Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/F87F8298554311EBAAB65382C4F9AE02.roa
File:                     F87F8298554311EBAAB65382C4F9AE02.roa (raw, json)
Hash identifier:          hVj3Ilk8pVDIdjAHpBUPsisSqaw/aOgefgORY3UhV4s=
Subject key identifier:   F6:AE:FE:28:7D:B1:D8:0A:18:7A:D7:20:2B:58:53:0D:97:35:EA:A4
Certificate issuer:       /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Certificate serial:       057A
Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/F87F8298554311EBAAB65382C4F9AE02.roa
Signing time:             Sat 22 Jul 2023 23:00:20 +0000
ROA not before:           Sat 22 Jul 2023 23:00:20 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     1221
IP address blocks:        202.74.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
                          rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
        Validity
            Not Before: Jul 22 23:00:20 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64bc5f83-c9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:fa:02:2f:b6:38:2a:46:13:33:03:50:90:
                    83:48:f5:b2:74:4d:e6:43:07:2f:08:cc:e7:70:c3:
                    6d:4d:f4:2c:e2:e0:1b:ba:45:0a:bd:c9:98:c9:a9:
                    76:5a:ce:0e:db:7e:aa:b7:47:33:0f:bc:f6:99:bd:
                    c1:63:72:73:82:bc:99:6b:4f:85:77:f4:0c:2f:f2:
                    fe:52:94:f8:37:f4:3e:26:f1:d3:35:41:33:29:7b:
                    51:8c:df:6b:15:58:05:f7:9e:ee:fa:69:c1:ec:11:
                    fa:c7:33:f3:60:3e:c3:05:e5:65:91:54:d5:e2:3e:
                    1e:99:a3:e2:b8:a5:cd:b6:14:ac:8a:d9:7f:99:c2:
                    da:87:18:29:f2:eb:25:bc:fd:07:1d:d5:89:08:da:
                    ac:a0:49:a7:9e:b4:bd:38:91:59:68:f8:a9:fc:9a:
                    41:6c:29:fe:73:50:e5:f3:a4:74:93:af:12:32:f0:
                    46:11:12:02:c4:b5:3f:0b:e8:f9:a6:49:df:8e:7f:
                    ae:a2:c9:32:14:f3:af:9a:80:a8:60:8b:9d:8b:53:
                    7f:14:14:d4:4c:90:e5:e1:71:16:52:7d:3a:fb:38:
                    ac:0a:41:87:9c:4a:a0:3a:bc:ba:e9:ce:ba:d5:2b:
                    e1:89:c8:f6:0a:ab:ea:d4:b6:28:61:2d:42:d1:27:
                    49:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:FE:28:7D:B1:D8:0A:18:7A:D7:20:2B:58:53:0D:97:35:EA:A4
            X509v3 Authority Key Identifier:
                keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/F87F8298554311EBAAB65382C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:38:0a:9a:ed:c3:4e:8a:c3:7f:5d:5a:d7:c0:e3:ab:61:
         7a:f0:34:2a:2c:e2:d1:65:4e:17:7a:53:4a:35:9b:56:64:90:
         ef:fc:4f:57:a9:74:30:63:0c:bf:5e:87:62:14:a1:87:48:6e:
         a7:e5:eb:3c:a9:d3:6a:13:ed:ed:5d:3f:22:a7:06:68:9a:c2:
         64:02:48:c7:31:02:d6:0c:41:d5:29:d7:d1:90:74:b6:09:4a:
         12:6d:dd:23:e0:04:da:0e:98:57:7a:60:e1:e1:90:7e:f7:c1:
         0c:12:67:9d:12:07:9b:df:15:ea:2c:a8:6c:1d:e6:fe:49:35:
         e9:ec:75:9e:60:c3:e5:2a:e1:1e:45:b3:9e:90:fc:a0:25:ac:
         b1:2a:a9:56:54:0f:f6:94:dd:d0:1e:d7:85:51:46:f9:b3:cb:
         35:cb:95:77:f3:e4:28:a0:1e:b5:18:b5:89:e3:2e:cb:25:82:
         d6:07:5e:ba:d7:4d:4f:6b:c8:16:39:94:f4:a7:98:5c:67:00:
         b0:2e:b1:49:15:44:ca:aa:69:bb:99:01:11:99:9e:bb:b7:ef:
         2a:bb:d9:a8:5d:6c:f1:f9:11:fe:99:dc:23:f1:05:ae:b6:1f:
         e3:03:9e:3a:50:76:24:f5:e4:c4:37:52:92:b1:ae:67:97:0c:
         da:c2:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:20 2024 by rpki-client on console-ams.rpki-client.org