Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/35A803641F1C11ECAD024E53C4F9AE02.roa
File:                     35A803641F1C11ECAD024E53C4F9AE02.roa (raw, json)
Hash identifier:          RXm6X8dPtin6b1fUphtcowFvgtCs8KVHWA4JzuYZ5z8=
Subject key identifier:   0C:8E:1E:A7:45:02:9B:E0:7C:06:CF:EE:13:C7:AF:97:B2:72:3C:F1
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       05B1
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/35A803641F1C11ECAD024E53C4F9AE02.roa
Signing time:             Wed 04 Oct 2023 23:41:24 +0000
ROA not before:           Wed 04 Oct 2023 23:41:24 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     18159
IP address blocks:        202.124.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  4 23:41:24 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651df824-77fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:f9:85:10:ba:38:cf:b4:de:d5:10:db:02:
                    4c:32:fa:19:3b:24:04:a2:af:ae:8e:9c:5c:d9:45:
                    26:44:ef:e2:5b:d5:1e:a0:15:b7:09:65:39:7d:dd:
                    3d:1c:4e:07:92:4f:aa:78:9f:75:d7:2f:35:dd:1e:
                    fd:e8:2e:b2:e0:71:9b:92:33:ea:a5:af:08:15:a1:
                    01:b8:f1:d3:36:ea:03:4b:28:19:30:fc:17:11:6d:
                    ac:dc:ed:5b:38:3f:e6:ce:6f:8e:63:a9:2e:31:83:
                    e2:81:5f:a4:52:37:65:5e:9c:42:c8:71:0c:79:39:
                    26:45:64:e4:95:09:b3:4c:8b:f5:13:01:02:c7:8d:
                    1b:6d:a3:88:64:a7:8e:2f:13:96:0a:d5:ba:e3:e8:
                    dd:2b:4b:31:de:4f:ac:e9:25:77:b2:23:ea:5a:bf:
                    a3:c5:28:1b:61:b2:f2:78:dd:e1:eb:32:e2:6d:8e:
                    64:fb:89:4b:96:aa:87:f6:9c:36:bf:2d:5e:58:aa:
                    b4:01:e8:43:99:d1:76:56:bb:ed:da:a6:ad:89:3b:
                    3d:04:1e:82:58:60:7e:79:69:81:8f:0f:5a:c1:62:
                    30:e0:d5:58:96:13:b4:79:be:53:03:9d:2e:d3:e1:
                    5d:82:de:1a:75:18:18:9f:aa:90:20:9c:c4:1b:b2:
                    ef:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:1E:A7:45:02:9B:E0:7C:06:CF:EE:13:C7:AF:97:B2:72:3C:F1
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/35A803641F1C11ECAD024E53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:f5:68:81:31:61:ed:58:70:ef:59:13:a8:cd:e0:d6:2c:
         ec:ef:ce:cc:f6:ac:2d:0b:26:68:cb:a1:aa:19:fc:3f:43:6e:
         bb:88:9c:2f:2d:a6:f7:18:b9:82:0f:f5:e2:a0:48:ec:90:50:
         bb:71:24:19:01:fb:f3:16:a8:3c:92:0b:e7:28:df:46:8e:d9:
         64:2a:e0:4f:ac:f1:7f:27:30:45:6a:85:63:77:ac:3d:8a:78:
         2d:e5:3d:34:34:1c:77:2f:9a:ff:8a:25:62:67:93:15:af:dc:
         ba:34:5b:4e:c4:19:a0:fb:6c:fd:7c:7c:9e:40:76:13:83:99:
         36:df:ea:71:99:8b:2c:ad:e5:6c:99:d3:67:c5:b8:35:ec:db:
         52:ac:c7:b1:c7:9c:b2:17:27:e4:a8:d3:65:3f:55:ec:bb:07:
         62:0f:ed:c5:1b:b3:65:2a:2b:89:2f:74:be:8f:df:bc:37:11:
         f7:62:65:ec:3a:1f:2d:d0:3d:c7:07:c5:c5:0b:1c:6e:58:56:
         d3:d5:72:86:5c:ed:55:5c:67:d0:2c:7c:c1:c2:31:d9:09:da:
         66:4f:9c:fa:7a:7c:72:85:1b:fb:de:3d:f5:29:ef:52:76:24:
         a5:75:1c:36:b2:c1:6d:2f:88:8b:a5:c2:64:a2:3e:92:05:7d:
         7f:31:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:06:58 2024 by rpki-client on console-fra.rpki-client.org