Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
File:                     399302423C8B11EE83400D20C4F9AE02.roa (raw, json)
Hash identifier:          N2pS8ft3nrcylkyKhXMZRXSMHTWkIIpW9TlSRxcMr/A=
Subject key identifier:   14:AF:1A:2A:55:DF:0F:D7:A1:6C:0C:FC:F3:F6:41:21:C7:8A:B6:D2
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0143
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:19 +0000
ROA not before:           Mon 03 Jun 2024 06:55:19 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        202.126.97.0/24 maxlen: 24
                          202.134.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 02:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550
        Validity
            Not Before: Jun  3 06:55:19 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d68d7-d2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:a9:6d:66:53:50:33:1c:5e:b6:61:a2:9d:
                    90:53:c9:25:a1:4b:3a:69:45:d9:55:89:4d:c8:58:
                    ad:20:a0:0b:72:a2:52:4a:16:86:36:e6:54:74:6e:
                    32:7d:ec:6c:88:55:63:9c:c8:35:ec:06:cf:94:86:
                    d8:f0:fb:09:f2:10:9e:89:c3:8f:b1:2d:05:e8:b1:
                    72:9c:98:09:50:01:cd:b2:f9:ac:94:ed:25:4f:a1:
                    8f:18:5a:b2:ff:a0:c0:48:d3:e3:ed:41:eb:1d:06:
                    08:fd:d8:f4:32:f0:00:78:b4:0c:47:c2:8b:f8:d2:
                    e7:1d:d1:df:26:84:a9:cf:71:8e:8e:db:a8:2f:a7:
                    5e:a9:13:90:03:e3:db:ff:12:a8:e1:41:fc:37:0f:
                    eb:55:ae:7a:55:57:b8:48:7c:ca:1b:50:3d:4a:e7:
                    05:d9:18:d8:52:d6:b7:a9:d0:18:1b:57:76:6f:15:
                    98:e5:ee:3f:49:7e:e0:2f:a0:56:7a:22:b7:5e:a0:
                    ea:07:b1:de:c8:56:1a:84:09:97:6f:e5:05:dc:8e:
                    a5:64:01:c1:f6:da:07:bc:08:de:cb:c3:fa:fe:db:
                    18:3c:09:55:e9:d2:0e:5d:a8:e4:cb:f6:24:3c:3f:
                    86:66:d1:0f:19:17:0c:57:e3:83:51:56:f3:20:5a:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AF:1A:2A:55:DF:0F:D7:A1:6C:0C:FC:F3:F6:41:21:C7:8A:B6:D2
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/399302423C8B11EE83400D20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.97.0/24
                  202.134.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:69:4c:98:b3:7f:c5:77:c2:1c:4f:74:3a:97:83:ac:93:8b:
         78:d0:e7:d6:fb:d6:40:2f:ba:03:98:ae:b7:fe:50:18:16:3d:
         a8:bb:c9:96:bd:40:a1:88:08:03:8d:b0:65:40:d1:9c:77:a4:
         99:7b:47:d3:f0:77:3c:fd:15:d9:39:c9:19:82:8d:0c:cb:a9:
         1f:25:f7:51:56:37:8a:da:bb:02:17:d2:1c:9d:6e:17:50:a2:
         08:59:99:6a:03:5a:09:38:5c:fd:4e:dc:99:d5:63:b9:8c:8a:
         d5:dc:38:15:e4:49:e3:a5:69:7f:f1:99:7d:17:77:ab:f3:d2:
         c0:83:21:e7:08:22:b9:3c:4c:df:0e:ea:23:14:e9:97:4a:ff:
         cf:53:97:09:60:d5:cf:93:a6:73:2a:86:fb:1f:f7:e0:6d:ac:
         e0:80:bd:23:77:14:14:60:72:4b:85:6c:8d:55:98:96:98:6e:
         03:61:24:70:c5:86:c8:63:11:b1:72:db:45:f3:e6:fc:df:f7:
         73:c5:fe:cd:dc:6e:49:7d:0f:0e:94:75:cd:a1:5a:40:15:c3:
         aa:71:31:70:45:95:53:6f:32:f7:7c:84:b8:80:b0:74:42:27:
         b9:e4:36:45:be:09:38:1d:be:b7:ce:2f:d0:9c:b9:a5:e2:b7:
         73:b7:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:56:17 2025 by rpki-client