Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
File:                     AC205A92B13011EFB45E6B3BC4F9AE02.roa (raw, json)
Hash identifier:          uKwkZfPxaBZe+NEWyqJ10DRoEbJiI4u5JFaaWffNJlI=
Subject key identifier:   6C:07:61:42:09:6E:9F:F5:31:72:61:67:43:13:A9:63:18:8A:E3:C3
Certificate issuer:       /CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
Certificate serial:       02
Authority key identifier: 35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
Signing time:             Tue 03 Dec 2024 04:40:08 +0000
ROA not before:           Tue 03 Dec 2024 04:40:07 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152851
IP address blocks:        202.58.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl
                          rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912929D/serialNumber=35841AE33DF6931201406798AE64FCC087F5A1E5
        Validity
            Not Before: Dec  3 04:40:07 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=674e8ba7-5c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:ab:f7:e3:d4:38:55:20:42:09:88:18:5c:
                    16:00:7b:55:2c:af:53:cc:79:64:d7:ad:c3:e8:f1:
                    55:85:b0:a9:2a:dc:c5:45:4d:1c:9f:01:76:33:62:
                    b5:25:1e:6e:ce:ee:4b:c5:8f:a2:9c:34:e3:cf:24:
                    91:24:33:dc:06:4d:63:19:49:80:b5:69:23:2f:0c:
                    75:3b:06:54:e0:bf:40:a2:d3:af:f4:a1:d3:65:b2:
                    09:d1:59:1e:17:2a:0a:05:78:f0:65:ff:72:aa:41:
                    46:2f:d9:cb:95:97:65:62:ff:3b:4a:bf:42:f9:27:
                    c2:fe:24:6b:01:d4:1b:e7:90:ad:14:94:00:ed:bc:
                    5b:31:bb:66:c3:a9:ec:a4:1d:24:fb:aa:65:6c:c8:
                    af:68:d3:85:ad:ec:2e:c2:00:5e:81:9b:e8:17:9d:
                    43:4a:6c:f3:da:15:2c:22:2d:4e:67:89:df:a8:a8:
                    1d:9f:f1:25:53:21:8b:7a:20:6a:1c:a5:df:ee:ee:
                    77:bc:85:05:6b:09:43:3a:6e:f4:20:f2:22:1f:13:
                    6a:3c:1d:61:7b:62:e7:2e:d6:c3:75:e4:9d:52:c9:
                    a3:bb:75:81:63:c1:0f:07:49:ae:78:ac:ff:0c:68:
                    67:75:35:1a:d5:a7:da:d1:22:6e:73:d1:01:6d:93:
                    35:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:61:42:09:6E:9F:F5:31:72:61:67:43:13:A9:63:18:8A:E3:C3
            X509v3 Authority Key Identifier:
                keyid:35:84:1A:E3:3D:F6:93:12:01:40:67:98:AE:64:FC:C0:87:F5:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/NYQa4z32kxIBQGeYrmT8wIf1oeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYQa4z32kxIBQGeYrmT8wIf1oeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912929D/6E050EF6B13011EFAA0BB53AC4F9AE02/AC205A92B13011EFB45E6B3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:e4:69:24:17:0a:c8:d7:88:fd:fb:44:69:93:f1:fc:c6:
         99:ae:b9:1f:50:48:2d:0f:ee:96:35:f0:2b:0e:c8:3a:4a:74:
         8f:ae:a6:a7:3b:ca:1e:ef:a0:db:58:10:2c:a5:fe:4d:7d:dc:
         70:5e:35:b4:e2:27:e2:28:55:6c:8c:8d:67:9a:22:da:f2:06:
         6e:42:51:29:6a:ad:b8:23:b0:63:f1:73:88:c1:8d:94:b1:61:
         b6:8e:c4:8a:99:e4:73:16:61:fc:77:3b:d2:4a:4a:35:1b:98:
         21:26:e1:b8:f0:b4:1f:28:0f:a2:4a:9f:b6:bd:ed:3c:fd:58:
         cd:6e:30:a4:f3:28:b9:5c:46:2b:e6:1d:cb:b6:41:31:51:17:
         33:0d:16:e7:14:04:98:29:de:95:1d:9b:19:ab:39:f5:6c:e6:
         99:8f:54:0e:b5:69:b8:3a:69:80:d7:96:3e:25:d2:89:f3:39:
         86:b0:cb:68:77:7e:70:58:dc:2e:37:d7:2a:b1:5b:79:3a:ad:
         cb:d3:a8:ff:fe:dd:b4:68:39:26:aa:54:37:e1:68:79:2e:81:
         ec:ab:58:13:6d:a7:fc:04:06:bf:2f:90:d8:e5:4a:8d:8a:13:
         19:58:b0:e9:ff:55:c2:a8:c3:ae:d7:1f:a7:6d:cc:99:f1:ad:
         34:80:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 08:43:07 2024 by rpki-client on console-fra.rpki-client.org