Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/449FE2BE594411EA962D7646C4F9AE02.roa
File:                     449FE2BE594411EA962D7646C4F9AE02.roa (raw, json)
Hash identifier:          sG5z5F60bRkwe2ogLmkA/1wwRb6ZeVikHH1++i6WLMU=
Subject key identifier:   4A:5B:9A:56:25:4F:33:58:17:A3:BE:3A:7D:4B:83:F5:DF:06:9E:2F
Certificate issuer:       /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial:       0A21
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/449FE2BE594411EA962D7646C4F9AE02.roa
Signing time:             Mon 18 Mar 2024 20:49:03 +0000
ROA not before:           Mon 18 Mar 2024 20:49:03 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     136464
IP address blocks:        210.24.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593 (0xa21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
        Validity
            Not Before: Mar 18 20:49:03 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f8a8bf-d1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:63:6b:bc:2a:76:0d:b5:78:8a:3c:97:ba:18:
                    c0:73:98:28:91:41:84:ad:93:72:fd:8c:b7:37:be:
                    f7:f1:c8:37:17:f5:e8:48:52:6f:ba:7e:cd:c5:96:
                    89:d0:b9:fd:b2:d1:7f:4f:d9:95:87:9a:ef:aa:26:
                    d6:1d:68:33:60:d3:29:e0:23:30:ea:29:dc:9b:af:
                    29:4b:95:c8:d5:d4:b2:2c:84:e7:10:77:7e:5f:df:
                    07:d0:36:04:b1:40:76:86:13:7f:45:84:3c:8e:f3:
                    5d:54:1c:84:45:03:3e:b3:75:86:b6:31:a9:3f:bd:
                    e0:e9:f3:7e:e5:dc:20:92:18:98:97:5d:4a:5e:af:
                    cb:10:5f:0f:55:6e:97:75:15:3d:51:6e:46:a6:86:
                    83:a1:df:9e:d9:9d:cc:ad:cc:5b:8f:67:60:21:f0:
                    55:72:e6:98:7d:4a:63:04:b0:6b:69:1b:c2:9a:4f:
                    b7:68:fd:5d:41:e0:35:1b:04:ee:76:38:31:12:f0:
                    17:1d:94:63:d5:78:bb:bb:8d:42:b3:a8:ab:94:29:
                    e4:19:e1:14:47:d0:fb:9b:20:db:2b:5c:7c:96:d0:
                    39:5b:f2:83:25:5f:07:65:3f:cc:ce:a1:c3:a4:6d:
                    cc:16:99:3b:da:25:b8:b2:dd:25:71:bf:23:6e:fc:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:9A:56:25:4F:33:58:17:A3:BE:3A:7D:4B:83:F5:DF:06:9E:2F
            X509v3 Authority Key Identifier:
                keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/449FE2BE594411EA962D7646C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.24.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:d1:7e:ab:1b:0b:c3:cf:d4:9a:2c:e1:47:b9:10:5c:fa:
         a4:92:98:b9:d2:8b:5e:f1:2b:e3:e1:e7:73:69:26:14:64:fd:
         fe:8a:9a:cb:63:e4:72:3e:c9:a0:f0:9b:57:4f:88:f6:c9:22:
         27:17:81:26:d8:1a:c5:d6:27:f3:50:19:44:e9:cc:51:40:25:
         d1:93:10:b6:ce:1d:c8:16:e7:78:00:34:26:82:c5:7f:14:02:
         db:62:6b:58:00:11:fa:e6:f5:52:90:41:55:ca:ff:7f:56:aa:
         56:49:ff:f2:9d:b0:93:98:94:b6:24:d3:dd:15:38:64:5d:77:
         08:9f:ef:da:e2:12:0b:7a:dc:8a:c9:37:dc:25:69:a0:69:a5:
         35:8a:86:e1:5f:7a:e5:47:d1:21:2a:68:ad:08:6f:ef:40:40:
         e4:03:8f:aa:5f:71:cb:b6:1a:e2:d8:c3:c0:87:5e:71:99:52:
         d9:8c:28:3c:3b:8a:0c:a4:8e:e2:a7:20:87:cd:c2:c4:65:c1:
         ec:f5:cd:9b:d0:6d:6c:00:2f:da:aa:33:bc:98:b6:02:a4:cd:
         41:40:3f:f2:df:3d:9f:6e:f0:7d:6f:33:da:e2:09:9b:67:f8:
         68:6b:53:79:2d:32:a1:9b:de:a2:52:9b:07:6c:e4:9a:df:0d:
         fa:97:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:22 2024 by rpki-client on console-fra.rpki-client.org