Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6A9394ADEA211ED88586378C4F9AE02.roa
File:                     C6A9394ADEA211ED88586378C4F9AE02.roa (raw, json)
Hash identifier:          VDYRnkXPM98d5RA7/NO91xO7Z9K49iVQHvJBdyHXoqM=
Subject key identifier:   E4:53:2E:D6:C2:5F:F8:73:F4:36:60:45:6E:E8:FB:CD:8A:DB:DA:33
Certificate issuer:       /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
Certificate serial:       33F8
Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6A9394ADEA211ED88586378C4F9AE02.roa
Signing time:             Tue 30 Jan 2024 14:50:48 +0000
ROA not before:           Tue 30 Jan 2024 14:50:48 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     32787
IP address blocks:        202.153.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl
                          rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13304 (0x33f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D
        Validity
            Not Before: Jan 30 14:50:48 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b90cc8-1a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:52:49:0b:a5:1b:a1:5a:40:c9:90:43:ff:
                    04:d8:13:78:34:f1:ce:06:9e:3a:d1:31:dc:3c:f5:
                    6f:50:0a:fb:fb:8c:fd:db:16:4c:fa:19:99:2b:f4:
                    3b:77:7f:13:dc:19:8d:35:19:f0:f2:fa:7c:7c:57:
                    25:d1:0c:c1:d0:6e:c8:37:34:1a:7a:fa:e5:b6:2a:
                    c8:b6:90:28:cd:fe:52:9b:2f:1c:d9:76:35:18:8d:
                    44:0d:e7:37:c5:c9:c6:70:33:05:5d:b5:a8:b3:54:
                    ac:dd:3e:44:2a:8f:33:6b:55:17:74:38:5d:11:7f:
                    a9:6a:65:cc:2f:a8:73:33:b9:66:85:94:22:14:06:
                    bf:3c:48:7e:a6:d4:97:70:8d:54:7a:54:ec:f2:cd:
                    2a:c4:0d:a7:4c:66:21:bd:09:c3:f6:b1:b9:66:9d:
                    a0:c1:0a:98:ba:b0:2d:05:1c:33:ae:ff:ed:5b:30:
                    98:55:9d:9f:49:42:3f:f3:2d:fc:ff:43:a5:b5:e4:
                    7b:41:59:e6:55:22:28:cf:f5:4c:5e:86:e4:a7:4e:
                    b7:f4:18:0d:10:9a:85:b6:f8:fe:93:cb:34:b2:6f:
                    ba:d7:73:50:07:24:62:a5:c1:f2:7e:67:9c:01:e0:
                    70:69:83:32:68:1e:78:df:d5:03:f3:32:41:1f:11:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:53:2E:D6:C2:5F:F8:73:F4:36:60:45:6E:E8:FB:CD:8A:DB:DA:33
            X509v3 Authority Key Identifier:
                keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/C6A9394ADEA211ED88586378C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.153.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:8a:ad:79:ef:7e:f0:20:f8:b7:e7:97:f9:7b:4b:23:da:
         68:17:db:82:e6:cc:fe:19:7a:33:20:95:d0:7b:0d:f0:10:f1:
         be:70:5a:76:1f:f1:4b:02:ff:e5:dc:55:2b:96:ce:00:ce:c9:
         7c:62:eb:2f:98:09:6a:43:19:c7:a6:03:25:95:57:1a:db:49:
         73:05:93:2f:4d:bc:ce:51:3e:2f:be:2b:65:0f:f4:da:d1:45:
         52:43:c7:3a:34:e3:26:6e:ff:06:9c:6f:92:e5:90:f6:51:9a:
         6f:d3:79:38:3c:a1:10:53:63:e0:fb:e8:71:79:9f:f2:cf:d9:
         86:94:80:33:3e:e4:51:7d:b8:27:c0:a9:fd:a8:fc:bd:e5:83:
         5b:d3:37:a9:2b:8a:15:52:75:72:f2:79:1c:09:69:b7:3d:bb:
         6a:3e:99:ec:0b:c3:8c:30:8f:0d:0a:34:ac:fa:de:0a:cd:06:
         4b:66:bd:62:0f:62:89:74:64:e7:26:12:c5:92:35:8e:50:f7:
         0c:74:06:64:00:ad:4f:11:e0:cb:f4:72:60:57:bf:a9:70:07:
         00:23:e5:6b:af:06:36:e0:bc:62:b6:d0:0e:b3:3a:54:d9:0d:
         c5:13:1a:24:8f:53:90:c6:d4:6f:1f:6e:31:b8:5f:a6:d1:ad:
         ab:96:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:21:28 2024 by rpki-client on console-ams.rpki-client.org