Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/B8951CDCD23611EA8D9E515BC4F9AE02.roa
File:                     B8951CDCD23611EA8D9E515BC4F9AE02.roa (raw, json)
Hash identifier:          3p58ypdk04ElN+6HEttw9qJ/C60XU0tMI9YBNjvhXdM=
Subject key identifier:   2E:F2:46:71:D8:9B:DE:DE:79:D2:AE:BA:AB:AA:10:F1:A4:81:29:DC
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2415
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/B8951CDCD23611EA8D9E515BC4F9AE02.roa
Signing time:             Tue 20 Aug 2024 16:03:22 +0000
ROA not before:           Tue 20 Aug 2024 16:03:22 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     7700
IP address blocks:        203.208.185.0/24 maxlen: 24
                          203.208.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9237 (0x2415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Aug 20 16:03:22 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c4be4a-67c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:64:5c:08:86:3d:2c:67:56:be:16:08:f0:
                    67:bf:57:57:ef:84:57:ad:d9:1f:4e:ad:23:a3:20:
                    71:c1:62:8c:8b:35:21:5e:71:39:3a:d7:13:fa:20:
                    24:3f:e6:87:98:fa:6f:0d:04:db:9d:d0:03:88:8b:
                    b3:94:98:df:49:77:82:ba:58:c4:10:a9:36:15:1d:
                    d2:5a:7f:60:f9:47:31:63:47:23:44:61:09:fa:56:
                    2b:79:67:bb:ac:32:43:51:8f:80:2f:1f:c9:7b:55:
                    19:ea:b4:f2:75:b6:a4:b5:da:c7:18:93:73:13:37:
                    f5:d7:d6:2b:65:8e:69:1e:0f:05:c9:30:e4:b8:fa:
                    d2:36:c8:71:fb:4a:72:03:1f:d2:f3:61:4d:ed:54:
                    0f:0d:ec:fc:c8:21:21:ed:d1:e1:c0:d1:c7:cc:2e:
                    ad:4a:84:c6:03:4a:51:25:bb:bb:44:dc:c1:90:c1:
                    1b:5a:71:5a:36:aa:f1:10:6a:fa:14:18:fa:98:a3:
                    5c:60:67:6d:6d:65:66:00:94:0e:81:93:95:b2:90:
                    55:07:d2:ea:39:47:b0:82:0f:8a:33:d7:3c:f9:b3:
                    68:79:dc:97:ef:77:10:1e:f4:77:98:b8:ce:cd:2f:
                    9c:3d:22:f4:a2:ad:ef:a2:1d:d2:1b:9b:f0:e2:dc:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:46:71:D8:9B:DE:DE:79:D2:AE:BA:AB:AA:10:F1:A4:81:29:DC
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/B8951CDCD23611EA8D9E515BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.185.0/24
                  203.208.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:1d:df:76:00:c9:fd:cb:e6:53:49:27:0c:86:d0:c6:bd:
         4f:22:74:9b:1c:04:25:72:8b:ee:e3:09:6b:ff:ff:8e:29:af:
         35:44:8c:ff:0a:51:1c:58:b2:90:9e:47:fd:b8:4c:47:b4:9e:
         7c:5b:14:7b:8d:b0:f5:69:d4:b7:8b:6f:c2:5d:ae:98:13:e8:
         d3:9a:82:9f:da:ea:c4:81:02:a7:ae:9e:3f:d6:41:7a:15:89:
         f7:5f:a4:26:91:fb:27:0d:1f:d1:b4:0d:7f:50:94:b5:98:e5:
         68:6f:5f:c4:30:e3:39:6f:e3:9b:96:1f:ec:25:0f:22:86:9e:
         7d:c7:74:60:59:34:e8:35:43:7b:7e:b8:74:d9:b7:7a:3e:d5:
         52:1e:ff:87:3f:11:4a:80:d7:af:4c:63:17:dd:d2:ed:3f:dd:
         47:c1:80:f0:62:3c:ad:1c:3e:66:da:4d:33:80:05:58:86:0c:
         b2:02:28:36:ff:3b:75:0b:19:34:5d:56:d2:44:ca:32:e7:27:
         bd:d9:51:15:d7:e5:2c:42:bf:7d:9e:08:b9:1d:c3:85:3a:7b:
         43:b7:23:66:42:29:9d:b0:b9:fe:18:35:09:a0:fd:82:31:62:
         b6:fc:c6:d4:4a:0d:3c:c8:5e:0a:41:15:17:60:76:14:42:e2:
         5e:23:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org