Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B6928054843011EAB4270B83C4F9AE02.roa
File:                     B6928054843011EAB4270B83C4F9AE02.roa (raw, json)
Hash identifier:          AfFQg7J3TlHD2s+ga44OATb388/m/bM7kWgvzaZnkvM=
Subject key identifier:   AB:3C:5C:D5:6A:97:07:D9:77:70:AD:99:3E:6F:F8:20:E6:A3:2A:40
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1800
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B6928054843011EAB4270B83C4F9AE02.roa
Signing time:             Fri 02 Aug 2024 17:06:58 +0000
ROA not before:           Fri 02 Aug 2024 17:06:58 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45152
IP address blocks:        203.98.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 16:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6144 (0x1800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Aug  2 17:06:58 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ad1232-1b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:94:9f:7b:4c:af:82:60:28:8d:28:93:9d:
                    12:2f:21:e6:f2:22:ec:b2:94:29:e4:3b:2e:79:3d:
                    7f:05:43:7d:47:51:0c:4d:19:f3:07:bd:e7:13:2d:
                    9b:ae:76:f3:6f:03:f3:a7:01:98:7c:e9:bc:19:01:
                    ff:31:d2:65:df:7c:e2:47:bb:80:cc:de:42:a3:22:
                    2c:6a:94:a9:97:9c:a2:36:1b:52:72:07:5e:d7:e7:
                    15:68:4d:9d:53:a8:e1:93:d3:91:20:56:46:52:d5:
                    1c:4c:6d:ef:af:e4:24:fc:e0:73:8a:78:52:06:02:
                    99:5a:0a:c8:0e:0b:93:ee:6b:59:56:e1:4c:14:9c:
                    3a:04:8e:ea:46:33:ec:de:f4:ad:d4:71:53:00:54:
                    9b:24:eb:6b:92:03:86:53:b4:ce:4a:c5:e3:d1:a5:
                    5e:07:97:f6:1f:9c:06:e3:ab:ba:a6:4f:ea:7f:40:
                    df:95:e6:ca:4d:92:98:36:d8:b9:6b:17:bb:81:39:
                    9b:36:85:b8:cd:8b:e2:86:f0:72:26:f1:1f:cd:cd:
                    60:b8:bb:75:fc:6f:98:99:05:cc:4c:f7:2b:d7:06:
                    94:aa:ae:c8:14:d3:7a:02:94:3f:49:83:55:e0:ac:
                    54:b8:c1:fa:c1:a8:07:bf:07:1b:07:a7:b8:4b:09:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:5C:D5:6A:97:07:D9:77:70:AD:99:3E:6F:F8:20:E6:A3:2A:40
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B6928054843011EAB4270B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:37:db:52:b7:da:c1:d6:a9:28:4e:30:05:55:a7:42:5f:a0:
         ab:91:c8:f0:7d:78:d0:9d:d4:9d:ea:12:0f:b5:f5:2f:4e:fb:
         9c:97:67:98:d2:a3:fb:76:9b:e1:fc:b9:db:8b:f3:f2:61:77:
         fa:37:86:3e:69:7e:1e:03:bb:56:17:67:5e:5e:b4:34:a6:7c:
         8e:78:d2:a1:3b:f7:01:3d:44:74:f1:7f:e9:d0:b5:b1:58:29:
         d3:a2:0b:10:5f:c6:bf:7d:30:55:6d:16:ed:e5:c4:62:88:ea:
         dd:12:8b:ff:ff:40:89:3e:78:b2:b3:38:0a:fb:5b:7f:f9:de:
         57:29:d0:b4:3e:6f:2e:86:b8:f1:1b:c8:d4:05:a7:79:0b:5f:
         00:fa:71:6b:55:9d:45:44:39:87:0e:55:c7:dd:f7:90:46:50:
         05:27:41:0f:a1:bf:e5:24:5b:b8:5d:dc:69:0b:18:5c:c4:4c:
         be:2e:d6:62:75:96:7a:52:7f:c4:6c:05:1a:a0:5a:5f:cc:54:
         f7:9b:8f:b2:8a:78:8c:32:3b:25:67:a4:92:92:a6:5b:42:b9:
         77:ac:48:5d:11:eb:49:fe:6f:6b:e4:a5:5e:14:1e:3c:cf:bb:
         07:91:a4:a9:22:ef:2d:56:4f:d8:12:1c:5d:47:7d:fa:44:89:
         e0:0d:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:39:40 2024 by rpki-client on console-ams.rpki-client.org