Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa
File:                     D80B013A172011EEB3A9C124C4F9AE02.roa (raw, json)
Hash identifier:          NQthKb3GChge6T5RUI263G1tlKE7DYI5g1q3XSDyXjY=
Subject key identifier:   DA:FB:7D:C0:96:33:7D:C1:2B:29:03:5C:91:2C:81:2F:E3:0A:49:26
Certificate issuer:       /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
Certificate serial:       1D4C
Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 16:43:23 +0000
ROA not before:           Tue 28 Nov 2023 16:43:23 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     55410
IP address blocks:        202.179.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl
                          rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7500 (0x1d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F
        Validity
            Not Before: Nov 28 16:43:23 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656618ab-1ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:82:9a:df:68:72:ae:75:0d:ca:69:07:8d:
                    ac:1c:20:96:db:ff:bb:1b:89:fc:a9:ba:8f:e2:2d:
                    6b:f2:19:ee:39:79:47:fb:bd:38:b1:c3:d6:17:c4:
                    b4:6e:1a:c3:df:7a:5c:95:aa:f3:a8:66:f9:11:d7:
                    5a:4f:0a:5d:af:60:1f:4e:71:20:61:f4:b9:cf:bd:
                    a2:38:65:9c:35:fe:5b:0d:6c:1c:06:ef:4f:c2:e1:
                    69:e3:80:ea:ae:d6:c5:d3:cb:e5:b4:c9:4e:a2:47:
                    8e:ee:de:cd:f6:01:f7:f6:9e:59:bd:83:ff:a4:98:
                    ba:9f:c7:f4:75:7f:0d:12:6b:2f:f5:5d:ff:6f:8f:
                    b2:41:81:a2:a1:ae:8b:62:48:0e:dd:23:c7:5a:15:
                    ef:dc:e6:60:31:af:7d:8f:18:de:bf:1f:c1:ce:3f:
                    6d:72:57:2e:69:ba:b8:c3:df:82:10:4a:bd:be:9b:
                    63:7c:26:aa:86:7a:9b:18:26:c4:67:de:8c:ca:84:
                    ae:62:1d:2c:66:42:39:77:4a:13:2e:7c:53:3e:93:
                    17:14:4d:12:f3:c5:ad:31:1e:2f:ca:9a:b0:b0:40:
                    f9:f9:42:d6:2b:17:dd:e1:24:9e:c8:ff:31:0a:b7:
                    02:94:9b:f9:03:e7:21:53:3e:e4:aa:74:17:f5:28:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:7D:C0:96:33:7D:C1:2B:29:03:5C:91:2C:81:2F:E3:0A:49:26
            X509v3 Authority Key Identifier:
                keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/D80B013A172011EEB3A9C124C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:69:71:24:1d:81:12:a6:2f:60:27:aa:24:a4:5d:ab:e9:90:
         c2:ab:1c:f0:24:81:32:e5:48:99:e9:f8:06:e1:12:0a:64:c5:
         53:39:00:a2:77:2e:71:d6:b2:50:52:9b:62:41:11:19:9b:59:
         6a:95:d9:b6:d5:4f:66:0e:e5:55:a1:27:2d:c2:7b:7d:7e:ae:
         be:0a:63:96:48:8e:17:25:b8:e1:af:3f:02:2d:46:ae:52:f1:
         ec:9a:40:71:4b:fc:f8:24:c0:68:a1:fd:81:77:fd:47:a1:1a:
         06:21:70:04:2b:1b:fb:f5:24:82:2e:8e:f2:93:f0:ba:39:85:
         cc:03:cb:6e:63:ff:a2:69:94:50:bd:f2:91:3d:ee:9e:ff:a8:
         d2:f9:89:e6:7a:f0:f6:1c:8f:de:7a:bf:3b:8f:60:3a:9c:46:
         02:1a:4b:da:99:23:53:dc:89:da:01:e0:c6:a9:e3:0a:00:9f:
         d8:ea:da:12:38:69:1d:4a:f4:4c:b4:b5:8e:5a:d8:df:ec:9b:
         64:08:1e:36:f4:06:0b:89:7c:f4:98:97:45:88:d8:08:6a:0e:
         b6:ba:26:19:d7:37:24:cc:d8:da:3d:b5:43:3b:00:a7:ea:98:
         7f:2d:4f:5b:b3:34:35:a3:1d:0f:41:67:16:8d:89:12:0b:32:
         d2:0c:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org