Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
File:                     24FDC2446F3211EDA3DCF033C4F9AE02.roa (raw, json)
Hash identifier:          cjNUYQjWGv/e65WJQWAvWr4YkFxgRoVsK4Q0fFl+Aec=
Subject key identifier:   18:82:02:98:B5:CE:9D:18:79:04:65:97:98:B4:DB:A0:3B:D7:C9:F8
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       76
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
Signing time:             Sun 09 Jul 2023 03:43:00 +0000
ROA not before:           Sun 09 Jul 2023 03:43:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        203.55.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 05:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Jul  9 03:43:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64aa2cc3-efdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:68:d8:10:80:d8:2e:57:f0:bf:31:65:c8:
                    d8:32:9c:0a:24:49:4f:89:25:5a:fb:75:de:69:71:
                    19:7b:e2:77:36:79:c9:12:9c:46:28:ec:d1:60:e4:
                    58:ab:13:d9:1d:7f:b4:e9:11:67:57:0a:9c:3c:27:
                    ce:39:cf:5b:5e:eb:59:9d:af:3d:62:3b:d4:df:35:
                    d0:41:2c:f6:95:1a:1d:1e:be:f3:cb:a7:1b:64:34:
                    e4:4b:cc:89:2b:a2:89:71:da:27:3a:9d:51:27:14:
                    a1:de:87:03:1f:64:dc:72:ec:fa:56:8c:50:28:c9:
                    37:c6:ee:b8:d2:13:91:df:da:bd:4b:ce:7f:20:eb:
                    e1:e2:c3:e1:20:4c:0d:1e:77:27:42:13:0b:19:52:
                    a1:32:3e:83:6f:1f:6c:f6:98:ec:92:4d:e2:ad:cf:
                    29:a0:7a:71:eb:77:d5:3b:1f:74:b2:28:cc:1d:ef:
                    85:46:39:69:d4:2f:04:08:07:3a:cd:8d:5a:0f:dc:
                    2a:27:53:a9:d4:2e:93:c1:8a:71:74:f4:ac:28:69:
                    48:eb:3b:02:a1:9f:af:e5:d0:62:2e:e8:c4:22:82:
                    d1:ef:d1:29:fb:5d:c5:0d:68:11:d4:e9:fd:33:08:
                    b3:28:f4:3b:4d:fb:fd:b2:f4:05:86:8e:a7:5b:91:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:82:02:98:B5:CE:9D:18:79:04:65:97:98:B4:DB:A0:3B:D7:C9:F8
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/24FDC2446F3211EDA3DCF033C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.55.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:c2:ff:39:0a:e6:d8:91:d7:d6:28:80:e3:ff:da:b9:53:
         8c:ef:67:38:1c:2a:ea:c6:d8:32:b7:d4:de:33:0f:c2:f8:bf:
         f4:e5:d1:a0:54:c5:4d:fd:d7:42:d9:bd:74:41:51:0e:22:2a:
         82:e2:6c:cc:e2:93:a0:af:a8:b1:cf:37:08:23:45:3c:30:29:
         53:3c:33:be:f0:c1:ec:56:16:79:ef:67:1b:43:2c:18:79:07:
         03:6e:a4:fd:92:f0:49:74:02:50:8c:7f:7e:b7:7a:40:da:1e:
         59:a6:b3:cb:b7:0d:79:8e:c9:29:2b:84:d4:8f:09:99:c4:62:
         6c:ef:e7:3b:9f:04:d8:de:d7:7b:2a:ab:4c:64:76:6d:f5:b9:
         67:2f:6e:12:e6:b5:44:b2:ed:6b:9b:b4:c3:bd:cc:d8:95:6b:
         3f:8a:ba:79:98:83:e5:ab:cd:88:1f:78:36:a6:92:4a:7a:52:
         08:56:99:79:8e:8b:80:bf:8f:ec:4f:cc:0e:8d:a2:92:16:b5:
         f7:31:90:e9:ed:d1:66:ab:46:85:68:08:3b:ab:d9:be:85:8d:
         77:81:06:85:fa:ee:09:72:3c:34:1c:09:39:27:62:1d:08:c1:
         6e:95:39:a7:76:ae:bf:b5:70:88:cd:59:d9:32:22:ce:3f:1a:
         22:6e:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:16:34 2024 by rpki-client on console-ams.rpki-client.org