Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
File:                     2DDD8D12E0D111ECAF88A30DC4F9AE02.roa (raw, json)
Hash identifier:          jMamHMwl5O2mD0sy9W6/2gLIIiZOoIOEXzZzUa4SpAk=
Subject key identifier:   81:37:AB:74:BA:FE:E2:5C:50:B3:F1:01:E7:E8:FC:5E:C6:22:BE:76
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0389
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
Signing time:             Thu 27 Jul 2023 02:04:11 +0000
ROA not before:           Thu 27 Jul 2023 02:04:11 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38815
IP address blocks:        202.183.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 27 02:04:11 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1d09b-f1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:66:de:f4:2d:bc:e5:95:ef:95:7c:0d:b1:
                    17:a2:8e:15:c6:02:d2:0d:d3:13:06:7d:b6:bc:69:
                    27:87:52:cc:dd:a4:4d:3c:c4:15:05:d3:a1:4b:8d:
                    15:34:bd:3a:b0:0d:31:52:64:c3:2d:ab:48:ee:74:
                    60:c7:5c:fa:24:48:62:24:96:5a:f2:4b:ec:67:33:
                    3c:42:22:8f:7e:8b:32:e6:00:98:9d:23:04:39:41:
                    d1:79:bd:37:b5:bc:3f:8c:d5:ee:bd:9e:e6:46:e1:
                    b6:a4:d7:a2:cc:9b:5f:72:e4:da:0d:b7:35:fc:d1:
                    cb:57:7e:a5:69:0c:c9:7a:23:c5:39:a4:0d:c9:f1:
                    df:76:93:ba:2f:5c:23:73:c9:b1:73:be:cb:96:25:
                    69:81:ba:af:a4:bd:a2:61:c4:c0:65:6b:da:47:d2:
                    e7:ca:da:e1:6c:1d:24:b2:22:23:70:ed:76:94:2c:
                    61:68:a1:b2:79:c5:6d:8c:81:22:20:a1:b6:a6:4e:
                    de:fb:49:35:6d:62:f0:ed:d2:bf:a6:48:84:c0:8b:
                    93:3e:e6:3e:e7:c9:d9:e6:27:c2:f7:2b:0a:54:75:
                    33:d0:d6:86:b7:51:35:d8:16:bd:7d:a9:79:85:06:
                    1e:a3:89:27:f7:03:a6:77:d2:fa:2f:f6:7e:23:e9:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:AB:74:BA:FE:E2:5C:50:B3:F1:01:E7:E8:FC:5E:C6:22:BE:76
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:4a:2e:41:36:56:db:7e:66:74:98:ba:6e:9d:e6:bf:9c:
         b7:68:29:d7:65:d3:e4:6a:e3:be:00:62:a3:ed:39:6d:c9:bc:
         ea:e6:ff:23:c7:f1:dc:34:83:96:ac:47:be:fd:c4:ab:90:c0:
         bd:a1:66:fc:cb:99:b9:8f:5a:71:4c:31:96:30:35:24:f3:7a:
         34:7d:dc:8f:95:f5:aa:8d:25:dd:0f:bd:d4:16:45:1b:36:7e:
         e5:69:d3:8d:b9:a8:e7:9d:29:43:0b:7b:44:b9:08:53:b1:3b:
         4f:52:2e:a1:b9:ad:f2:6d:db:04:9e:46:d6:47:3a:16:ff:7d:
         75:7f:c3:ca:1e:d0:52:4f:fb:7a:9e:9c:01:fe:0c:1f:87:46:
         c7:e8:61:ec:79:a4:42:9e:2a:c6:12:88:90:7a:a3:02:f1:1a:
         ff:b6:ae:ec:9f:3c:3e:52:d4:b3:04:24:8f:7d:c5:46:0b:84:
         a4:7a:df:a3:80:cc:56:0a:9f:50:03:ac:24:23:4d:7f:70:0d:
         b6:a4:a7:c6:0c:ff:25:ef:c7:34:6c:16:88:eb:47:5f:51:3a:
         ed:42:07:2f:81:9e:bd:76:1b:e8:91:a3:08:19:a4:e4:0e:d6:
         41:85:8b:25:3e:c4:a3:d9:68:d5:0d:66:fa:eb:ce:f1:40:d8:
         06:00:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 05:03:45 2024 by rpki-client on console-ams.rpki-client.org