Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
File:                     8247E286967711EA81018623C4F9AE02.roa (raw, json)
Hash identifier:          RuCHBWzDEGb4u8QT2BLmLE3Mq19hnt6+xwynPnruiss=
Subject key identifier:   06:D8:9E:A2:2C:7C:0A:BC:18:C8:27:D1:E0:72:DE:B9:A0:C0:C9:A0
Certificate issuer:       /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
Certificate serial:       087D
Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
Signing time:             Fri 22 Mar 2024 21:29:58 +0000
ROA not before:           Fri 22 Mar 2024 21:29:58 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     38084
IP address blocks:        203.92.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl
                          rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37
        Validity
            Not Before: Mar 22 21:29:58 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65fdf856-d52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:14:a8:34:b8:7e:4a:3f:82:f0:46:61:e4:3d:
                    16:a4:95:09:83:5b:cd:24:ac:95:19:a6:c1:1b:45:
                    03:ea:e4:14:62:17:8a:55:02:bb:1a:6f:0a:7a:b2:
                    30:74:38:cf:8f:e9:87:e2:94:e9:5a:b9:29:01:f2:
                    41:45:a6:a8:71:88:13:1f:49:6d:ab:15:b8:b0:a9:
                    3d:ce:21:6f:b4:ee:92:51:e6:c1:3a:a5:1a:ec:33:
                    42:d9:e1:15:ee:ee:95:9b:b7:8a:b0:c3:1d:03:a9:
                    cc:cf:4c:7e:33:56:e1:5e:bd:88:7a:ce:d8:e3:7a:
                    71:1c:67:d4:64:23:a8:b6:77:54:f6:25:b9:2f:2f:
                    1b:53:b8:a2:d5:8c:93:bf:55:8f:c6:a7:b2:76:9b:
                    3b:31:6b:1d:83:ee:fe:65:ff:1c:ca:aa:a9:22:a4:
                    d9:f5:1c:d4:8f:1d:eb:29:56:c7:b7:34:76:b5:94:
                    f5:ee:fe:60:9c:fb:cd:b7:ab:cf:ef:1e:db:5e:28:
                    27:b2:8e:cf:2d:7b:c0:3f:24:e7:73:7c:39:b6:00:
                    81:de:12:ef:d8:ed:d4:44:b2:d8:e5:8b:8e:d9:4d:
                    35:d3:6b:19:45:d0:35:91:19:34:e3:1e:9d:62:4a:
                    85:90:f6:28:ba:30:27:02:0e:df:a1:ca:2f:56:8f:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:9E:A2:2C:7C:0A:BC:18:C8:27:D1:E0:72:DE:B9:A0:C0:C9:A0
            X509v3 Authority Key Identifier:
                keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.92.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:87:72:12:d2:63:5e:5e:1e:12:b6:bb:7a:32:78:04:ef:
         33:fa:59:73:c4:48:31:2c:a2:2d:2b:c6:91:7d:a0:6a:3e:3d:
         f8:63:df:13:84:a0:76:fc:70:00:35:c4:7a:79:43:04:8c:d3:
         e8:bd:dd:fc:ac:5f:9b:60:be:0d:26:12:97:6b:c3:10:4d:75:
         c6:49:a5:6d:96:6b:aa:d8:8f:2b:9f:2a:ff:3b:ab:67:03:27:
         17:e1:88:de:70:6c:54:1e:9e:a8:8d:2a:ca:ce:2b:ae:5e:9e:
         6e:c0:08:1a:7d:c1:e2:bf:01:5d:7c:fd:ed:c2:7b:c9:40:31:
         4c:6d:f4:cc:1e:2d:d6:c7:64:1b:04:ab:8a:db:11:19:2a:3c:
         a2:b1:12:e9:5d:e7:3a:ef:09:76:15:c2:28:28:06:90:57:83:
         56:54:cf:a8:8e:51:90:ee:53:b0:6f:8d:04:90:7c:37:b8:ba:
         95:b4:bb:94:a7:a1:98:a2:30:fb:53:b6:73:e0:7f:a1:4e:90:
         25:b0:27:75:b2:7f:5c:58:c7:1f:38:63:e6:91:b2:ff:3b:19:
         43:bb:66:1e:9f:45:51:db:a6:b9:0e:3f:61:8c:81:82:e5:db:
         07:f6:fa:2c:ed:86:86:89:d1:67:2e:83:2c:94:76:3f:e3:4c:
         b7:95:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org