Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AD60B660A30511EFA9623C0AC4F9AE02.roa
File:                     AD60B660A30511EFA9623C0AC4F9AE02.roa (raw, json)
Hash identifier:          AlYP2o91/054V1dH8Prh6L75X0gelWopUq9RGU3NtLo=
Subject key identifier:   9F:3C:44:0D:C7:1B:40:3D:F2:F4:10:8F:9B:C5:76:D0:2B:B1:54:BA
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       481B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AD60B660A30511EFA9623C0AC4F9AE02.roa
Signing time:             Fri 15 Nov 2024 03:57:05 +0000
ROA not before:           Fri 15 Nov 2024 03:57:05 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     23999
IP address blocks:        202.6.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18459 (0x481b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 15 03:57:05 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6736c691-4507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:77:09:c2:25:53:5b:82:cc:ef:09:e9:1c:
                    7c:7b:b0:2f:e6:9a:99:d9:d0:63:32:10:f7:7f:6d:
                    69:fc:02:fa:3b:04:b7:81:a9:8e:e8:b1:0d:c1:7e:
                    5d:f3:de:60:ff:86:39:d5:f7:05:af:09:97:da:78:
                    70:45:1b:40:59:7f:8e:94:64:6e:e2:54:db:d4:90:
                    50:e0:2b:9b:94:37:ec:d6:85:5a:41:a5:8f:b4:ff:
                    05:7e:1c:d2:fc:f4:42:8d:33:88:41:a8:cf:c1:5a:
                    38:6b:22:89:ff:60:f2:54:94:41:23:7d:95:b1:28:
                    65:d8:25:db:ed:b5:74:47:76:c4:0f:8f:33:17:a9:
                    a6:a9:ae:37:8b:25:75:42:14:a7:6f:e5:ce:4f:fc:
                    55:fe:0d:a7:cf:bb:12:e5:ad:16:d2:56:a7:53:ec:
                    d6:ca:46:b2:9a:37:19:62:b7:65:63:72:1d:32:36:
                    6d:56:64:0e:c5:57:58:5b:e1:9a:1b:cb:c5:c9:8c:
                    c8:25:9e:fa:4a:75:99:92:69:1a:ee:4b:a5:05:4b:
                    44:eb:51:de:78:63:bf:a6:4e:1e:c9:29:c2:8f:03:
                    bd:c5:ee:64:b8:fc:ce:0c:6b:5d:e3:9e:53:be:49:
                    5b:db:c8:d0:9b:a4:16:9b:e8:3a:7c:15:06:a4:72:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3C:44:0D:C7:1B:40:3D:F2:F4:10:8F:9B:C5:76:D0:2B:B1:54:BA
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AD60B660A30511EFA9623C0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:57:86:e2:bf:ef:35:f0:d0:d8:b3:19:b8:92:ac:9b:ce:
         f2:8f:f3:0f:39:69:87:ec:67:08:e2:c6:12:4b:cc:1a:df:e8:
         b5:86:66:17:53:d3:ec:d2:52:a3:af:d3:a6:8b:e3:27:d5:06:
         ae:4f:7f:fa:0f:08:28:74:ca:ba:3c:97:14:89:a7:d9:63:dc:
         c0:04:42:27:6f:52:89:30:56:98:a6:07:47:37:60:1d:70:4c:
         45:0c:bc:c2:ea:52:73:63:1f:57:0d:9e:2e:ba:d8:eb:bc:d4:
         28:dc:19:75:52:4c:ea:b6:59:1d:c6:48:89:b3:91:c8:a0:76:
         51:86:26:b4:c4:b5:94:06:38:46:29:fa:ad:49:81:6b:e3:6e:
         1d:b5:17:8c:39:c5:e1:4b:79:aa:14:4d:4f:e3:8b:19:b5:7d:
         2c:cf:6f:82:b1:c9:1e:69:e7:d1:d6:fc:23:12:d7:47:89:f1:
         87:19:e9:0a:86:a7:fe:4a:ab:32:ac:c3:22:aa:34:92:ee:90:
         b0:e9:2d:ec:70:ff:3c:b5:65:74:11:29:53:59:07:86:8e:5d:
         1e:12:52:72:6b:30:4f:d0:5e:61:89:76:2d:b1:f6:8d:61:50:
         3c:a8:d1:be:5b:83:75:65:d6:e8:fd:e2:03:9d:20:c0:08:0e:
         e5:ee:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org