Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa
File:                     BBE075C6906911EF97FA0D58C4F9AE02.roa (raw, json)
Hash identifier:          FwsijiAcXJNw9uRIy+NvsVFxDP01PPqLaqodkv0G/5Y=
Subject key identifier:   75:F0:64:06:49:F5:62:FE:7F:F2:A3:03:B4:54:A9:57:BD:CE:D4:F6
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0DD5
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa
Signing time:             Tue 22 Oct 2024 11:35:27 +0000
ROA not before:           Tue 22 Oct 2024 11:35:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150342
IP address blocks:        203.90.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Oct 22 11:35:27 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=67178dff-1bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:d5:e9:d2:96:32:9d:51:5e:63:cf:98:07:
                    55:c3:93:9a:58:e7:d0:93:6b:bf:39:54:46:22:27:
                    88:21:41:b6:fb:f5:82:df:49:96:16:09:9b:62:ae:
                    f9:5c:06:07:cf:01:fe:24:b7:47:b1:b7:98:25:2e:
                    68:9d:7d:9d:e4:ba:f3:0a:79:0f:1f:bb:57:0d:ac:
                    5c:d6:b1:29:1a:9f:ab:31:06:a6:53:f7:bf:86:db:
                    ab:88:9f:c2:47:9f:06:c3:46:72:c3:06:52:20:01:
                    78:be:3c:41:65:4c:30:cf:49:dd:ca:ee:b8:7f:7c:
                    91:cd:8c:33:66:25:d4:c7:f4:8c:00:47:c8:9b:ac:
                    94:35:28:11:f1:b0:68:67:12:4a:ef:de:2d:ba:a7:
                    e1:0a:76:df:d5:fa:ef:b2:07:37:42:cb:72:0f:e2:
                    cb:8a:50:7e:59:68:eb:5c:dd:05:09:43:b9:d5:88:
                    a1:4f:74:b0:50:43:88:75:33:56:91:47:24:85:df:
                    b3:7f:92:b7:11:fd:5b:2a:83:d0:89:1c:02:44:20:
                    76:02:31:6f:c0:0d:9a:c5:9d:04:22:97:19:0f:9d:
                    de:00:37:47:f2:97:47:d3:cc:16:f7:af:bc:88:49:
                    71:14:18:05:90:b6:81:2b:31:80:85:d3:a5:4d:f9:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:64:06:49:F5:62:FE:7F:F2:A3:03:B4:54:A9:57:BD:CE:D4:F6
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.90.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:81:54:61:67:b7:b6:82:ce:0f:68:fc:79:e4:3c:4e:4c:d1:
         fa:3f:50:ae:c8:6e:43:98:21:da:2b:09:32:10:30:5c:75:50:
         f3:9b:b6:f4:96:2d:c1:35:d2:2f:4c:af:5f:63:c2:5d:e7:2c:
         d1:35:52:1a:e4:ed:6e:57:d2:07:ea:6e:c3:1d:51:d4:2c:fc:
         bc:83:e1:e7:fb:1c:f3:44:7e:4c:cf:6c:2f:0d:b7:eb:96:9b:
         32:4d:88:28:f0:59:37:26:92:f0:59:ac:b5:cb:14:e4:a7:47:
         0b:f7:e6:c2:5d:24:f6:fe:49:b7:42:16:6b:98:ab:7b:5c:09:
         cd:62:31:49:87:54:c9:75:0b:60:81:0a:9b:2a:05:6e:90:4a:
         53:5a:82:58:e6:d7:dc:ab:dc:18:a7:21:73:d8:5e:13:e3:79:
         b4:cb:b2:a9:4b:63:6a:dc:32:76:57:5a:d1:83:65:3c:ca:63:
         2d:14:7e:eb:60:5d:54:64:4a:13:69:4b:c3:ec:01:04:7d:0a:
         50:16:d3:1c:af:9d:fb:35:d5:06:21:c8:3f:2d:5a:44:ca:6e:
         d5:b3:8d:9a:0f:dd:09:71:41:02:f4:b4:49:0f:fa:d1:48:57:
         7b:69:b4:bd:0e:d3:60:05:18:ef:b2:23:a7:69:f6:67:c4:21:
         f6:7f:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org