Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa
File:                     52863B4C9DBA11EB83364624C4F9AE02.roa (raw, json)
Hash identifier:          4VRZP8qTlcQa1n8bJBhtrpNFnhAJ9oHxbObRyMSUUQ0=
Subject key identifier:   82:7B:E7:FA:13:B9:BA:18:25:38:13:E5:8B:27:F7:00:45:45:EB:15
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0B06
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa
Signing time:             Fri 16 Aug 2024 20:28:30 +0000
ROA not before:           Fri 16 Aug 2024 20:28:30 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     9989
IP address blocks:        202.177.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2822 (0xb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 16 20:28:30 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66bfb66e-fe8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:8e:49:c9:0c:b0:32:34:71:11:3f:4b:67:
                    89:7a:59:34:2a:d6:ee:bf:76:84:5b:d2:4e:20:93:
                    f4:a3:8f:b4:d3:f3:d5:d1:16:7c:95:00:71:b2:d8:
                    b8:58:55:71:06:30:ed:b2:fc:78:22:d4:8d:8a:e9:
                    23:81:96:ed:39:02:27:0e:40:aa:be:14:c1:cd:d4:
                    3c:16:f1:cd:37:93:8b:bd:90:07:89:db:1c:72:e4:
                    88:5f:9a:d6:48:f4:5c:7b:79:d4:54:b3:c3:32:55:
                    41:de:87:9b:2f:89:52:a8:64:16:ad:a2:7c:78:11:
                    75:13:2c:06:63:35:e1:0a:ac:b0:f4:6a:76:57:80:
                    ab:32:59:29:41:d1:2c:d1:2f:ca:10:5e:01:ab:4a:
                    55:70:8f:39:f4:93:f2:e8:73:0b:91:83:7e:2e:da:
                    fe:e0:83:4d:a1:68:17:8f:5e:68:3b:7f:ba:23:64:
                    ff:ea:2c:f7:1f:8e:b5:ad:d1:3d:bb:0b:7f:50:26:
                    7d:22:9e:9a:48:b0:46:e2:1c:4d:ac:f9:e5:d3:b9:
                    a1:fc:1c:72:b8:33:c1:e6:a4:2c:fb:1d:19:c2:38:
                    62:8a:b2:44:14:58:51:d2:b9:85:79:fd:88:b9:77:
                    e3:77:1a:1a:56:f1:6b:d8:fc:3b:6d:ce:24:31:d6:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7B:E7:FA:13:B9:BA:18:25:38:13:E5:8B:27:F7:00:45:45:EB:15
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/52863B4C9DBA11EB83364624C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:73:82:3f:62:b3:d6:99:42:ed:7e:b0:02:dc:30:b6:49:85:
         6f:00:2f:ed:17:37:06:41:25:01:23:6d:97:a2:5c:e1:c0:28:
         d9:91:5d:e1:86:09:c3:b3:16:b8:fe:4b:81:75:71:9f:22:75:
         4d:ba:e0:7d:7a:b5:49:7f:0a:03:dc:03:0e:ce:6c:d9:11:6a:
         4f:d1:af:5a:a4:10:b9:80:f9:8e:0f:da:0c:e2:af:03:9a:a2:
         ae:a7:1e:c2:19:40:b0:26:51:92:05:e2:ce:8f:5f:6f:ce:e9:
         57:00:67:42:0a:64:60:f6:44:f7:67:c7:20:2a:29:13:c7:04:
         85:a1:ff:19:5a:dd:83:aa:09:8d:08:6a:7d:b3:17:1f:14:de:
         28:a5:d0:d3:1f:b8:89:a3:bd:f7:40:34:df:98:41:46:6b:97:
         7b:70:4c:36:c2:90:ee:cb:09:75:ad:f0:98:3f:11:df:ec:39:
         40:2b:23:f7:e4:c9:1b:b4:bd:a0:3e:ce:9b:9b:9d:fc:43:67:
         65:dc:9e:00:cc:e0:22:8c:17:76:6c:e6:b2:9b:38:26:f2:42:
         5a:1b:39:72:b6:47:d1:c1:5a:21:43:68:8a:aa:d8:31:96:75:
         95:2f:d1:a0:7f:eb:3f:f5:1d:7b:cb:89:ed:d1:84:12:ed:4e:
         7b:bb:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:49 2024 by rpki-client on console-ams.rpki-client.org