Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
File:                     BBF0DD5216CD11EDBB046C79C4F9AE02.roa (raw, json)
Hash identifier:          pJ33Fqdsq89lCynqwTIJ7dF7Oc4s7vkCVWgVGXgZQQM=
Subject key identifier:   A6:EA:01:4A:21:95:D4:94:66:45:96:6D:4B:40:63:A2:2E:C7:63:5B
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       012D
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
Signing time:             Thu 21 Sep 2023 03:24:22 +0000
ROA not before:           Thu 21 Sep 2023 03:24:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     4648
IP address blocks:        202.27.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 04:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Sep 21 03:24:22 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650bb766-d147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:f5:a1:5e:3a:45:27:5d:60:9d:a7:ad:27:
                    fb:da:ec:41:3f:ba:66:0a:28:43:97:d2:b6:49:98:
                    1a:67:58:ac:01:bb:34:72:50:77:27:d0:7b:27:ec:
                    13:34:36:55:7f:3a:72:ba:d1:95:32:8f:16:83:5b:
                    62:eb:7b:ea:41:76:78:c9:b8:d4:48:2b:dc:f2:1f:
                    05:98:50:62:81:bb:dd:e8:1a:34:c4:b5:42:72:4e:
                    82:27:37:22:a6:90:5a:af:4e:50:a0:1c:67:41:22:
                    5b:2d:94:94:07:97:a2:61:83:ca:d3:f0:91:c3:8b:
                    31:f6:e7:21:29:54:7a:d2:7f:11:91:81:d1:b2:82:
                    83:d0:67:a7:55:a0:fe:8a:7d:c0:52:7a:b4:1a:ad:
                    15:06:51:c3:47:41:e7:2b:52:f2:92:f4:dc:40:54:
                    5a:ea:62:a6:67:b3:e4:5e:e2:9a:06:04:16:c4:b1:
                    11:af:a0:bb:33:0c:b6:20:e7:2c:ee:9b:83:2c:c8:
                    94:39:96:a3:96:4c:98:86:3a:90:55:d4:af:05:c8:
                    d9:41:96:ec:7e:28:76:a7:5a:3c:54:20:a0:af:21:
                    9a:25:19:30:8f:6e:0d:b3:b8:8a:2a:ef:c1:7f:03:
                    25:fc:30:bb:32:a4:2f:5e:96:0a:6d:80:86:61:32:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:01:4A:21:95:D4:94:66:45:96:6D:4B:40:63:A2:2E:C7:63:5B
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.27.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:5a:b0:94:0c:8f:e6:76:e1:1a:5f:d2:2b:14:03:b9:a2:62:
         20:16:c6:bf:68:29:c0:69:63:7e:ce:f5:4c:6b:5f:b0:4c:e9:
         65:85:80:f6:1e:7b:61:88:cb:27:68:0b:e4:49:5a:32:12:fb:
         0b:0b:31:85:9c:f1:1e:e7:e5:8b:b0:2d:42:a3:3a:d9:8b:99:
         df:30:a6:f2:31:0c:80:9f:ba:85:e6:5b:c4:bc:65:71:b5:b8:
         bc:ff:3c:49:d3:3f:a5:24:4a:fa:17:aa:b6:c3:6a:b1:8c:f8:
         a5:a5:e4:3a:af:64:f1:1c:fa:f1:04:cb:ac:e4:f4:3e:b0:94:
         54:0d:a9:68:2f:d8:57:84:6d:99:58:ae:c6:67:3e:0c:57:3e:
         3e:ef:1b:ea:d2:f1:7f:9d:ec:f1:5c:40:a0:df:7b:f2:78:59:
         8b:4f:96:7c:09:23:84:81:5e:41:96:17:69:e7:bd:7d:a3:4c:
         45:f9:0b:82:98:86:a0:91:15:e2:e3:db:53:e3:ac:a7:45:af:
         7e:4c:97:55:17:64:a6:c5:3b:7c:a4:4d:4d:a6:0b:75:a0:f4:
         c8:e6:ff:6e:10:3f:9d:90:6e:14:56:4c:a5:b9:11:d1:01:65:
         06:2e:af:27:fe:6b:c9:ea:a9:6d:3e:f3:d1:1a:14:60:ea:68:
         c9:b3:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:46:23 2024 by rpki-client on console-ams.rpki-client.org