Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
File:                     8296B130A0DC11EF8963C80AC4F9AE02.roa (raw, json)
Hash identifier:          kEg5BySD5/6d6+2W+gzFQa7n4JYZpDzOwTlx1JrwL00=
Subject key identifier:   04:0A:1A:05:45:21:DA:D5:21:CE:D8:E1:03:89:D3:41:27:5D:03:3A
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       129F
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
Signing time:             Tue 12 Nov 2024 09:57:22 +0000
ROA not before:           Tue 12 Nov 2024 09:57:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     16669
IP address blocks:        203.116.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4767 (0x129f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Nov 12 09:57:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67332681-2912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:5c:a2:3b:fe:2f:1d:59:83:19:8f:7b:76:
                    67:46:8a:21:c8:f6:85:a3:0f:91:53:8a:2f:6a:32:
                    25:27:0b:a4:bf:4e:1a:80:3c:b8:e8:89:5e:3f:ef:
                    a3:46:c3:b4:33:39:a2:a1:49:b8:97:cf:2c:29:e5:
                    53:54:50:6f:aa:77:9b:5d:f7:9a:50:d8:a3:66:af:
                    49:12:d5:54:a5:39:fa:7e:73:28:0b:be:0b:fa:0c:
                    56:35:6b:88:84:f5:1d:68:26:ce:61:83:dd:04:8e:
                    54:94:ea:ac:38:51:d1:9b:81:54:a9:d0:51:f1:ef:
                    a4:23:2a:53:dc:ef:06:fc:92:54:99:68:fb:b0:df:
                    6b:80:14:da:e1:c3:a6:0b:ed:5d:34:e5:3e:36:95:
                    58:b4:b6:54:f6:91:24:ff:73:21:ec:68:66:81:6c:
                    c5:11:ae:f0:ae:5c:fd:87:d3:04:de:53:27:66:47:
                    38:39:7b:2c:d2:ba:16:7a:7f:d5:e8:a0:a0:a6:0d:
                    de:b5:a6:96:a3:84:e7:1c:f1:63:e9:fb:ed:fd:1f:
                    44:28:0c:07:15:05:39:50:1f:77:c0:b5:b2:36:73:
                    f1:4f:8c:26:1a:15:c9:64:f3:c3:fc:bf:ea:44:4d:
                    0b:51:dd:40:01:13:59:39:ad:c3:bc:35:a4:2d:61:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0A:1A:05:45:21:DA:D5:21:CE:D8:E1:03:89:D3:41:27:5D:03:3A
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.116.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:e6:05:05:5e:96:38:ac:8c:a0:db:73:8b:ee:a9:6a:1a:
         94:4b:92:37:ad:46:77:84:09:f3:8d:51:08:f7:25:59:1f:c6:
         56:eb:ba:dd:cb:e2:47:82:6e:78:13:10:18:25:36:96:54:9f:
         2e:b9:cd:f4:fe:ff:f5:c5:5b:51:af:d2:72:eb:96:33:9d:05:
         e1:57:36:86:54:d4:6f:5e:b3:5a:cf:03:66:bd:51:9e:c7:ad:
         32:cc:db:42:dc:ab:fc:c8:b4:f0:1b:55:00:06:24:cb:eb:4c:
         24:3c:c6:1f:8e:cb:9a:bf:b7:29:f4:31:ee:d6:1c:e5:08:ab:
         b3:46:e8:bd:dc:25:6f:18:9c:2a:17:b2:b7:f3:3c:05:ef:92:
         b6:40:e7:be:34:06:a2:3f:d5:71:48:c3:4d:3d:9b:54:53:f8:
         9a:a2:b2:5a:c7:b6:fb:ff:35:c3:28:7c:aa:17:09:a4:22:a7:
         83:40:8b:29:ff:28:1b:07:c6:09:e0:58:11:2e:58:00:ed:d1:
         c7:5a:3c:5f:c7:3a:be:b8:7a:73:fb:ca:e2:44:61:8d:34:16:
         62:d5:fb:03:97:d3:33:12:92:5d:fb:93:ba:11:dc:6d:b1:03:
         4a:6b:2f:ad:33:b5:1e:e9:24:fc:84:71:ce:f5:f2:8a:6c:81:
         8c:f7:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:51 2024 by rpki-client on console-fra.rpki-client.org