Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
File:                     D2677928DD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier:          YZA05NbdXQqTTqp/56l0zqv1K93ANRNuBAfVzKzDIX8=
Subject key identifier:   88:F7:5E:7D:AE:7D:8D:5C:15:7B:83:AB:B1:03:DF:01:33:F0:7F:46
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       D6
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
Signing time:             Fri 03 May 2024 06:49:38 +0000
ROA not before:           Fri 03 May 2024 06:49:38 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        116.197.148.0/24 maxlen: 24
                          116.197.150.0/24 maxlen: 24
                          116.197.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: May  3 06:49:38 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66348902-aaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:b1:bd:54:21:55:d6:62:63:48:3f:57:2f:
                    69:f7:25:83:ea:d0:d5:cf:d3:bb:80:5d:b1:35:89:
                    62:02:65:ac:84:0c:ba:ea:e7:1a:6b:f1:18:8b:80:
                    32:52:5f:35:8d:c4:76:98:98:35:a9:47:3e:f8:6c:
                    ab:80:58:2b:ba:02:16:76:89:c9:d8:43:a2:1a:88:
                    f7:1a:f1:ee:d6:bc:c4:a6:56:bc:e4:9c:cf:83:4f:
                    f4:c8:49:66:ae:85:6d:86:e6:1a:b4:c7:26:f3:5e:
                    9b:c5:c5:b1:2a:89:1b:7b:94:c7:fb:17:ac:3a:6c:
                    ad:a0:52:16:f7:c9:0d:ab:70:47:c0:95:b5:17:ec:
                    e7:ab:4f:6e:98:ab:76:a3:77:ef:68:b6:d2:fa:d9:
                    ee:65:71:58:19:22:3b:bc:41:b8:1a:12:1d:7d:8a:
                    93:d1:1f:0d:9f:55:1d:4c:95:2e:2c:39:41:93:99:
                    09:8f:00:5a:1d:4d:01:0e:cf:57:a5:1c:b2:9a:45:
                    3d:ab:13:9f:46:8f:db:21:b1:85:18:28:d3:8f:ea:
                    28:59:29:57:02:c3:d4:77:3e:56:73:6f:dd:d6:ad:
                    5a:5c:aa:fa:be:cb:70:3d:6d:41:f5:3e:b0:3b:31:
                    1f:56:e6:a2:94:22:41:e5:e3:3e:71:0b:c6:f9:33:
                    89:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:5E:7D:AE:7D:8D:5C:15:7B:83:AB:B1:03:DF:01:33:F0:7F:46
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.148.0/24
                  116.197.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:17:bc:fe:34:3a:8a:66:ed:10:72:e9:d7:9f:5d:1f:90:ca:
         28:eb:ab:7d:c1:d9:27:b3:4f:fc:ef:7a:7c:d2:b2:c8:8c:1c:
         6c:79:dc:95:06:75:83:74:72:1c:04:ca:74:75:96:3a:9e:4f:
         4d:26:94:25:7e:52:01:c5:5f:0c:e5:01:ed:d1:7b:a0:ad:b2:
         fb:81:56:a1:e6:1c:f2:e6:c2:24:f7:f2:de:b7:89:b4:54:1e:
         5e:36:e4:41:e3:fd:d4:73:5d:b8:7c:ce:83:e2:91:92:7b:92:
         de:75:63:b3:83:ba:81:e2:76:26:4a:69:08:8a:4b:42:8f:2a:
         c9:6b:8f:69:38:ae:c4:11:c1:cb:78:6c:6d:d9:b9:d1:bd:e4:
         b1:fd:37:50:fe:e3:be:54:0f:21:cd:e4:0a:d0:d4:bf:66:13:
         2b:6f:12:ed:9b:9c:73:dd:6d:a9:4b:a0:eb:7b:cc:24:f2:a4:
         39:15:87:d8:aa:66:2c:32:1b:6c:e5:7c:6e:b6:99:9c:e0:a2:
         eb:13:6e:4c:9a:88:50:a6:05:1c:ba:a2:63:fb:c4:fb:7d:8d:
         63:16:1c:76:af:17:cf:e8:df:8a:7c:c3:a3:78:f3:04:d2:7a:
         6c:e9:6c:f6:d4:d0:d4:5b:cc:c3:fa:ec:35:80:6f:87:54:88:
         96:c7:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org