Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C15B72ACE04A11ECB5330E65C4F9AE02.roa
File:                     C15B72ACE04A11ECB5330E65C4F9AE02.roa (raw, json)
Hash identifier:          TQIJICGxg8oF5nBkzWW1FVPL19vSdoprI5OXAGzsCUc=
Subject key identifier:   83:18:56:43:0B:65:26:A2:11:CA:29:C0:A6:85:8C:99:23:A1:E2:CD
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0504
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C15B72ACE04A11ECB5330E65C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 02:33:32 +0000
ROA not before:           Wed 31 Jul 2024 02:33:32 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     17565
IP address blocks:        203.146.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Jul 31 02:33:32 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9a27b-b172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:d2:fd:26:80:5c:f7:43:61:04:61:88:b7:
                    fe:1a:f5:e1:01:27:e7:33:46:83:e8:62:d6:ab:f1:
                    fc:84:3d:67:16:0a:24:7f:5a:92:51:49:7c:20:5f:
                    56:92:cb:67:2f:04:65:32:c6:2c:f1:3b:df:a0:0d:
                    51:fa:da:e3:4b:d1:da:85:4d:7d:c9:88:36:85:2e:
                    71:d3:68:a5:3d:56:89:d4:b4:91:f3:f6:b4:6c:ff:
                    5b:f2:a8:ee:67:01:f6:3c:0b:f9:04:5a:0a:5b:d7:
                    b0:af:c7:a4:86:e9:0f:54:7e:c9:c5:88:01:fe:33:
                    18:db:6b:41:dc:f2:ba:13:6f:39:e5:90:fc:c4:38:
                    4b:e8:9e:4a:0e:0a:f7:a3:72:40:54:a0:02:bd:2e:
                    44:82:78:fa:74:89:47:5f:18:d5:e7:67:3a:b3:74:
                    94:9b:ac:91:97:65:e7:dc:e2:7a:7d:2d:3a:ac:5f:
                    a4:b6:7a:2e:22:a7:e1:95:0a:1a:51:91:fa:63:9d:
                    02:20:0e:9d:1d:83:c8:d0:00:4c:e0:a9:30:4e:bd:
                    7f:93:e7:b5:99:a5:d5:d4:f3:5c:d7:d8:db:45:7d:
                    3e:97:d3:6b:38:29:0b:80:d9:9f:45:33:c8:db:f9:
                    e6:03:a1:0a:5a:fb:f5:88:c4:95:67:cf:e4:ef:1a:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:56:43:0B:65:26:A2:11:CA:29:C0:A6:85:8C:99:23:A1:E2:CD
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/C15B72ACE04A11ECB5330E65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.146.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:11:92:51:2e:0f:01:20:55:19:53:a5:73:09:4f:73:65:
         1f:24:85:f8:89:3d:73:47:a5:83:14:c7:24:22:8a:77:33:2a:
         2f:5b:8b:65:54:4f:42:5a:da:8d:fa:f2:ff:ec:e8:83:7a:24:
         36:f2:02:30:ff:aa:5d:ca:2d:f3:1a:35:6e:16:27:fa:68:25:
         4b:31:18:2e:87:36:ac:9b:b7:94:82:8c:9e:24:74:59:b8:77:
         ae:5f:b4:12:c9:37:46:23:7e:9d:a0:53:ea:32:c5:80:a1:c4:
         6a:56:bb:bb:38:dc:bc:e2:87:0d:f2:17:6e:4e:61:b3:6c:7f:
         60:3d:00:1b:18:b3:a7:71:d0:77:8b:48:e4:8c:4c:1f:9b:8e:
         47:6d:bc:29:3d:36:1a:3b:8b:d2:90:87:0d:83:c6:c7:8a:e3:
         78:f3:78:ea:ce:69:ff:40:f4:f2:ef:59:26:dd:18:91:9d:77:
         60:81:68:cf:6b:26:5c:b4:95:8f:fd:c1:74:6e:cd:ce:eb:b1:
         69:cb:e0:01:2c:f1:de:4c:e9:e7:75:4d:1e:ae:35:6b:a2:a4:
         8b:f8:83:12:9b:3c:ac:c0:8d:ea:b6:c5:d3:68:6e:28:ce:69:
         d2:17:f2:83:e5:97:aa:9b:00:86:02:45:e0:2a:bd:37:33:2f:
         3a:5e:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org