Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/5F313E6A99D611E6BB89D557C4F9AE02.roa
File:                     5F313E6A99D611E6BB89D557C4F9AE02.roa (raw, json)
Hash identifier:          ZGCJNBFnB8fjUkSBXI8YXHiyxcsIVU9bjljz0QT8jc4=
Subject key identifier:   97:6A:41:31:4D:54:52:02:66:84:68:AA:C9:DB:94:3E:FC:0E:BA:CE
Certificate issuer:       /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
Certificate serial:       1C58
Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/5F313E6A99D611E6BB89D557C4F9AE02.roa
Signing time:             Fri 02 Jun 2023 17:15:01 +0000
ROA not before:           Fri 02 Jun 2023 17:15:01 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     45264
IP address blocks:        202.90.40.0/24 maxlen: 24
                          202.90.192.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl
                          rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 16:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7256 (0x1c58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82
        Validity
            Not Before: Jun  2 17:15:01 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=647a2395-27e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:cc:5f:49:4c:2c:b2:8a:1f:ed:e8:a1:62:
                    e1:f5:0c:b4:ff:a8:b6:ea:a4:de:13:00:b7:d3:be:
                    1c:30:eb:5c:bd:59:24:bf:55:db:cc:cb:c7:58:47:
                    a7:2e:ff:db:e6:58:2c:aa:b7:63:c1:46:f5:5c:e0:
                    79:c3:dd:d5:e4:f1:b9:90:53:88:a0:c9:1e:29:d2:
                    85:9e:33:29:e3:11:a2:da:a6:59:f1:ec:21:dc:e3:
                    aa:aa:eb:12:4f:6d:3b:2a:7f:8f:20:63:d2:0e:8a:
                    c3:6d:f7:76:2d:44:74:3e:61:6c:a0:f6:b2:6f:a5:
                    1d:6d:f8:5f:87:68:4a:13:99:dc:fa:0f:f5:52:d5:
                    d3:1a:37:fc:40:b9:64:3c:c0:f2:62:5d:68:7d:ae:
                    f6:b2:e2:85:d2:ce:e8:12:41:7f:e7:f1:ec:26:c3:
                    03:19:6c:c9:50:d5:65:cb:ca:6f:fa:6d:6b:03:22:
                    63:08:86:db:41:4e:19:c0:a0:0e:d8:48:ce:5b:e3:
                    37:70:0e:dc:e9:66:ee:39:63:29:30:b5:0f:d5:cb:
                    2f:e2:7a:3f:35:95:f2:e7:a6:6b:be:fd:e0:56:6a:
                    08:2d:5e:90:c2:57:66:69:df:66:f5:c3:fa:88:0e:
                    40:25:29:d6:b5:6b:fb:9d:02:37:10:0c:86:33:7d:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6A:41:31:4D:54:52:02:66:84:68:AA:C9:DB:94:3E:FC:0E:BA:CE
            X509v3 Authority Key Identifier:
                keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/5F313E6A99D611E6BB89D557C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.40.0/24
                  202.90.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:3c:52:e7:0d:92:39:06:29:4f:8a:20:56:69:15:f1:df:
         b4:60:cc:d2:aa:d1:c5:7d:ba:80:1a:53:62:ee:ef:0d:de:89:
         c5:54:ac:cf:46:68:96:a8:2f:56:ae:bc:12:ed:56:28:22:3a:
         a8:d8:eb:b1:22:83:cf:50:04:41:d0:a0:cf:07:03:36:fc:31:
         75:18:c0:7b:19:23:bd:16:d5:a1:47:29:cf:0c:be:12:72:85:
         50:8a:e9:47:41:56:0e:78:5f:7a:bb:88:cf:65:60:33:71:5c:
         40:96:cd:f9:a3:0c:ea:0d:d6:30:0f:c3:e3:be:81:2f:10:07:
         55:ae:58:25:89:a0:de:38:aa:65:aa:15:24:48:f0:7d:9a:2e:
         a0:f6:fd:ae:ee:ef:8e:bf:f6:53:6f:10:bd:8b:65:df:32:96:
         c7:b0:8d:6b:90:94:da:d9:35:a8:da:21:d1:d2:c3:2b:7e:48:
         86:1f:e7:af:e0:f7:33:e7:cf:1e:5f:e6:1c:0e:0b:1e:7c:c3:
         f8:c4:57:6a:68:6a:0e:9f:49:74:d0:53:95:f0:89:55:50:1c:
         dc:77:2e:9a:83:d9:b7:80:60:ab:bd:4d:8e:27:15:18:85:9d:
         36:1c:07:2f:1b:fd:b7:7a:82:d5:78:6a:16:57:bb:ef:f9:db:
         ad:ac:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 18:46:45 2024 by rpki-client on console-fra.rpki-client.org