Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
File:                     16C1510E310711EE8328F181C4F9AE02.roa (raw, json)
Hash identifier:          trP7B45/DlDHDIgNDVOVbjedY2D8psgfhXtS/4UA2n0=
Subject key identifier:   B3:FB:D5:22:4C:1C:38:4C:3C:9B:01:03:FE:2B:E9:F0:5B:57:2C:22
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0148
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:24 +0000
ROA not before:           Mon 03 Jun 2024 06:55:24 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     397423
IP address blocks:        202.126.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  3 06:55:24 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d68dc-6241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:95:2f:7e:ea:59:74:f6:42:4d:1d:85:bf:
                    19:97:8c:9c:da:a1:99:a5:20:b3:60:15:e6:46:06:
                    f5:66:02:4f:d2:77:07:ad:51:9a:89:37:c3:84:f1:
                    45:5f:c0:82:a5:64:e6:3e:ad:03:74:1a:0c:95:d9:
                    05:b5:09:b2:fc:7d:2f:88:3c:98:00:97:f0:5f:1f:
                    ae:35:f1:8a:c0:93:d7:e7:8b:d8:d9:c6:95:53:48:
                    41:81:c3:3f:b4:3f:45:df:d6:6c:6a:38:c8:85:e1:
                    af:f5:05:d5:db:4b:4d:6f:47:0f:7f:d9:6d:25:1e:
                    ec:51:ea:44:22:29:00:35:e1:ff:54:2b:b9:46:71:
                    04:c4:df:cc:1e:7c:2c:6b:04:9d:22:26:42:c2:c7:
                    5c:9e:71:d5:fc:59:8e:4a:bf:3f:b9:cb:fe:58:7d:
                    e6:37:bb:35:fc:90:f7:a0:78:a5:5b:67:80:b5:6f:
                    6e:9b:d9:e4:eb:68:9c:38:e9:3c:61:6f:46:31:00:
                    25:c8:58:6d:7d:80:41:dc:a2:6a:28:5b:35:8b:5a:
                    43:d3:71:9e:50:e4:6c:e3:c2:74:33:6a:e0:84:70:
                    40:96:80:b5:6f:8a:3e:ba:aa:47:f4:f7:6f:95:f7:
                    14:31:ac:b9:01:a1:9d:b3:ee:a6:e1:d1:98:13:bc:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FB:D5:22:4C:1C:38:4C:3C:9B:01:03:FE:2B:E9:F0:5B:57:2C:22
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/16C1510E310711EE8328F181C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:24:88:d0:99:a8:a0:c4:50:9d:6b:77:3c:a3:26:8e:4a:
         2d:14:df:47:d5:61:6e:8b:33:5b:8e:c0:80:9f:db:4f:21:85:
         e5:2e:5f:4d:08:8a:d5:a5:9d:c0:f3:ee:0f:a9:c0:7c:c0:61:
         99:42:6c:cf:67:b8:89:4c:54:7a:12:f5:52:13:b8:4e:e3:53:
         d5:93:e3:46:d9:fe:6f:89:ad:b7:95:8b:a2:5f:a5:1a:0a:b0:
         44:14:4a:e5:30:6d:ed:b1:7d:f0:71:fa:4e:1f:26:8f:70:e8:
         54:cb:4e:cc:a3:8d:f2:10:b7:37:71:3a:c5:4b:df:46:7e:53:
         48:67:1e:7e:bf:6d:91:83:39:db:1d:9f:4d:a9:19:fc:a6:3e:
         61:e3:2c:9d:05:60:83:8e:0a:04:ec:2d:cd:b3:25:1c:72:c6:
         73:38:30:8f:73:44:d3:c5:91:ae:af:84:51:8b:0c:05:71:75:
         28:0e:17:8e:21:41:1f:d6:7c:0f:5f:8d:e6:a9:1c:3d:15:10:
         e5:9c:88:6f:25:15:b1:d7:13:be:2c:c5:19:8c:12:49:fb:50:
         a0:c7:e9:d5:f7:8f:73:b4:ff:60:68:bc:6e:1a:56:42:62:11:
         2d:3f:54:aa:22:a7:a1:bc:4e:5e:57:0d:73:95:ba:8b:aa:77:
         d9:e9:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org