Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
File:                     4495856A8DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          a14/2406/c/Vc+e673jRH7rbdHirwb+sw7UAVsW6UA8=
Subject key identifier:   08:8A:C0:A6:45:E8:0D:D7:5E:DA:B6:76:10:B8:A2:1A:C4:85:55:DB
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       34E3
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Mon 22 Jul 2024 14:40:31 +0000
ROA not before:           Mon 22 Jul 2024 14:40:31 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     24465
IP address blocks:        202.149.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13539 (0x34e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 22 14:40:31 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=669e6f5f-6f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:28:d1:40:3c:07:9d:82:72:26:8e:fd:fd:
                    3d:eb:57:ca:7e:20:3f:5e:47:4c:81:e5:1d:29:60:
                    88:6b:e4:43:b6:d9:38:36:f9:3d:6f:85:62:c3:a8:
                    db:ee:b2:cb:54:e2:8c:ce:95:88:b2:a7:7f:b9:6b:
                    b1:fa:3e:42:ba:fe:32:64:45:89:c5:47:be:1e:3d:
                    c8:06:6f:df:68:dd:16:1f:ef:de:10:82:95:23:1e:
                    45:36:9a:64:f4:c3:31:b1:c9:d2:fc:77:9a:11:6e:
                    44:10:40:7f:61:fb:11:b6:b0:ec:79:71:29:b4:ad:
                    17:f2:82:83:a8:83:76:59:9b:b2:4c:16:ea:c3:0f:
                    b2:45:b7:46:6e:07:05:4f:4d:91:31:c1:2d:4c:34:
                    49:d4:9c:56:2b:83:f0:3a:d3:39:5f:9c:9a:a7:02:
                    7c:a8:a9:59:a8:18:03:e1:19:6d:05:39:7e:2d:17:
                    24:3b:1d:f9:7f:14:a5:58:8a:f8:2c:ab:6c:c9:15:
                    31:e6:1a:02:ca:c0:17:35:92:a6:2e:e4:93:c5:b7:
                    ff:3a:e2:0c:15:7b:1f:df:2d:d9:6a:91:35:c2:77:
                    c6:2f:5e:d4:8d:c0:4b:ac:1b:1f:85:b8:30:0f:be:
                    82:2b:c9:b2:aa:ac:08:44:3f:ed:ba:f9:b1:80:5d:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:C0:A6:45:E8:0D:D7:5E:DA:B6:76:10:B8:A2:1A:C4:85:55:DB
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4495856A8DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.149.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:32:c3:68:b3:7a:a7:c0:f8:b1:fe:ad:29:b9:6c:e6:10:
         07:95:47:1f:91:5c:5b:dc:ce:a0:ed:89:42:1f:e0:ee:f9:41:
         e1:c8:91:07:59:5b:a4:f3:6b:ef:4d:3c:08:ea:b4:93:16:07:
         06:a6:bc:16:31:6d:10:52:ac:e2:f3:02:0a:57:ce:ab:60:fa:
         67:6c:d4:04:c2:05:89:37:52:03:94:46:62:cb:26:54:30:df:
         ed:da:25:71:94:e0:af:04:ab:40:31:80:2e:fc:9c:a1:95:28:
         61:cf:4a:1c:24:9e:38:ea:5c:ea:8a:49:cd:a2:6d:73:1b:35:
         08:69:4d:fd:c8:f9:c4:ae:3d:b1:ad:8a:93:7b:b8:e9:9f:cc:
         b7:ed:6c:f2:a4:fd:db:2e:0f:07:73:fd:62:2c:38:41:12:2b:
         2b:2f:7c:68:4a:ba:03:3c:b8:a5:ff:69:1d:21:37:50:bc:22:
         b8:1f:3b:87:6c:17:4a:d5:6a:a2:a0:72:34:5e:5a:9a:40:d0:
         f6:08:aa:d2:f3:2b:2e:6f:60:ea:a8:ed:7c:7e:54:8e:18:00:
         6f:40:9b:11:a5:97:c7:f4:61:14:77:86:e7:3a:59:55:07:f4:
         65:46:fd:27:f8:c4:96:fa:1f:81:5a:74:9c:c9:85:d3:c5:3b:
         8c:e6:9c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:15 2024 by rpki-client on console-ams.rpki-client.org