Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
File:                     900E2272349F11EDA1460419C4F9AE02.roa (raw, json)
Hash identifier:          HGunzzYv3iFdylbWWDt7mDl9oSSW1dEW1MLMdnMxAEQ=
Subject key identifier:   1D:08:F5:23:BE:A6:42:AA:CC:11:01:0D:EF:E2:79:6D:7B:7F:26:FA
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       07C0
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
Signing time:             Wed 20 Sep 2023 21:19:19 +0000
ROA not before:           Wed 20 Sep 2023 21:19:19 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     209242
IP address blocks:        202.82.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Sep 20 21:19:19 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=650b61d6-bae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:9f:34:8f:89:84:28:c0:da:d9:a0:b9:da:
                    c9:6e:97:fc:7d:7b:41:30:70:97:66:ca:58:8b:bd:
                    ee:e4:ef:b4:8c:64:0b:7b:6a:63:59:9d:c0:c8:ea:
                    cf:1b:c9:2f:d3:e4:92:ef:36:b1:4d:07:1a:02:5c:
                    b4:1c:dc:24:4f:ad:8f:dc:06:5b:69:98:ab:28:10:
                    84:52:5a:66:1a:8a:cc:9b:14:1f:25:5f:3a:aa:3f:
                    44:3b:c0:8c:d6:e4:87:f8:c4:3f:64:f0:c8:5d:56:
                    37:b6:dc:88:a9:96:9c:49:4a:fc:c8:5c:b1:d4:ec:
                    54:22:1c:4f:96:0d:c6:c6:81:b9:3b:83:0e:66:bb:
                    f4:ff:4f:99:39:ba:92:e8:08:af:56:bc:2a:6d:bd:
                    0b:ee:5e:a0:a6:61:2c:3f:36:11:35:cf:30:59:7f:
                    13:d9:36:6b:cc:99:e8:3d:1d:9a:0c:a8:22:73:91:
                    56:0e:16:22:86:87:d4:9c:ec:a0:0b:d7:87:7d:32:
                    76:a1:6b:d2:8b:a7:32:98:6e:6a:84:41:06:8b:00:
                    59:c5:1f:14:16:4f:ae:d8:77:2d:12:f6:a4:87:4d:
                    ca:ae:8c:c1:b6:19:19:38:d3:9d:4a:bb:fe:eb:7c:
                    22:56:de:2b:fc:71:df:16:14:e7:13:7a:e9:29:dc:
                    4e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:08:F5:23:BE:A6:42:AA:CC:11:01:0D:EF:E2:79:6D:7B:7F:26:FA
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/900E2272349F11EDA1460419C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.82.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:20:8d:9f:6b:d3:c9:a0:b4:85:1a:27:18:c8:d4:cf:d1:99:
         39:9a:c6:1c:ad:fb:4a:ff:b8:a2:12:18:dd:b6:dd:28:3c:e0:
         9d:b1:bd:89:5b:d7:07:10:10:23:7d:e7:f7:39:af:04:88:a4:
         e9:c3:65:a7:58:83:9f:cb:c8:b4:bf:e2:70:a4:fa:02:80:51:
         39:a1:1f:49:f7:4d:46:cd:d5:6a:18:92:ba:d1:c1:d4:bf:63:
         6e:c5:26:97:ad:a2:b4:88:3c:1a:07:52:6f:b7:94:a8:2f:a3:
         a7:70:52:03:93:93:1b:5e:8c:9c:7b:8e:21:51:71:6b:b3:21:
         dc:ea:c5:f9:75:30:31:7b:7c:50:19:3a:bd:c4:30:35:50:49:
         81:22:0d:38:0e:95:fd:4b:08:2a:f3:f9:91:5d:bd:1e:fa:91:
         77:89:03:e5:98:76:b5:e2:99:ef:2a:83:06:53:f8:15:d3:26:
         21:68:60:e0:2c:d6:3b:25:d2:25:78:d4:72:47:ac:67:d4:20:
         fa:5a:8a:61:0f:d5:4b:ab:98:62:c4:64:1c:64:7c:47:fe:ec:
         72:ab:84:d2:d9:20:07:95:d7:82:e3:49:6d:52:7a:27:1a:7a:
         87:46:46:5d:a1:4c:5c:5f:8d:3d:62:b9:92:df:7b:22:1b:fc:
         68:a1:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org