Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa
File:                     6E325DBC0E2F11EDB4659653C4F9AE02.roa (raw, json)
Hash identifier:          dO5nZq15UBNcy6JzPU4ZCXdX9MbHTyXCt1oRP1sN3wc=
Subject key identifier:   78:AD:1A:D3:9E:32:5A:16:F6:91:3F:D7:37:54:40:DC:41:3F:93:17
Certificate issuer:       /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
Certificate serial:       0588
Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa
Signing time:             Wed 24 Apr 2024 15:20:50 +0000
ROA not before:           Wed 24 Apr 2024 15:20:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7573
IP address blocks:        202.6.77.0/24 maxlen: 24
                          202.12.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286
        Validity
            Not Before: Apr 24 15:20:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66292351-70c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:51:91:6a:99:d9:41:5c:e0:76:56:bd:92:
                    79:53:0f:7c:f8:34:f0:3b:7a:dc:95:d1:86:77:43:
                    67:6a:a2:b1:86:25:05:94:37:07:95:75:24:3d:d3:
                    3a:66:0d:a0:db:ef:42:3e:8a:6c:b6:8d:6f:47:a3:
                    10:75:ae:da:46:4d:c2:1f:2b:c3:33:d7:39:c1:86:
                    4f:38:b6:5e:08:7f:4f:22:34:eb:29:df:cb:8c:69:
                    99:9b:2b:08:b2:ad:2a:0e:e8:5e:ef:5e:16:a9:cb:
                    a5:76:b0:64:83:28:b9:9e:7f:38:df:ae:ef:0f:f2:
                    99:b3:56:54:16:54:6e:3e:1d:02:4b:6a:9d:46:8f:
                    0e:51:90:35:ca:7a:bb:b1:1a:87:b3:e2:28:1d:6d:
                    8f:69:ce:15:0b:30:7e:16:cd:ac:b8:ea:84:e6:33:
                    f5:ae:d4:81:e3:78:f2:39:dc:60:fa:86:19:8f:c0:
                    88:3b:f0:93:48:f8:8b:e6:42:ab:2a:ab:75:3e:8b:
                    e4:11:d8:01:79:5d:08:32:6d:c0:e1:fe:13:18:65:
                    59:48:07:10:fe:b0:11:6a:37:e6:f5:58:ae:b8:d6:
                    ee:1a:f4:39:b2:74:6a:84:25:a0:06:a5:3c:54:d2:
                    81:8d:02:4c:e2:48:d2:c2:20:10:86:3d:28:11:59:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AD:1A:D3:9E:32:5A:16:F6:91:3F:D7:37:54:40:DC:41:3F:93:17
            X509v3 Authority Key Identifier:
                keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.77.0/24
                  202.12.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:cf:4a:0b:a3:65:aa:1f:1a:90:40:08:54:d0:7c:e9:ce:2c:
         e0:9e:9b:34:cf:e1:80:8a:de:d6:0c:50:80:fb:d8:a5:d5:c6:
         5b:a7:35:7f:a7:cf:da:a9:be:04:9f:19:2a:d1:2b:62:05:a8:
         f1:02:32:04:89:c8:53:4a:10:68:06:0f:bf:d5:b2:fd:63:d2:
         8e:df:a5:3e:b7:9e:77:5d:f7:8e:33:f2:49:34:87:52:b1:63:
         6c:db:73:df:7d:04:0a:bf:af:34:9a:2b:c2:dd:0d:b2:a4:e6:
         1e:f6:6b:45:d0:72:d9:c7:13:25:ec:1e:01:06:20:61:85:65:
         46:8b:be:9a:92:c3:86:4d:1c:d0:4c:56:a4:f6:94:25:99:49:
         df:53:d7:29:5e:bb:67:52:f2:5a:58:99:39:e2:54:f2:60:34:
         61:a9:f6:cd:a1:f1:c9:ea:fa:c2:f7:0d:47:8b:3e:81:3a:2c:
         8b:9a:98:55:c0:a4:e7:c4:b5:c6:75:d9:8e:8c:87:c3:11:d8:
         4e:4e:4b:d1:70:2b:9d:42:ec:02:46:ba:61:f7:1f:4e:e3:59:
         31:da:f9:da:f6:e5:62:52:94:ac:66:6e:7b:f2:38:5a:9b:1d:
         c0:5a:89:b1:ef:3f:35:b1:aa:8e:03:9c:d5:3e:c5:63:fd:6d:
         62:51:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org