Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
File:                     02F57BD252E711EC931DB95CC4F9AE02.roa (raw, json)
Hash identifier:          xKAp7QQZzvPcKaqeA8FNrW0vD6RfKP6sFaIFenq6yOk=
Subject key identifier:   6D:DE:78:BB:16:30:41:06:3B:3E:7A:3D:4D:5E:00:C6:72:B2:50:15
Certificate issuer:       /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial:       0332
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
Signing time:             Sat 05 Aug 2023 01:42:40 +0000
ROA not before:           Sat 05 Aug 2023 01:42:40 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     36776
IP address blocks:        202.92.192.0/24 maxlen: 24
                          202.92.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
                          rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 02:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
        Validity
            Not Before: Aug  5 01:42:40 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cda90f-1578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:b6:0b:39:54:a5:8a:ce:05:c2:b7:ea:4d:
                    27:66:2e:25:16:c2:bc:60:0c:b5:9a:5a:f5:9c:f9:
                    49:c7:89:39:49:30:ee:23:ea:ef:5d:13:1e:6d:5a:
                    7d:4a:41:7f:8e:6b:29:35:b1:88:72:e3:10:40:a7:
                    5f:9e:65:c5:c2:15:aa:d3:9e:0f:2a:17:c9:d8:ea:
                    89:36:3f:18:79:31:e8:37:e5:5c:72:d6:61:b7:91:
                    03:63:23:d3:19:d8:da:c7:06:4e:24:be:03:8a:74:
                    85:c8:a3:b5:05:21:8c:dd:d6:25:7e:e7:5a:59:4a:
                    a9:e2:b3:8a:37:c1:bb:81:43:75:52:8a:da:f2:1e:
                    25:4b:77:af:76:d5:ff:da:54:87:8f:b6:35:28:3c:
                    49:34:c8:20:c1:d9:32:fb:dc:ca:8b:49:92:0d:e4:
                    40:21:b9:78:72:59:76:a8:53:34:e4:5b:1f:15:e2:
                    3e:d4:99:79:00:9f:9d:86:8a:91:be:55:d6:47:04:
                    6f:dd:7b:92:ce:35:b2:f6:64:fb:60:1d:6e:28:69:
                    d5:a4:24:16:b0:69:d2:b9:af:78:dd:3e:58:c5:f3:
                    a8:d7:ba:f9:1a:9d:65:7a:f7:29:8a:d8:13:bf:d4:
                    68:9a:9d:01:4e:c3:1d:7d:00:87:ab:f3:b3:de:45:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:78:BB:16:30:41:06:3B:3E:7A:3D:4D:5E:00:C6:72:B2:50:15
            X509v3 Authority Key Identifier:
                keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/02F57BD252E711EC931DB95CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:e8:49:ef:89:05:f6:39:69:1c:78:4d:be:d5:b1:1d:23:
         8e:de:f3:8e:0d:21:55:ec:c1:fa:c9:37:94:85:19:f2:3f:3e:
         c5:20:83:67:1a:18:cb:e5:43:42:90:5e:65:1b:92:7f:c3:42:
         9e:15:22:32:27:9e:2e:e0:5a:eb:9e:c5:d7:c4:d7:76:b0:50:
         95:46:83:0d:96:9f:9e:62:3e:e6:a6:32:a0:76:07:41:75:35:
         ea:ee:44:01:9b:20:df:bc:6d:6f:53:10:f9:0d:b7:c1:4b:33:
         7c:a8:fb:13:57:5e:9f:c7:9e:d9:b2:96:92:8d:8a:35:c6:20:
         b7:1c:ef:1e:ef:08:d4:17:7d:17:54:52:2f:7a:b1:3b:e3:ba:
         77:80:8f:da:c1:c3:f5:69:f7:fc:2b:b3:c8:fd:b9:d6:a1:6f:
         c6:3d:a2:0c:c9:8a:df:ba:6d:50:f9:68:8d:5d:df:98:45:fc:
         f6:b2:3b:2d:8a:b1:f6:5b:6e:ad:2a:83:32:3f:25:49:a7:33:
         91:f0:16:f5:a3:e2:c1:52:10:21:e4:91:b1:d0:4b:a4:98:f5:
         c6:90:c4:00:ac:37:34:d4:32:db:37:b7:4a:d4:04:9b:e2:8c:
         a8:32:fd:2f:6e:cf:30:60:1a:6e:94:20:d1:c2:9a:f0:da:2d:
         2a:d2:6d:25
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx
OTAwNzE1RUQwHhcNMjMwODA1MDE0MjQwWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNkYTkwZi0xNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqf22CzlUpYrOBcK36k0nZi4lFsK8YAy1mlr1nPlJx4k5STDuI+rvXRMebVp9
SkF/jmspNbGIcuMQQKdfnmXFwhWq054PKhfJ2OqJNj8YeTHoN+VcctZht5EDYyPT
GdjaxwZOJL4DinSFyKO1BSGM3dYlfudaWUqp4rOKN8G7gUN1Uora8h4lS3evdtX/
2lSHj7Y1KDxJNMggwdky+9zKi0mSDeRAIbl4cll2qFM05FsfFeI+1Jl5AJ+dhoqR
vlXWRwRv3XuSzjWy9mT7YB1uKGnVpCQWsGnSua943T5YxfOo17r5Gp1levcpitgT
v9Romp0BTsMdfQCHq/Oz3kUSRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3eeLsW
MEEGOz56PU1eAMZyslAVMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2
RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvMDJGNTdCRDI1
MkU3MTFFQzkzMURCOTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKXMAwDQYJKoZIhvcNAQELBQADggEBAA2G6EnviQX2OWkc
eE2+1bEdI47e844NIVXswfrJN5SFGfI/PsUgg2caGMvlQ0KQXmUbkn/DQp4VIjIn
ni7gWuuexdfE13awUJVGgw2Wn55iPuamMqB2B0F1NeruRAGbIN+8bW9TEPkNt8FL
M3yo+xNXXp/HntmylpKNijXGILcc7x7vCNQXfRdUUi96sTvjuneAj9rBw/Vp9/wr
s8j9udahb8Y9ogzJit+6bVD5aI1d35hF/PayOy2KsfZbbq0qgzI/JUmnM5HwFvWj
4sFSECHkkbHQS6SY9caQxACsNzTUMts3t0rUBJvijKgy/S9uzzBgGm6UINHCmvDa
LSrSbSU=
-----END CERTIFICATE-----
Generated at Fri May 17 03:52:21 2024 by rpki-client on console-ams.rpki-client.org