Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
File:                     F24192CCFFED11EB93712E74C4F9AE02.roa (raw, json)
Hash identifier:          iwGaepH4141KMf4TpLbx9uErtvrVGpg9ZTREmeQXW/k=
Subject key identifier:   41:F5:A7:00:55:EE:34:9A:0E:25:05:9A:0D:40:56:A6:43:22:71:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6A79
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:14:57 +0000
ROA not before:           Wed 10 May 2023 16:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     133296
IP address blocks:        202.162.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 15:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27257 (0x6a79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc300-9e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:10:55:e9:a2:9f:d9:a8:40:c1:1f:2e:39:
                    9b:a8:fe:90:8d:95:b3:1b:c4:c5:87:b9:59:bc:55:
                    6a:3a:61:84:de:87:d5:19:39:aa:1d:e9:d8:15:e2:
                    3a:19:99:a7:be:4d:d6:00:eb:4f:24:6f:9c:8e:a3:
                    68:2c:6f:e7:9b:23:73:07:f7:82:25:e9:0b:c1:ee:
                    1a:ea:88:cc:2f:dc:c5:04:85:17:cb:59:be:13:92:
                    31:e1:6f:30:29:81:27:03:dc:48:e8:22:08:eb:a4:
                    2d:b4:7b:61:1a:b0:e9:a2:63:24:cb:65:58:4d:46:
                    d0:da:42:79:99:43:19:92:3c:af:b1:22:7b:6c:00:
                    d2:14:f4:6e:ee:9a:bf:87:51:ce:32:1f:c5:70:0b:
                    f6:1c:78:51:eb:c0:c7:13:39:9d:5f:33:4c:b2:10:
                    e5:56:5a:10:8f:ab:54:8b:02:64:67:a8:82:8b:32:
                    76:39:d0:a0:5c:b0:cb:ae:24:78:8c:14:88:10:da:
                    9a:ee:e1:fb:a1:7d:e1:41:ac:de:b1:6a:9d:ed:59:
                    bc:87:4e:4d:e4:8c:ba:2e:be:15:96:42:28:30:82:
                    ee:45:b6:01:66:ec:66:b1:fd:4c:a2:1e:48:13:d3:
                    c6:5a:66:44:df:e5:d9:85:cd:c5:cf:b2:ee:14:13:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:A7:00:55:EE:34:9A:0E:25:05:9A:0D:40:56:A6:43:22:71:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F24192CCFFED11EB93712E74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:74:70:14:5d:4d:3e:11:c7:2a:45:c4:20:63:64:71:1e:
         4d:ec:13:0a:60:28:c5:dd:82:c7:ed:58:4a:1c:08:5a:a9:a1:
         ab:62:5d:b2:55:46:f0:fb:e0:cd:7d:62:99:e5:f0:e1:48:e8:
         00:91:cf:ff:35:b1:31:68:e5:39:d8:3b:c4:26:19:8e:80:99:
         dc:41:6a:4b:29:30:a8:6c:02:ba:fb:3a:31:13:47:59:59:a4:
         17:c5:ba:99:63:c3:dd:05:fc:34:ad:92:d5:eb:9a:0a:c7:50:
         01:f5:d8:0c:14:d4:9e:81:58:04:4c:38:d8:f8:82:fb:88:2a:
         cf:23:0e:df:c8:2e:a4:c1:e5:42:bd:a8:c9:ab:76:f8:a7:6b:
         6c:85:30:29:6c:15:1a:cd:5f:81:8f:a2:f2:85:3c:25:0b:53:
         36:02:5b:c3:32:ef:28:c9:aa:91:90:e6:e9:ab:9c:99:32:89:
         c6:37:50:eb:1b:a7:bc:2a:bb:94:9b:03:2a:a6:f8:71:c7:33:
         45:0c:2b:e3:c0:b3:80:da:50:43:f4:71:f7:da:76:17:b0:5d:
         04:a6:89:bc:74:fb:69:de:9c:3f:e0:e5:98:12:08:f7:ef:a9:
         23:93:7f:f1:a6:d4:b2:e4:83:b3:73:e1:d7:6d:40:56:2f:57:
         69:f7:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org