Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
File:                     8146430A45BE11EF92C29882C4F9AE02.roa (raw, json)
Hash identifier:          t0r89bYo/YLfBIznDm5VJcksHUIZupXS77KseDePVYw=
Subject key identifier:   26:A3:B8:9B:7E:6A:51:5F:D7:83:FD:A8:1E:CC:E2:43:95:0A:1D:85
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       341B
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
Signing time:             Sat 02 Nov 2024 15:21:22 +0000
ROA not before:           Sat 02 Nov 2024 15:21:22 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     55296
IP address blocks:        202.70.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13339 (0x341b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Nov  2 15:21:22 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67264372-5eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:e1:85:db:d7:b5:01:15:81:3f:00:7e:60:
                    68:2a:2b:8c:5d:77:f6:7b:33:65:df:1d:76:11:5c:
                    c9:bd:ed:5a:be:08:cc:37:06:41:4d:e7:08:e1:06:
                    88:ce:bc:f1:58:25:46:ad:23:41:27:43:e5:22:27:
                    02:0a:11:20:e1:a1:af:38:4a:41:0a:dc:18:c1:b6:
                    09:12:9a:56:ec:f8:29:37:a7:ea:7d:39:0c:52:67:
                    db:7b:90:22:b9:60:b1:8f:8c:d0:41:92:63:25:19:
                    95:83:36:fc:55:48:38:61:b2:e5:0f:37:f8:03:ca:
                    92:44:6c:05:e8:60:f8:14:cf:10:a6:d9:bc:16:73:
                    45:80:5f:b5:2c:40:cf:e1:87:1f:81:17:eb:c9:00:
                    6e:a5:9b:fd:d3:cf:2f:18:43:c2:5c:79:c4:a2:60:
                    df:1a:42:6b:08:f5:e5:b2:0b:3f:1b:57:fa:59:63:
                    fb:23:52:53:99:2a:61:56:b4:79:ad:13:88:c4:18:
                    75:d1:eb:3c:76:66:86:20:5d:1a:46:3e:ea:87:10:
                    5f:b0:96:06:d7:d5:31:fd:a4:43:eb:bf:c5:45:0a:
                    d8:89:53:b3:c0:f5:58:e4:2e:1a:b4:4a:4a:f3:cb:
                    71:18:96:0f:4f:fa:e2:33:03:a2:36:ad:dc:99:09:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:B8:9B:7E:6A:51:5F:D7:83:FD:A8:1E:CC:E2:43:95:0A:1D:85
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/8146430A45BE11EF92C29882C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:23:0f:2b:ec:19:0d:c2:96:fa:ea:c8:dd:c3:0c:70:ff:94:
         7e:dc:d8:10:64:1a:7a:26:8d:5b:90:fb:d6:8d:8a:9d:5a:e1:
         41:9a:f6:1a:fa:07:87:43:5a:21:cc:54:0a:76:85:88:b3:be:
         a9:0d:0e:0e:85:8b:2e:4f:e5:ba:ab:84:fb:33:60:f7:52:40:
         5e:d4:8f:1c:55:a8:57:c1:50:ea:e7:75:4c:94:9b:90:31:d3:
         37:f2:9f:88:ee:41:2a:e4:7b:3b:ab:42:ee:31:0d:db:22:74:
         aa:0c:e9:43:ff:f9:b6:ff:d0:cd:2b:d2:a7:df:5f:18:0d:e8:
         32:8b:15:b8:ba:c7:cb:12:f7:af:99:df:44:6f:a0:61:1a:b2:
         4a:bb:11:2c:c1:5e:c1:64:36:32:72:2b:f5:ba:77:b5:ea:a0:
         7d:89:d7:7e:6d:53:65:aa:ae:7d:d5:02:e5:d7:5e:cf:22:3d:
         30:bd:70:52:c1:4d:0a:9c:d8:48:a5:ec:11:8c:7a:77:5b:48:
         37:7c:f5:6d:63:61:ea:c4:ae:05:dd:06:9e:17:8b:06:97:77:
         7b:b2:8c:f6:1f:ea:fd:bb:b7:cf:51:d7:ae:c6:c4:84:67:1b:
         c4:dd:4e:d7:62:e7:71:d1:19:0c:39:56:3d:14:d5:9f:15:fb:
         8a:7a:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org