Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
File:                     424FB76E5B7811EB8259662FC4F9AE02.roa (raw, json)
Hash identifier:          UFfcrNMUKBagvJc36lTMfKYb5f54Y98/HX/xpHNc7WA=
Subject key identifier:   97:81:CA:11:35:8D:67:38:72:5B:67:29:B2:F5:45:8E:62:90:61:2C
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       0660
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
Signing time:             Mon 16 Oct 2023 22:51:13 +0000
ROA not before:           Mon 16 Oct 2023 22:51:13 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     56089
IP address blocks:        202.0.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 20:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Oct 16 22:51:13 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652dbe61-549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:0a:d6:bc:83:22:0c:7a:ba:f6:e6:4c:5a:
                    36:93:bb:aa:e7:dd:fc:e9:6d:0c:d6:02:ba:5e:2a:
                    45:ee:0e:d0:71:0b:dd:d4:72:35:fa:01:b2:b4:f3:
                    e3:55:37:0d:6f:9d:71:e8:74:f8:51:e4:4e:b9:85:
                    60:1c:74:44:ee:c2:88:20:bb:47:59:0c:d7:b3:ea:
                    1f:6c:b3:1c:c2:94:98:25:6f:5c:b3:91:38:6f:49:
                    56:5d:21:7c:7a:78:a8:7a:e2:04:f2:13:3e:bf:a2:
                    85:97:d7:09:d8:65:fe:74:2f:3e:32:d2:3a:ef:44:
                    87:01:91:17:8c:db:14:6b:02:a0:5a:1d:e8:87:2e:
                    34:bc:e6:03:72:80:b1:88:ef:12:a8:79:78:e9:58:
                    bd:42:44:bf:12:6c:2f:5c:35:71:a0:3b:54:fc:26:
                    69:e0:aa:82:2e:5e:b0:ca:bb:6a:da:17:5f:3e:25:
                    b0:57:bb:db:79:5f:a6:31:9f:c0:7b:4d:fc:a0:68:
                    6b:cf:9c:c6:af:b2:94:a8:73:91:ce:bf:b7:0f:b9:
                    69:69:40:3a:e8:aa:de:8f:73:3d:db:43:9f:90:da:
                    ec:52:f3:2a:f1:bb:44:64:40:9a:a0:d4:3f:31:9e:
                    54:c4:1d:88:0c:f3:ed:c6:56:41:9e:c0:ee:13:7d:
                    bf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:CA:11:35:8D:67:38:72:5B:67:29:B2:F5:45:8E:62:90:61:2C
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:4d:66:2c:8d:51:2d:e7:09:c2:76:d7:da:59:b9:d5:f8:08:
         41:ae:98:fa:9c:a7:d3:68:6b:b7:1d:40:4d:e2:0f:11:d9:7c:
         74:a8:a8:f8:0a:53:20:be:c4:ba:57:1c:35:ae:13:f5:30:fb:
         1c:48:07:a4:91:6d:73:fe:51:3e:52:4f:81:5e:b9:70:d0:de:
         d8:df:47:1a:25:12:93:1f:6d:44:b6:1a:f7:a3:33:1f:16:f2:
         d4:0a:26:88:47:d8:12:cd:62:2a:79:a9:11:b0:bf:f4:75:09:
         4f:b5:43:11:7a:0b:bc:50:05:07:1d:47:e9:83:9c:b3:53:d9:
         09:1d:9c:4e:82:fa:ff:ca:fc:84:66:8a:c6:9d:5d:7f:12:c3:
         1c:4b:39:13:e8:a9:fb:e5:61:b7:c8:9f:e1:eb:0b:01:11:af:
         6b:7f:5a:97:47:f8:5c:6f:ce:0a:2c:94:19:39:45:ec:b1:74:
         5e:0d:3c:96:17:09:6d:55:f6:92:65:76:50:49:6d:e7:62:3a:
         b2:44:dd:9b:c9:4e:73:93:c9:7f:59:6f:24:b4:f7:46:2f:6a:
         72:ef:2d:75:05:a6:aa:9a:28:45:64:bd:50:40:9c:07:53:05:
         48:b4:99:3f:5a:fc:ec:ef:cc:24:dc:6f:c8:9d:67:4e:c1:35:
         00:c7:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:40 2024 by rpki-client on console-fra.rpki-client.org