Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
File:                     518E90D088BC11EB8D00B631C4F9AE02.roa (raw, json)
Hash identifier:          e01D6c8b37ASIRBMGLh79jn3/QDzrX5+OcEj5mrgTsk=
Subject key identifier:   51:45:E9:F8:BA:3D:B1:70:89:0E:C5:65:16:80:DF:CC:76:34:33:85
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       065F
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
Signing time:             Mon 16 Oct 2023 22:51:12 +0000
ROA not before:           Mon 16 Oct 2023 22:51:12 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     141695
IP address blocks:        202.0.156.0/24 maxlen: 24
                          202.0.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 23:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Oct 16 22:51:12 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652dbe60-657f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:94:ff:9c:9c:8d:6e:90:79:b2:ce:35:48:
                    06:46:72:6a:47:4c:a3:98:d4:32:99:7c:4d:86:0d:
                    22:15:1f:e8:1a:f0:c2:72:0f:2b:5a:c1:5a:0b:a3:
                    5d:1d:a1:c9:8a:48:02:dc:97:fd:0b:f1:e6:04:66:
                    0f:f3:48:5f:95:f7:41:c2:16:a9:1e:6a:30:3e:b4:
                    3e:1d:f3:bb:e0:5f:77:2e:0d:1b:19:3c:ff:13:1a:
                    7b:48:24:79:bd:5c:6e:52:be:77:f3:58:86:f8:96:
                    e6:f9:ef:11:c0:f2:ee:7e:2a:ed:fb:6f:80:cc:30:
                    49:0a:ce:93:ec:56:3d:68:79:12:cf:11:4e:c0:d5:
                    e7:5f:1a:5f:68:77:ad:94:fe:e4:d1:69:b6:de:ad:
                    9a:23:d2:49:15:03:f5:d1:20:91:28:ed:5d:7e:5f:
                    72:44:0f:de:5a:d3:2a:ec:dd:2c:b8:e9:f4:d1:f5:
                    85:a7:39:8f:c7:81:1c:85:c6:10:aa:f3:ea:87:3d:
                    00:86:2c:03:6b:90:82:7c:58:51:55:e4:1e:6f:76:
                    ad:b2:c6:29:69:c7:1b:eb:e8:ab:ce:74:25:9e:35:
                    84:2a:54:1a:c2:52:0c:79:b4:2c:28:00:2e:2d:21:
                    fe:1d:e9:e2:c4:65:be:c6:54:9e:73:be:6a:80:b2:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:E9:F8:BA:3D:B1:70:89:0E:C5:65:16:80:DF:CC:76:34:33:85
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.156.0/24
                  202.0.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:6e:f0:1a:17:b9:3e:a3:67:ec:09:e4:b4:fe:2d:06:96:b3:
         86:10:1e:fd:d8:96:6a:00:f5:9e:f5:08:ed:a3:bf:fd:d0:f6:
         80:ec:20:2c:96:3d:c0:97:9f:09:90:5b:b5:d7:1a:be:f2:30:
         93:a1:d3:af:e0:6f:bd:71:fa:b1:64:3c:df:46:5f:2b:6c:44:
         e7:00:79:8f:60:b4:76:b8:39:ea:8a:06:d1:94:4d:ba:09:7c:
         ce:d2:1a:81:41:38:42:19:70:15:d9:56:f8:da:0b:bf:ea:b1:
         74:5a:af:1a:84:ee:3c:66:ab:76:fb:7f:ac:21:ef:1f:5a:6c:
         a4:93:59:b5:7c:70:3c:64:a5:03:c7:36:80:59:62:c3:c2:1c:
         16:ec:eb:84:d2:64:a0:16:91:71:4d:63:2a:00:cd:8d:57:26:
         54:a0:e5:fc:e0:0f:5d:46:c8:51:f0:b4:01:74:bb:e1:f7:ee:
         db:6f:95:0d:d2:dd:85:51:71:d2:a0:57:13:07:54:9a:f8:46:
         95:7b:7f:38:f5:ed:31:ef:f0:be:8a:83:88:94:f6:d8:1b:42:
         18:68:fe:d0:70:b2:1a:42:17:1a:c1:3a:fa:37:8c:62:dd:32:
         4b:c7:af:da:2e:e1:a0:c2:ac:b3:1b:4f:8f:b6:db:0c:d3:e4:
         aa:7c:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:19:43 2024 by rpki-client on console-ams.rpki-client.org