Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
File:                     68894B22402811EB91B49250C4F9AE02.roa (raw, json)
Hash identifier:          6IG/vOtJOcSDzoutMB/zf9ko5LbvUlfffG7Cgbr6Gy4=
Subject key identifier:   DC:50:21:87:0B:25:F1:75:B5:F1:DB:C4:B7:71:77:A3:C3:26:96:6C
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       05FE
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
Signing time:             Thu 30 Nov 2023 23:51:25 +0000
ROA not before:           Thu 30 Nov 2023 23:51:25 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24068
IP address blocks:        202.133.81.0/24 maxlen: 24
                          202.133.82.0/24 maxlen: 24
                          202.133.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: Nov 30 23:51:25 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65691ffd-15b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:92:66:ce:80:dd:2b:81:f5:3f:1a:7b:8c:
                    81:1a:f3:e5:1a:ea:05:f1:5e:49:46:4a:bf:de:05:
                    6c:73:f0:56:44:4f:6a:da:d8:0f:40:1a:17:54:6d:
                    b7:16:d0:d5:29:43:18:53:1e:e4:ec:d0:c2:e1:b5:
                    b0:23:98:76:83:2d:70:24:a8:76:b0:75:e8:ed:b5:
                    4d:28:1b:1b:29:34:50:55:a0:7b:de:91:a0:09:f0:
                    9d:06:2d:22:7d:d7:17:39:30:c6:c2:59:4f:bf:1e:
                    bf:d5:54:e9:e2:fc:91:b5:80:34:d2:bd:97:85:a7:
                    11:21:2c:60:a7:d6:30:4d:d9:b7:c0:91:d1:d5:2c:
                    0a:d4:69:4b:a0:72:ba:3e:43:cd:fe:25:65:a1:fb:
                    5b:d7:86:20:83:4e:ca:bc:84:49:99:f4:14:4d:f7:
                    03:79:1b:4b:d2:81:e6:72:27:a3:23:fa:ad:d6:24:
                    16:4a:52:30:46:75:bd:f2:c1:dd:22:68:2a:f4:cb:
                    81:78:30:7e:ac:91:dc:4c:39:f0:84:9a:f0:2c:aa:
                    69:39:b6:d8:f5:7d:fd:67:47:d9:72:59:de:6c:cd:
                    86:c5:c5:00:64:64:96:f4:9c:b1:4d:8d:36:68:52:
                    8f:e0:b0:e1:c7:01:92:4e:73:d2:3a:3a:bb:39:e3:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:21:87:0B:25:F1:75:B5:F1:DB:C4:B7:71:77:A3:C3:26:96:6C
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.81.0-202.133.83.255

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:0c:78:fd:3e:d2:5a:8b:92:c8:4c:c7:47:4f:ec:72:52:
         ae:1e:5a:c0:9e:2c:94:98:1a:4c:cb:eb:34:f1:59:95:e4:f2:
         52:a2:2c:0a:8a:22:20:9a:3e:d2:b3:a5:e9:3e:d0:8f:fd:07:
         1d:12:03:68:c3:dc:0a:d8:41:2a:b1:46:c2:2c:d5:60:cd:07:
         70:59:65:71:91:d3:d0:9a:02:bd:f3:45:f3:02:6b:ea:04:ac:
         e0:e3:2c:b0:ee:ea:9f:0f:b5:e7:30:3d:7a:ed:67:e4:98:21:
         d7:f8:d9:f2:d7:92:d5:8b:9d:77:bb:2f:f0:f6:28:f7:98:76:
         0c:d8:78:81:f2:c2:9a:2b:95:1b:f0:e5:f1:07:de:00:c4:9b:
         80:bc:c2:66:3b:5b:49:a3:31:ca:d0:82:7a:17:b6:a5:75:6c:
         6d:64:96:66:65:21:2c:6e:49:0b:7d:e5:13:00:65:00:95:36:
         c2:87:51:67:3c:90:04:d0:fb:7f:77:1b:ee:d3:21:5f:6b:5b:
         09:47:8d:ab:64:be:4e:f2:4b:7d:08:b3:0a:88:6d:48:37:a1:
         95:fc:dc:a1:9f:d7:a0:91:22:83:b4:5c:c1:19:6d:d6:b4:81:
         15:19:15:7d:e3:10:58:fa:58:2b:67:a0:d5:4a:94:b4:0d:52:
         36:3e:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org