Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
File:                     399302423C8B11EE83400D20C4F9AE02.roa (raw, json)
Hash identifier:          qQlUjz1yldrpb7YgiiTaPCeHvOKgbFccLj5wZsfrSn0=
Subject key identifier:   3E:A6:C6:67:51:68:7B:68:16:A2:FC:ED:0F:E8:7B:32:B7:36:73:1C
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       F0
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
Signing time:             Tue 23 Jan 2024 02:06:30 +0000
ROA not before:           Tue 23 Jan 2024 02:06:30 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        202.126.97.0/24 maxlen: 24
                          202.134.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jan 23 02:06:30 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65af1f26-ee9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:8b:bd:70:52:8c:56:e0:61:de:92:01:37:
                    74:80:51:8c:07:1d:18:ed:37:40:bb:6e:98:ac:af:
                    fd:26:9d:94:68:30:a0:52:06:c2:f9:57:51:37:40:
                    f7:76:65:71:76:2e:0f:79:81:65:7f:bf:d3:48:7a:
                    35:97:6e:cf:e6:5d:71:b9:05:a8:0c:c3:23:96:25:
                    1a:af:13:33:41:5e:cd:b8:a0:24:9c:fc:93:6a:8b:
                    ae:f1:e7:c8:cf:51:f5:ba:a8:7d:d5:97:4d:12:c4:
                    23:ca:d0:5f:5f:a5:97:ef:e3:d5:d5:c3:bf:1b:27:
                    7c:7e:9c:d9:69:49:59:75:81:7d:68:b6:1e:72:99:
                    f6:2b:c5:d7:d9:83:70:8b:26:61:8d:ef:18:5d:fd:
                    d4:2e:ec:b8:f3:86:69:56:e9:fd:ac:08:b7:08:63:
                    ab:c2:f4:cd:d0:fc:b5:6d:c9:0b:2a:f8:62:44:3f:
                    db:94:71:f0:10:33:b2:61:8a:f5:ff:ff:f8:8f:c6:
                    be:f0:ab:7e:08:cb:fb:7a:6e:df:b4:c2:45:1a:8b:
                    30:42:f0:1c:d9:fe:9c:94:03:48:e9:37:b3:c3:ae:
                    e5:6f:4e:0b:a6:43:1b:84:f3:ef:96:5f:5f:19:9c:
                    ab:2f:0e:d4:62:f1:d9:6e:fb:74:aa:4f:f2:63:fc:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A6:C6:67:51:68:7B:68:16:A2:FC:ED:0F:E8:7B:32:B7:36:73:1C
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.97.0/24
                  202.134.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:3a:95:f3:d3:0e:bd:6b:7d:3d:e2:36:db:07:be:06:41:
         e6:ce:53:90:70:1b:f4:a6:c9:82:36:01:6d:a0:70:72:54:4b:
         9d:39:b8:ba:61:1e:b3:1a:d9:61:6e:2c:a3:d5:93:1b:fe:b8:
         2d:c1:a7:06:12:d3:48:04:f0:c2:56:1c:71:83:64:04:ea:79:
         b1:91:58:70:d3:7a:a4:32:ff:26:07:f1:a7:c5:06:59:e2:9a:
         e3:97:c8:34:94:17:bd:27:89:e0:62:6a:4c:c6:d2:5f:55:60:
         c1:7a:fe:70:48:e7:fb:de:19:d3:77:88:f1:c5:df:43:4d:8a:
         b9:61:c8:39:03:c5:8b:18:77:44:89:f6:b9:ec:0d:ae:7f:0e:
         6f:a7:b0:87:38:5d:fb:32:a4:50:09:8c:58:e5:90:c5:6a:4e:
         c8:64:18:98:cf:8d:cc:13:ae:2d:36:fe:c3:62:69:27:f5:ac:
         3c:8d:26:08:12:78:83:a7:93:a3:d3:d5:9d:14:b5:73:d0:89:
         bd:ad:da:a5:50:d4:01:d6:2d:a8:c1:e5:78:e5:ee:3d:9b:d5:
         9c:e7:28:cb:be:b1:d8:a9:cb:74:61:df:f3:06:67:f6:03:a6:
         8a:61:80:ec:d0:15:b1:8a:a8:c9:9c:3e:f1:dc:da:6f:f8:22:
         ff:29:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:07:05 2024 by rpki-client on console-fra.rpki-client.org