Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa
File:                     4EEAF1DAE96211ED9A14B935C4F9AE02.roa (raw, json)
Hash identifier:          cng98HucCijGH1pmZUqgjG4O/YHy20x5drkYzn1NIS8=
Subject key identifier:   A1:11:CF:B7:32:ED:6B:FD:EA:D3:8A:70:85:61:7B:2F:CB:6E:18:FB
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       012E
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 03:24:23 +0000
ROA not before:           Thu 21 Sep 2023 03:24:23 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        202.27.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 21 03:24:23 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650bb766-c20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:58:3c:a6:39:49:ca:df:f5:3a:22:c4:9a:
                    92:40:13:8b:3b:5e:46:4d:18:78:5c:97:51:ce:4d:
                    5d:0f:c2:de:04:76:eb:11:69:e7:5d:24:b4:45:ab:
                    b9:98:8b:54:e7:5b:9b:96:45:58:90:84:66:48:c0:
                    b8:5b:50:dc:8d:51:71:2f:e6:31:90:b9:e4:a0:a3:
                    bf:fe:d8:79:97:75:59:0e:01:ba:6e:ba:d9:f6:8c:
                    1e:55:e1:97:01:67:c1:d7:18:d6:1f:b7:a2:40:9d:
                    de:47:bf:b5:b7:0e:f1:63:ae:ab:0b:01:5c:ca:c5:
                    fd:a5:c7:86:f0:41:1f:9b:fe:b3:43:50:b7:02:8f:
                    14:00:8f:6b:c5:73:8c:89:42:f8:4b:a7:0f:b9:79:
                    9e:fb:de:a8:3e:7a:cc:a2:ca:64:fb:ba:6d:5d:ba:
                    85:53:01:3d:71:d2:1b:a2:36:d6:99:60:14:69:98:
                    38:e3:2b:a4:2b:81:24:df:52:5a:2c:e6:28:01:01:
                    af:d2:b5:16:12:6e:7d:27:dc:05:a3:da:e6:8a:a5:
                    81:5c:7f:d8:f4:d8:f2:55:41:43:ae:cc:99:50:2a:
                    de:33:5c:63:c3:ac:2f:f5:09:0f:d3:9f:f6:19:d4:
                    f3:3d:ff:55:4c:78:e7:ac:f7:06:f6:02:a5:52:a7:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:CF:B7:32:ED:6B:FD:EA:D3:8A:70:85:61:7B:2F:CB:6E:18:FB
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4EEAF1DAE96211ED9A14B935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:08:5d:ec:c7:f9:92:10:a5:17:3b:3b:29:e9:f1:c2:1b:
         d0:28:99:6d:8b:9f:38:8d:49:92:e5:ff:a8:29:c0:b5:ea:28:
         9a:ba:af:95:49:1b:1b:a8:8f:b6:e3:23:37:e6:1c:41:2f:d0:
         7e:c3:0b:1d:a0:4a:f3:c9:40:df:73:bc:38:db:35:36:e0:a3:
         a8:ed:16:93:15:4b:06:26:1c:2f:9d:1a:b4:4f:b7:d3:7c:ae:
         46:05:4c:e5:1c:d0:0a:3d:4d:1c:f3:97:12:8d:81:29:4d:b3:
         f0:7e:55:37:fd:32:f4:ca:b6:49:59:28:97:c2:99:6b:e8:c6:
         d0:89:83:cd:6d:78:b7:26:07:df:c7:ec:89:84:67:f2:1e:b5:
         1a:dc:12:b0:13:00:5c:16:b2:6c:b7:ea:86:b8:d8:24:96:87:
         e4:2c:fa:f0:f8:8c:a8:38:c3:7e:89:c6:6f:97:8c:b6:9d:21:
         54:5b:94:86:01:89:11:1a:25:21:1d:b9:20:f4:9d:56:7f:1b:
         ea:2f:81:5a:4d:a6:19:b7:90:39:14:0c:8c:fa:81:8f:44:86:
         da:08:02:23:0e:ce:54:98:c0:c9:1c:f3:8a:f6:73:7f:a0:8b:
         28:8e:fa:88:6c:c4:05:a9:50:63:8f:9f:71:1c:79:80:ec:26:
         df:ab:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org