Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa
File:                     D50024D6DFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier:          2+yQDxtXyRNPNjJL9oTb98cBeK8O2vaQ5rcmSwbKfuo=
Subject key identifier:   D7:A2:10:59:79:A6:71:97:52:47:9F:35:9B:BF:8C:0D:25:EC:1A:44
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2416
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa
Signing time:             Tue 20 Aug 2024 16:03:23 +0000
ROA not before:           Tue 20 Aug 2024 16:03:23 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     9498
IP address blocks:        202.189.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9238 (0x2416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Aug 20 16:03:23 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c4be4b-5236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:4e:87:2b:c0:af:3c:3d:7c:bf:2a:e7:e1:
                    a0:68:d0:9b:fb:0e:37:03:13:11:0e:d7:19:7e:92:
                    e1:85:1d:37:83:19:63:40:bb:43:4e:bd:bd:5c:27:
                    5c:f3:3b:87:dd:da:41:3c:d2:19:2f:70:14:12:a4:
                    f6:4f:1b:4f:d0:f5:b4:ef:47:c6:43:e2:c4:f9:1e:
                    06:e4:75:64:c2:90:3e:a7:a6:d4:b6:e4:94:56:02:
                    cf:c7:63:f8:61:02:33:98:8f:92:e1:52:e3:9d:70:
                    17:6f:b3:92:18:ba:43:eb:32:26:c8:31:87:40:58:
                    9b:c0:eb:aa:34:db:12:b5:de:f4:ca:47:27:b6:9f:
                    a8:18:69:02:51:4a:e5:c9:53:2f:e7:26:b6:06:f0:
                    ba:9e:64:89:a4:1c:26:1c:fe:fc:46:75:0a:56:61:
                    cf:c0:15:c3:2c:71:b8:a4:a1:1d:0d:ac:03:e6:c2:
                    dc:00:31:ee:32:6b:9c:2c:c4:f9:f0:f5:6d:9b:a7:
                    c0:08:23:94:22:84:24:b8:1d:91:fd:85:bc:ab:43:
                    70:c8:95:d1:65:91:09:ee:fb:06:5d:aa:e0:6a:39:
                    a6:2b:47:28:ef:de:87:12:4f:f0:fe:5d:94:4a:79:
                    7f:28:3b:72:bd:38:68:b4:ed:e7:50:80:b7:bf:fe:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A2:10:59:79:A6:71:97:52:47:9F:35:9B:BF:8C:0D:25:EC:1A:44
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:e8:f1:c4:d0:1a:48:dd:93:09:e6:a2:01:af:4b:0f:9a:
         e9:da:be:d6:0a:b7:98:15:c4:0a:32:c6:e3:87:af:10:82:ba:
         3c:e6:be:7d:05:e7:a5:f9:dc:ec:05:c9:53:05:0a:9e:16:79:
         ee:f6:8f:12:59:f1:c2:34:cd:bb:f5:82:2c:d7:78:3f:79:15:
         14:20:24:e8:40:73:45:9f:5c:ee:2c:b6:fa:8c:00:3c:07:d1:
         08:67:70:12:3c:bf:b6:30:5d:0d:18:64:f2:70:c4:22:6e:17:
         01:b1:7f:fc:fc:21:5d:c6:1b:97:f2:69:a9:02:87:1f:6a:4e:
         7f:6c:03:ed:cd:89:1f:67:75:e8:16:e6:3c:81:1e:81:9b:e3:
         38:52:06:93:e1:ab:2f:d2:5a:17:aa:11:68:b2:8c:99:a7:c9:
         94:90:be:57:6d:3a:b2:32:6d:98:0b:7b:3a:45:d1:98:36:80:
         93:d2:29:78:6e:aa:98:35:48:b8:32:00:95:f0:ee:5c:c4:b0:
         f6:ad:b2:a5:5b:8a:53:35:e9:78:20:88:85:a7:77:84:e2:4a:
         25:0e:46:d4:c9:ac:3b:4f:3a:7f:6c:ef:39:a5:53:c8:f2:ce:
         bb:b1:88:ec:19:53:e2:d9:97:7c:6e:6b:37:7c:a1:5f:4d:e0:
         03:aa:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org