Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa
File:                     92F68C4E549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier:          sY83/cQy3tzz5zdxbwkdhze9u62EpJ6EfapgidWQ+QI=
Subject key identifier:   AD:23:7C:EB:CC:9B:56:00:81:82:58:60:50:F7:95:79:3D:F1:A9:0E
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       0368
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa
Signing time:             Fri 11 Oct 2024 01:04:48 +0000
ROA not before:           Fri 11 Oct 2024 01:04:48 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     4826
IP address blocks:        202.36.13.0/24 maxlen: 24
                          202.36.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Oct 11 01:04:48 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670879b0-dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:b2:d8:ba:a0:e5:eb:aa:c6:b3:9d:af:93:
                    20:84:c9:55:f2:c4:0d:55:2c:da:8e:35:ea:ab:4f:
                    9e:16:2e:76:8e:98:6e:5d:63:d9:81:99:e3:9c:bc:
                    c3:f9:c5:7d:54:f7:19:34:a0:9c:6c:21:f3:c3:e3:
                    df:ee:a8:9f:86:53:64:82:80:2a:05:18:78:48:7c:
                    52:66:48:a4:59:78:6c:2c:ce:0f:87:22:2d:9d:59:
                    75:02:b1:20:b7:cf:53:a4:07:8e:26:72:de:96:a3:
                    19:50:d3:42:53:b2:6f:7c:bb:60:12:b2:d1:c8:98:
                    1b:bf:90:6e:80:d1:8c:79:d9:1d:f7:3d:5d:64:43:
                    44:ad:33:e8:2c:21:15:5f:5c:e1:7a:a7:5c:7a:9e:
                    83:22:b7:29:7b:00:2c:b5:97:71:7f:95:f8:c0:93:
                    cd:46:be:e6:9d:68:c2:e4:23:f5:72:19:1e:ed:ff:
                    06:f6:4c:7b:ba:f7:52:d7:93:ce:5b:64:bb:ec:28:
                    96:d3:a6:c5:6a:dc:9d:d8:a2:13:7b:2f:36:33:eb:
                    5e:cb:03:1a:d6:dc:60:6d:da:5c:64:84:05:eb:79:
                    18:c1:ed:76:bb:37:98:65:76:2b:62:9e:36:da:80:
                    3a:c6:b0:a0:09:81:34:ea:5d:46:0f:0b:fc:0f:97:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:23:7C:EB:CC:9B:56:00:81:82:58:60:50:F7:95:79:3D:F1:A9:0E
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.13.0/24
                  202.36.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:05:ba:d4:69:0d:ee:61:24:17:d9:98:8f:da:eb:db:a0:
         92:c9:8f:44:fa:de:d1:36:38:01:3b:ee:f1:aa:ab:28:f9:cb:
         33:5a:46:ad:39:3d:d4:51:26:1b:92:c2:29:22:ae:4f:fb:a3:
         0b:fc:e2:d8:27:ad:7a:e7:24:ec:02:fb:dc:4b:76:7e:64:4b:
         f9:ba:b3:da:4f:58:d2:a6:1f:66:ba:02:e7:95:cb:2c:f1:65:
         54:f8:dd:5b:d4:19:90:df:95:80:ef:c5:e8:d4:eb:23:9b:04:
         0a:c2:3a:df:cc:1e:7e:56:f2:4c:b4:63:71:75:0b:64:59:dd:
         12:93:ad:04:b9:71:f4:26:7f:ca:3c:fe:e0:dc:e2:38:77:af:
         4e:b0:fc:8e:b2:71:d1:bc:69:ec:15:42:a7:35:d4:59:bd:e6:
         41:aa:3b:7b:67:e3:02:ea:80:41:b8:22:32:c7:94:0f:ed:cb:
         8b:75:5f:af:46:ac:8d:98:52:a8:15:5e:55:6d:22:4b:b7:ea:
         50:04:d8:6d:a3:87:4c:ef:55:8a:5c:c9:74:56:8d:c8:3f:c0:
         e4:e0:50:d6:2d:13:b1:08:1a:97:70:c9:d4:ed:d0:64:a7:4f:
         9d:50:38:4e:1b:5e:e5:3e:73:1b:a8:f1:6e:6f:47:7c:a2:c5:
         22:64:fe:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org