Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/B94E87EAD44911ED88A2367FC4F9AE02.roa
File:                     B94E87EAD44911ED88A2367FC4F9AE02.roa (raw, json)
Hash identifier:          PPDLVXPQl6XurgAduiHqWzb+gvCQg2TVIT5HxoU2C6Q=
Subject key identifier:   F8:73:CB:B1:3E:3B:22:9A:0E:55:AC:B3:5D:23:33:1E:BD:5E:86:71
Certificate issuer:       /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial:       62
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/B94E87EAD44911ED88A2367FC4F9AE02.roa
Signing time:             Mon 09 Oct 2023 04:56:21 +0000
ROA not before:           Mon 09 Oct 2023 04:56:21 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     131225
IP address blocks:        202.1.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 06:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
        Validity
            Not Before: Oct  9 04:56:21 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=652387f5-9e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:de:5e:43:d9:8f:02:f2:3a:89:49:ba:41:
                    88:c4:22:07:db:32:bb:03:26:c4:95:23:a4:b8:75:
                    7a:53:3f:5f:a5:16:6a:ef:4d:64:db:79:59:e5:8e:
                    52:05:61:ec:6b:32:e9:d0:30:93:52:0f:f7:fe:07:
                    0a:39:34:9b:18:26:63:28:88:70:6b:65:fa:df:c5:
                    77:5d:d3:89:8d:7f:ee:0a:2a:bc:9c:40:b2:6a:f8:
                    e9:13:68:d4:2e:59:c6:61:e6:fb:fc:a6:2d:d5:fd:
                    b1:a6:91:47:46:9f:66:a4:4f:32:99:8e:61:c2:41:
                    f9:1f:ce:0d:04:e5:8d:69:ca:9a:c8:37:4b:7c:50:
                    d1:b1:87:7e:9b:a4:fa:20:fa:81:ec:14:2f:5d:4e:
                    40:a5:12:30:c0:7b:d2:e5:df:12:1d:b6:43:96:53:
                    2f:66:61:65:82:8e:79:5e:ee:02:0c:c0:36:4c:07:
                    3e:20:6a:20:8a:db:02:0c:dd:43:aa:e4:2e:98:8e:
                    88:2a:f8:fc:3b:aa:df:8c:b0:22:61:f3:35:77:c3:
                    fb:38:0b:65:06:bb:e6:47:c7:bd:89:df:7c:61:09:
                    11:d7:21:4b:74:0a:1e:20:10:ed:58:fc:67:6c:4a:
                    a6:10:54:be:bf:6b:21:3b:43:69:98:81:f4:c8:ce:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:CB:B1:3E:3B:22:9A:0E:55:AC:B3:5D:23:33:1E:BD:5E:86:71
            X509v3 Authority Key Identifier:
                keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/B94E87EAD44911ED88A2367FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:f8:b9:d6:ef:89:72:37:fc:0a:eb:19:44:f4:17:19:4e:
         5f:c9:14:c1:ca:40:52:db:7d:03:0c:66:a2:80:44:b1:d4:73:
         21:eb:d0:c9:06:91:eb:9d:94:3c:fd:de:5c:d6:84:6f:e7:f2:
         91:a7:d0:83:10:54:13:99:31:ef:f0:79:a5:49:57:d3:1e:47:
         a2:c8:d9:36:d2:e2:54:da:6c:21:77:3c:7e:6d:3f:42:64:a5:
         66:38:ab:2a:1f:50:27:b8:c7:b5:50:33:38:5e:05:08:e8:43:
         c8:0f:9a:ad:32:e6:a1:5a:87:23:30:37:ef:0e:8c:cb:bb:49:
         0d:8b:ba:05:d3:c8:56:9a:6e:e4:a6:a7:85:ba:cc:09:3c:e4:
         7b:9a:6d:15:fd:68:c4:22:77:35:65:a5:05:90:62:8f:61:a4:
         9e:d7:97:41:cf:93:60:68:bd:ab:74:67:c3:cf:a8:59:11:6d:
         ab:07:cd:89:78:68:3a:78:0c:2b:89:18:00:9d:36:c5:4e:fa:
         7b:65:03:52:8b:fd:45:eb:28:4d:91:70:b7:75:19:14:83:e2:
         69:09:f6:9e:1d:6e:64:f0:42:a5:6e:11:40:39:30:10:ac:5c:
         43:68:b1:13:12:e9:8a:b0:4a:02:d4:54:91:63:86:32:08:86:
         ac:ae:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 08:08:03 2024 by rpki-client on console-ams.rpki-client.org