Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa
File:                     57CA5DB02E2811EBB76B1E75C4F9AE02.roa (raw, json)
Hash identifier:          oHHg7bVGlcuVHigapoywJfWF7AaNUZbxOeF71G2cdao=
Subject key identifier:   98:DA:12:4B:96:53:B9:FD:6E:F0:3D:DB:5D:C7:23:42:12:11:14:FB
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       3426
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa
Signing time:             Thu 02 May 2024 15:30:59 +0000
ROA not before:           Thu 02 May 2024 15:30:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     23670
IP address blocks:        202.51.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350 (0x3426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: May  2 15:30:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6633b1b3-747b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:61:53:8c:c6:6f:2d:77:ed:b3:42:77:65:3a:
                    1f:cb:89:b0:63:57:cd:af:29:49:29:cf:2c:80:63:
                    90:b9:76:4a:9a:ae:97:71:eb:47:5f:ba:1c:73:5a:
                    73:e8:bd:9c:c2:11:01:6a:a7:e1:d1:6a:58:65:96:
                    c3:e5:96:b2:43:16:92:b7:56:a6:cc:34:e4:4a:47:
                    e8:84:73:e5:d0:d2:7d:f7:de:9a:e2:45:7b:28:84:
                    d5:e2:7c:c4:94:3a:a4:fa:01:04:ea:38:00:1e:3c:
                    49:55:89:7a:c9:e1:09:a2:dc:02:f7:00:d1:9c:ee:
                    3c:a5:18:54:6d:cb:b1:b8:08:97:d2:3f:7f:0a:ff:
                    bf:f2:ad:f9:4c:28:ab:69:4e:73:8e:45:05:45:d4:
                    cf:7a:09:d8:17:5c:6f:ea:1a:6e:aa:d6:34:ce:32:
                    46:4b:d6:f9:da:31:f6:09:55:5a:c3:16:e8:fe:b0:
                    77:2f:48:c5:1c:f5:51:99:87:b5:52:5b:42:c7:d5:
                    1d:b7:30:50:f7:46:c2:e6:92:db:6b:be:ae:cf:98:
                    65:5c:2b:08:a2:24:db:94:37:2a:92:8f:4f:22:78:
                    70:05:e6:ee:0f:33:f7:19:44:03:af:ee:1d:bd:c6:
                    fd:1e:11:e5:55:59:e0:ff:a2:37:6f:d8:4c:29:84:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:12:4B:96:53:B9:FD:6E:F0:3D:DB:5D:C7:23:42:12:11:14:FB
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/57CA5DB02E2811EBB76B1E75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:c3:c5:f1:a1:de:18:30:62:41:1f:c6:1d:43:8c:d3:2c:
         45:bc:86:11:42:ec:31:17:2f:05:91:a7:87:d3:be:7f:3b:bc:
         fa:8d:09:38:b0:a4:6e:43:2e:6f:47:4c:b3:41:00:1a:f9:78:
         40:0d:0a:3e:a7:e7:88:b3:89:8a:1e:05:e3:ca:b3:0c:31:64:
         ae:93:db:76:80:7c:f7:ec:53:95:e5:fc:51:88:a5:c6:83:b9:
         bb:45:9e:c5:43:0e:2f:67:f5:00:05:ea:e7:ae:d4:6d:22:61:
         c7:f7:7b:e7:cc:2b:4a:b2:8f:0b:36:60:63:06:81:60:ce:46:
         cd:38:4e:2f:21:91:41:f2:4d:9b:e2:1f:46:fe:97:49:b7:df:
         a5:d3:24:d4:39:8c:d7:a7:b5:19:a2:27:12:fb:c5:3a:48:77:
         d8:9c:13:2f:4f:55:e6:13:a9:37:a9:81:6b:17:cc:65:3b:0f:
         d1:9a:5d:72:3d:67:3f:09:1a:7b:d8:8b:a8:f5:24:51:ff:17:
         ff:53:83:4b:1c:e0:14:82:85:20:38:62:15:da:2e:59:9e:47:
         8b:95:92:b1:9a:2b:e6:bd:43:97:d3:37:0e:d7:70:27:92:df:
         82:10:c5:52:f3:2a:2e:20:6c:e2:73:7e:a5:b8:91:fb:b9:4b:
         bc:4f:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:38 2024 by rpki-client on console-fra.rpki-client.org