Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
File:                     FD6286EA22B611EFBF5D3960C4F9AE02.roa (raw, json)
Hash identifier:          OT9nmfEqQIusq5e8dp/kCIgj5rUezQlTB68c6LVcxWs=
Subject key identifier:   05:0C:CB:ED:E9:4C:3B:FE:24:69:E0:81:D5:B5:2A:2D:E6:F3:08:FC
Certificate issuer:       /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial:       2C
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
Signing time:             Tue 04 Jun 2024 21:11:20 +0000
ROA not before:           Tue 04 Jun 2024 21:11:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29802
IP address blocks:        203.26.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
                          rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
        Validity
            Not Before: Jun  4 21:11:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=665f82f8-7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:01:fb:b1:df:0e:e4:3c:73:7e:d5:30:f5:
                    41:33:01:87:9e:35:6e:3c:c7:63:43:6e:3b:cd:81:
                    e1:f3:23:b8:ff:e5:46:19:42:d4:76:9f:fc:ef:3c:
                    48:2f:b4:b2:85:de:ee:29:bc:f7:c0:d7:05:86:28:
                    5c:ea:b5:a2:bb:11:db:ef:f8:59:8b:d6:5f:05:00:
                    4f:aa:ec:c7:9a:06:41:6b:94:75:67:c9:23:3b:76:
                    60:02:39:51:48:19:10:ff:c1:62:5f:35:21:8f:99:
                    8b:d4:01:57:bc:b8:e7:57:77:e7:a6:2d:d7:01:2e:
                    06:19:1b:e3:b2:2d:72:7c:bb:88:24:13:01:e9:fa:
                    25:90:aa:46:e8:d9:30:62:cc:9e:66:14:c6:39:ff:
                    07:9d:9f:e0:5c:73:9e:9f:12:30:69:e7:d2:ed:0c:
                    60:4f:2f:8b:4a:0e:6d:8c:33:ef:c8:b6:1d:e9:05:
                    91:a0:ad:a3:0a:1b:f6:b6:f7:52:70:59:69:8b:db:
                    c1:d5:6e:7b:0e:0b:1a:eb:cc:e1:2b:55:67:0a:7a:
                    1f:c7:fd:11:6f:10:d1:3d:d4:85:0d:24:5d:58:a6:
                    87:01:b3:95:a0:cf:ba:2a:47:c2:66:73:96:e0:e5:
                    1f:0f:95:d6:e2:b5:12:7b:ab:56:40:bc:be:24:ef:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:CB:ED:E9:4C:3B:FE:24:69:E0:81:D5:B5:2A:2D:E6:F3:08:FC
            X509v3 Authority Key Identifier:
                keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/FD6286EA22B611EFBF5D3960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:e7:60:90:d9:f6:e6:82:9c:66:02:44:d8:a0:91:10:fa:
         9f:76:d1:2d:89:b1:5f:6f:47:8a:3c:90:96:04:3e:7c:77:4c:
         49:26:61:95:05:50:fe:71:ae:b1:4b:56:4d:cc:7b:7d:be:d8:
         8c:d4:82:c9:4f:36:5f:95:bb:ba:1b:a6:a2:f0:34:c7:9d:5a:
         b9:9d:0f:be:28:5a:e4:37:dd:7e:33:59:54:a3:de:c4:21:f4:
         26:43:b9:69:ae:99:e0:72:c5:6d:38:8d:26:39:56:43:12:01:
         bc:b8:47:9d:98:49:b2:fc:51:7d:20:d9:47:4e:12:75:fb:cb:
         97:e2:24:62:de:13:14:65:f8:d7:49:fe:51:98:26:5b:74:1c:
         3a:da:37:e2:57:43:43:62:96:8b:46:70:6d:bc:72:75:00:71:
         95:70:91:cc:72:93:15:54:87:43:74:88:a5:06:dd:e5:fc:30:
         3d:3c:dd:cb:6b:a4:47:ed:f6:73:d2:45:02:fd:9f:ce:8c:53:
         74:4c:ae:0b:31:c4:43:43:6b:8f:0d:89:ea:ca:b3:78:7e:b3:
         ae:f0:f2:50:83:13:65:c6:b9:18:e5:65:4f:65:c5:2c:78:c7:
         1a:bf:52:5f:f6:f8:8d:00:3b:e5:17:72:1b:4c:06:7b:db:bc:
         0a:18:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org