Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
File:                     931C5524175011EB8585CA60C4F9AE02.roa (raw, json)
Hash identifier:          MDoU/JuIBzWyeNV1mWU+1cfbqy0SljZrseShx5ONDms=
Subject key identifier:   5D:EB:8D:00:CA:5F:97:4B:09:CE:9F:ED:D0:65:89:4D:47:4E:2F:E6
Certificate issuer:       /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial:       3425
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
Signing time:             Thu 02 May 2024 15:30:58 +0000
ROA not before:           Thu 02 May 2024 15:30:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     18345
IP address blocks:        202.60.80.0/24 maxlen: 24
                          202.60.81.0/24 maxlen: 24
                          202.60.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
                          rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13349 (0x3425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
        Validity
            Not Before: May  2 15:30:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6633b1b2-a409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:79:12:9d:30:82:3f:76:2d:a6:2b:6a:fe:
                    ae:e9:2d:1e:30:39:a1:8d:17:4a:ca:5c:19:09:ba:
                    88:77:10:90:4c:bf:7f:8d:fe:71:b5:a4:23:9f:f5:
                    d9:be:03:19:8e:d8:e7:61:38:91:28:a6:50:ac:2f:
                    d0:4c:c0:2d:92:1a:fd:12:09:be:2b:49:f1:cd:25:
                    c1:5f:b3:53:af:22:94:69:bf:ef:f0:0c:3f:35:21:
                    67:e0:26:0b:f0:ae:59:19:d8:33:32:0a:64:4c:e9:
                    18:5f:10:77:73:b6:33:15:65:db:ac:d0:2b:65:22:
                    4a:6d:41:63:51:f9:71:97:51:4a:77:25:52:a6:db:
                    1a:de:70:85:7d:43:bf:21:50:7f:49:8d:df:1b:12:
                    db:e3:5d:87:95:40:d2:3d:38:e3:0d:73:a6:ab:df:
                    26:11:00:dc:14:5e:48:c8:90:2f:f7:d8:ac:38:63:
                    5e:37:5e:c1:c2:d8:81:61:1e:7c:a0:9d:a8:17:a1:
                    a0:ac:82:2a:2f:11:98:1d:f1:0e:9d:6f:b7:02:a2:
                    10:ae:a3:56:77:cc:e3:ec:bd:61:d9:b8:87:20:de:
                    27:29:46:73:3c:cf:7a:f4:50:76:b7:d0:3a:99:ba:
                    ea:5d:6d:e4:06:5b:9f:4a:ce:8a:a1:ef:bb:c3:60:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:8D:00:CA:5F:97:4B:09:CE:9F:ED:D0:65:89:4D:47:4E:2F:E6
            X509v3 Authority Key Identifier:
                keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/931C5524175011EB8585CA60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.60.80.0-202.60.82.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:6d:0c:ca:06:3b:4a:e7:2c:07:95:ac:b9:78:b9:1f:35:
         74:0b:c2:d9:42:52:bc:0c:ce:72:f1:6d:aa:1c:ed:a9:7e:08:
         6f:b3:12:a4:73:d4:d8:58:ed:24:86:72:2a:71:2d:3f:87:1f:
         67:63:ec:5f:79:7f:65:89:2f:0e:37:dc:28:9c:20:c0:a0:67:
         e3:69:4b:c0:69:c3:47:6e:f5:9b:0b:fe:5f:90:49:e5:e1:02:
         9e:88:05:d3:20:f8:a6:f1:10:15:16:ab:70:7d:0b:82:59:ba:
         1b:49:9f:2b:8d:16:83:42:b3:98:39:44:d3:22:a3:0c:f3:fe:
         e3:ee:43:a2:57:c7:d1:45:65:30:65:2b:b4:18:77:84:22:f3:
         4b:2e:37:5b:d3:ff:29:95:31:b8:e1:83:09:14:4f:c6:ee:b5:
         5c:eb:98:8d:f4:be:a2:f6:03:07:d4:47:be:bb:4c:fc:c3:84:
         d9:e9:af:a3:63:53:59:6a:93:b0:ba:53:67:69:64:73:92:f6:
         18:cf:6c:c6:c5:07:40:b9:28:ad:b6:90:3e:fd:c2:43:e2:e5:
         fe:d9:48:e0:75:0e:c7:41:a2:57:b8:f6:63:19:fc:b9:2e:03:
         59:53:53:95:79:f9:ec:f6:f8:34:22:41:1d:e6:67:e7:d2:b4:
         52:df:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:04 2024 by rpki-client on console-ams.rpki-client.org