Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
File:                     F9350C3C326B11EEA39EA051C4F9AE02.roa (raw, json)
Hash identifier:          l6IS2kpgAAlvqNFhAN1P6ZblqySzuWpYTnlUWX9CEl8=
Subject key identifier:   AD:68:A6:7E:74:68:2A:5F:43:04:0C:A7:8C:48:6A:BC:F9:5F:7D:1C
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       014D
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 06:55:29 +0000
ROA not before:           Mon 03 Jun 2024 06:55:29 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        202.126.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Jun  3 06:55:29 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665d68e1-e361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:77:be:b8:35:d3:cc:0e:8d:66:ba:ed:4c:f0:
                    08:fe:f1:78:13:05:30:35:be:78:d6:a8:e7:e9:f4:
                    2d:bb:e2:54:0d:dd:fd:f4:a4:c7:48:b2:05:d5:69:
                    d6:e5:8b:82:12:36:ab:4a:15:57:f7:62:92:a1:32:
                    90:94:70:7e:16:6f:ab:49:64:d9:b5:36:83:11:79:
                    d3:3a:02:dd:d6:d4:fa:f7:48:ce:48:65:19:fe:d8:
                    a4:29:a1:7a:75:cf:db:6b:19:7d:0c:2a:80:92:10:
                    0a:5a:4d:c3:32:77:47:7a:a4:5a:a4:e9:b3:70:7c:
                    9e:31:c8:e4:66:71:de:b1:e2:80:51:00:ab:d1:d4:
                    c2:07:a4:52:34:8e:ff:b5:1f:e4:69:4c:55:47:38:
                    5a:c2:fe:8b:94:fc:4d:08:3f:6b:08:ac:75:fb:f1:
                    25:9c:55:14:a9:e3:4c:bf:3d:14:27:10:e5:15:80:
                    8c:56:af:60:e7:c2:6f:29:3d:f8:0a:05:17:1e:d9:
                    c9:36:cf:04:24:ef:cb:95:75:5d:9a:25:b8:af:ce:
                    b4:99:b7:50:ef:bf:13:48:ef:a4:be:9c:40:4e:d1:
                    63:54:c0:15:ce:40:51:01:66:93:d7:ea:99:5e:f4:
                    e3:c9:b4:dc:59:65:5f:56:54:98:c8:0f:1c:d6:7f:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:A6:7E:74:68:2A:5F:43:04:0C:A7:8C:48:6A:BC:F9:5F:7D:1C
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/F9350C3C326B11EEA39EA051C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:5f:3e:22:44:f3:b2:9c:64:b5:c5:95:bd:fc:5c:49:71:
         36:79:1b:ad:22:7f:50:d5:df:fc:e1:83:6d:80:c8:1c:a2:40:
         89:29:0d:38:fb:77:00:6d:e0:12:be:cb:ab:4d:a5:1d:45:03:
         c2:b1:0e:fa:27:3a:cf:e1:38:a8:69:8a:d6:39:bc:5a:c4:25:
         8a:58:70:7f:ce:ae:b7:50:58:2b:8f:8b:6d:f0:2a:48:8b:8d:
         c7:7a:f9:c6:89:db:e5:e6:ec:04:84:56:4f:d7:08:21:8a:76:
         66:de:81:0d:15:65:d6:7d:61:8a:92:17:ea:f4:88:96:e9:c9:
         95:37:3b:54:ac:9d:7b:55:e7:7c:54:d2:c9:a9:78:99:13:14:
         33:45:05:33:19:8b:7e:bc:fb:fd:ae:ea:82:b6:8e:c7:6c:0c:
         b7:40:51:75:12:6a:f9:68:76:6f:82:1a:95:e4:54:b9:b0:b2:
         68:b0:48:96:c8:62:66:56:a1:72:de:a0:13:24:11:78:ef:d8:
         9b:58:7c:4a:ef:7e:2d:58:c1:a4:6b:74:4b:4b:b6:2c:37:c5:
         19:aa:ff:35:ad:f8:f8:37:4a:32:92:1a:82:a5:1c:22:0d:10:
         db:95:cf:dc:d2:00:f9:27:7e:0b:a6:17:b7:a1:2b:2e:89:49:
         0a:16:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org