Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
File:                     CA8007604A3011EFB101441AC4F9AE02.roa (raw, json)
Hash identifier:          n0scqmjw+mL6oy2aKSd+h7xv61rcn17HzY6G2dTe7Nk=
Subject key identifier:   4B:90:18:B6:5A:CD:84:F9:DB:D7:17:C2:4A:D0:BF:DB:FC:20:69:26
Certificate issuer:       /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial:       02
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
Signing time:             Thu 25 Jul 2024 02:51:29 +0000
ROA not before:           Thu 25 Jul 2024 02:51:29 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     24074
IP address blocks:        202.49.200.0/23 maxlen: 23
                          202.49.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Sep 2024 06:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
        Validity
            Not Before: Jul 25 02:51:29 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=66a1bdb1-42bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:ba:3f:02:3f:a9:e6:c5:66:51:e8:f4:14:
                    e9:34:e4:2a:c5:82:40:8d:1b:76:8e:1d:bc:c2:11:
                    21:c3:c8:c7:3b:06:8c:b1:5e:f8:f9:04:d7:69:bf:
                    29:e9:e6:58:aa:7c:fd:e8:19:5a:3b:8e:4d:8f:f5:
                    24:1b:b2:dc:a9:5b:6d:32:9b:c4:e3:ed:be:3f:fc:
                    f6:47:0b:1b:41:6d:5e:2a:b0:29:ba:18:1f:ef:16:
                    26:7b:86:4d:ae:71:42:54:36:8c:f4:09:3a:c6:8f:
                    9d:c2:eb:78:24:bd:17:e5:13:b6:86:06:3e:a9:bb:
                    00:97:0e:b2:96:40:ce:25:e8:4b:92:b3:13:49:e3:
                    21:1a:23:ab:8d:58:c6:63:f0:a3:75:63:ec:2a:f1:
                    b7:d7:c4:2c:45:d4:41:e1:39:35:a4:61:43:bb:5f:
                    a8:41:87:17:53:df:e3:38:aa:93:fd:63:ae:4d:11:
                    b6:0c:c8:33:01:ef:e6:fb:d2:3e:a2:82:39:9c:cb:
                    68:00:58:f9:9c:89:3f:91:cc:0c:d6:48:b5:9f:54:
                    e2:26:26:ee:8c:a4:fc:90:31:dd:18:d9:ab:ce:9e:
                    15:61:1b:b9:9a:f5:67:c7:26:5e:ec:1e:4b:a4:65:
                    1c:7a:5f:b5:3f:ac:3d:fe:a6:66:63:73:3b:a7:84:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:90:18:B6:5A:CD:84:F9:DB:D7:17:C2:4A:D0:BF:DB:FC:20:69:26
            X509v3 Authority Key Identifier:
                keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/CA8007604A3011EFB101441AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:20:0d:3a:24:19:d9:67:f1:6a:53:b8:57:91:28:72:14:
         5b:d8:b7:3f:ea:90:ba:3b:b0:57:9d:84:07:a1:93:88:50:e5:
         6b:65:04:6c:24:b4:d5:7e:70:ed:43:12:97:3f:0d:4f:36:28:
         69:2a:82:97:ae:41:3f:17:1d:d9:3d:1c:da:ce:72:96:b1:8b:
         13:fc:80:e8:b4:c8:dc:c9:7b:cf:28:66:54:33:05:96:8e:60:
         36:10:d8:14:c8:db:bf:a5:64:63:a6:f4:b8:ad:a3:fe:6e:c8:
         44:54:9a:2c:ae:83:a5:64:3d:73:26:5b:33:0d:4c:d9:95:ef:
         22:35:b3:2e:72:63:18:d5:a4:97:b4:c7:de:91:dd:a1:95:a5:
         6a:dd:a3:22:27:0d:61:be:e9:89:0f:30:41:e0:f5:08:04:6a:
         fc:67:02:41:ac:73:78:2c:0a:03:6b:22:96:8b:d0:c2:37:3a:
         b7:d9:77:73:41:fc:f1:6c:0e:60:41:dd:eb:fa:f6:44:1a:0f:
         19:fe:b1:34:09:3d:5a:85:76:ce:ae:4d:be:e9:4f:32:25:a9:
         6f:de:58:e2:ef:3e:76:ce:d2:86:7f:ab:48:a3:e7:26:4a:2b:
         07:4e:07:99:e5:0a:b5:9b:eb:06:57:b0:94:8d:fe:8d:99:18:
         69:56:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 08:57:54 2024 by rpki-client on console-ams.rpki-client.org