:27 +0000
ROA not before:           Thu 28 Dec 2023 16:03:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45959
IP address blocks:        202.80.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10297 (0x2839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:27 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c4f-7b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:b9:cb:f9:79:b9:14:f2:3a:0c:19:6a:47:
                    68:a9:4a:a2:68:dc:f8:04:07:6d:42:39:cb:9a:50:
                    d3:bc:c0:33:14:db:c1:23:2c:d5:78:f1:cc:55:22:
                    27:b5:eb:d5:50:d4:98:d5:e7:6a:19:a4:72:b6:0f:
                    02:73:e7:9c:b3:25:c7:81:da:f9:b3:ca:af:16:9d:
                    de:92:05:64:7b:d1:a3:9b:21:86:e8:cc:e6:b8:67:
                    c4:db:ec:dd:39:cf:b6:b0:e4:14:4e:8e:f0:57:7e:
                    13:65:91:91:8a:b5:9b:19:a4:dd:81:84:ea:10:b3:
                    13:65:a1:08:89:44:02:00:8c:c6:7d:d5:74:f7:49:
                    3b:92:1a:5e:f1:b6:fb:31:a2:fe:a4:3e:3f:ed:84:
                    39:00:3c:97:35:bd:ca:1f:84:42:a1:49:51:58:87:
                    42:99:eb:31:74:c9:3a:1c:5e:64:4c:6e:7f:87:43:
                    ff:5d:6b:42:35:2f:82:0d:b4:87:b7:13:bc:8a:60:
                    8a:70:8e:de:96:43:53:e7:8a:7f:cb:3e:5b:ec:82:
                    3f:e3:d1:fe:86:74:d7:6c:7b:4f:9e:e6:e2:c9:a5:
                    50:e5:e3:db:dc:b0:80:d8:18:58:41:5f:80:b0:cf:
                    8f:eb:9e:1d:34:02:0c:86:72:84:e9:62:33:45:b5:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:9F:3B:8F:26:3E:AC:6C:E5:E2:01:C2:0B:D6:F8:8C:E1:C6:30
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86DD2732D86011E9AA427365C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:45:a2:59:2a:e6:07:1d:15:3d:cd:df:11:43:ed:3b:78:6b:
         37:d9:9a:a1:f8:7f:ad:87:cd:92:87:6b:6e:bc:b1:8a:b6:9e:
         b8:c1:28:d0:41:00:23:1f:35:4d:b7:44:bd:c9:f1:29:64:03:
         09:a2:01:b8:5c:f5:55:73:4b:58:90:ba:a9:41:52:17:c4:97:
         b7:86:ae:4f:4f:a8:9f:db:61:82:73:86:71:a2:f1:95:d5:70:
         86:d3:8a:b2:c7:fd:5d:4c:e2:ee:7d:cb:fa:58:60:ad:d7:23:
         f3:2b:b8:fc:da:7a:95:ba:cc:33:69:52:f2:ed:fa:b0:08:f6:
         69:c8:1c:c9:14:2d:82:07:57:f4:02:c7:e4:b8:8b:39:41:a3:
         b0:e8:95:9a:e9:3f:f8:15:50:2b:cd:4b:a3:ef:4b:6d:ed:01:
         35:9a:86:2a:97:0a:a9:eb:a8:5c:85:fa:27:6b:a4:18:fb:f6:
         9e:58:70:8a:4d:d0:a9:44:c4:15:d8:d0:bb:07:7b:26:40:1a:
         b6:a6:ba:48:02:ca:fc:fb:8a:53:2e:de:c0:a7:eb:ef:9f:7c:
         a8:32:5b:88:03:ef:43:30:93:ef:f9:bd:77:7e:18:bd:6b:3b:
         f7:8d:07:c9:a1:6d:42:4f:98:8f:7b:61:0b:58:20:15:ad:36:
         2a:52:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:03 2024 by rpki-client on console-ams.rpki-client.org