Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa
File:                     06B76AE05AC911EF9DF4275AC4F9AE02.roa (raw, json)
Hash identifier:          p2h51oKfWEnIrxeQceDN5JWcokM71oAHp5D24ePE5rk=
Subject key identifier:   92:BE:F0:9E:ED:7E:FF:6F:7E:DB:04:5B:69:F0:7B:9A:19:8B:0D:36
Certificate issuer:       /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial:       06
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa
Signing time:             Thu 15 Aug 2024 05:41:32 +0000
ROA not before:           Thu 15 Aug 2024 05:41:32 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     9790
IP address blocks:        202.160.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
                          rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 06:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
        Validity
            Not Before: Aug 15 05:41:32 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66bd950c-3411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:f9:b4:83:df:e2:05:9b:7c:2b:80:1a:32:
                    7d:15:36:8e:7c:dc:db:6a:23:2e:af:4e:0c:fa:f8:
                    33:2f:df:99:fd:81:97:55:23:e4:63:76:90:b7:53:
                    aa:dc:d4:72:85:c5:6a:06:bf:23:f0:3e:a2:31:af:
                    02:85:36:91:58:6d:c9:fa:55:b9:05:15:5b:02:e5:
                    f5:4f:ec:89:32:11:56:b2:a8:b0:5a:a0:06:5d:da:
                    99:8a:27:4a:4f:e3:54:a7:79:1d:da:58:88:66:49:
                    17:7b:2b:8a:89:38:65:f1:3a:66:5c:b6:2e:c0:13:
                    56:1d:a1:8a:87:e7:a4:8d:2b:7e:20:0f:78:2d:12:
                    5b:00:2c:54:3e:06:0a:ef:bc:c6:ec:6f:e5:6d:f3:
                    0d:36:90:91:a2:e2:9b:83:ee:58:f4:a2:71:0b:19:
                    d5:f1:8e:f1:7e:a0:17:eb:cc:80:dd:1d:82:a4:db:
                    ef:5d:f2:80:74:1c:e8:d4:7d:2f:c3:e8:cb:49:fe:
                    b8:fb:0d:2e:6e:8c:a4:2b:14:b1:9e:28:af:3f:b9:
                    e4:6c:12:c4:da:96:77:d4:b3:1a:05:10:f8:40:bd:
                    f5:36:7b:20:55:d6:46:31:8c:89:00:e3:2e:d5:b7:
                    d2:36:b3:97:17:f6:3c:fd:e1:1c:83:1c:a2:83:dc:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BE:F0:9E:ED:7E:FF:6F:7E:DB:04:5B:69:F0:7B:9A:19:8B:0D:36
            X509v3 Authority Key Identifier:
                keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:ed:2e:d7:9d:4e:eb:e8:18:38:2f:10:fb:f2:50:61:c9:
         a3:98:4e:ad:99:c8:86:b1:33:5a:02:d9:1b:9c:76:0d:a6:4c:
         fa:5a:5a:a3:45:db:f0:94:f5:78:14:33:cc:f2:65:b1:6e:01:
         38:ca:b3:21:ab:d6:ea:f6:ea:2b:09:19:d8:c9:7f:93:b2:6f:
         74:a5:41:ba:09:07:57:a9:5a:42:cb:ef:97:05:4a:92:d3:14:
         1a:89:f9:e2:0b:ce:34:7e:61:5e:3b:6e:fc:7b:49:53:38:28:
         d5:b7:f0:f5:38:57:e8:3d:91:27:d7:7b:32:d7:e0:b2:94:d5:
         eb:7e:0f:0a:ea:bc:4f:a6:3c:b1:2f:5a:74:58:55:c1:eb:f9:
         10:b9:0a:b2:b0:de:95:0e:3f:bc:36:c4:a1:b9:d2:6c:a5:54:
         28:8f:cb:36:79:51:e7:db:2e:9f:67:1b:bf:42:6f:a2:b2:fc:
         aa:f8:9d:fb:3e:48:08:12:e6:03:fd:f1:b7:6d:e0:41:58:66:
         67:24:90:df:fb:eb:d7:d3:08:8b:a7:e6:48:3a:86:c7:07:7a:
         d0:f5:31:be:1a:9c:d7:b3:81:4d:e5:27:e6:82:4d:e0:a6:93:
         c7:f7:64:2c:fd:4c:4c:c5:62:c6:0e:23:29:fd:f7:81:08:d7:
         90:99:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 07:54:11 2024 by rpki-client on console-ams.rpki-client.org