Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/E69E92582C4A11EF91F6202DC4F9AE02.roa
File:                     E69E92582C4A11EF91F6202DC4F9AE02.roa (raw, json)
Hash identifier:          uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=
Subject key identifier:   DE:58:FC:7B:B7:8D:24:C2:7B:8A:96:DD:DB:CF:AD:C8:9B:F8:3D:7F
Certificate issuer:       /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
Certificate serial:       9F
Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/E69E92582C4A11EF91F6202DC4F9AE02.roa
Signing time:             Sat 13 Jul 2024 06:47:04 +0000
ROA not before:           Sat 13 Jul 2024 06:47:04 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4049
IP address blocks:        202.49.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 03:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454
        Validity
            Not Before: Jul 13 06:47:04 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=669222e8-6a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:1d:45:5e:b5:d4:3b:19:b9:cf:e0:4b:1d:
                    af:f2:80:b8:ba:df:af:33:78:eb:a7:3b:92:d5:da:
                    3e:58:85:0c:92:30:5d:3e:df:9b:b6:f0:ff:d1:a6:
                    97:e8:0c:4e:cb:c9:b5:f7:97:a9:87:03:fd:94:8b:
                    75:40:60:ff:99:b9:72:1e:82:c4:e2:96:e2:99:9e:
                    00:a4:46:a7:85:e2:69:4a:82:f0:15:f1:ae:40:8b:
                    b9:f4:43:91:8b:52:75:68:25:7b:94:3d:4d:99:d6:
                    f8:25:98:4a:b7:91:2a:84:cd:5b:20:f4:a1:03:1c:
                    0a:33:a3:86:0d:ff:79:80:c6:f8:02:5d:af:85:e1:
                    a9:69:d3:9f:69:ce:d8:9d:26:0b:ae:7e:e6:83:6e:
                    24:ce:27:94:1e:57:d5:34:3a:3f:a8:ec:a3:12:d1:
                    e3:4f:a0:82:dd:d9:b9:7d:18:62:71:06:df:41:62:
                    91:b8:91:2a:46:79:b2:d7:41:04:e3:96:23:9e:7c:
                    24:0b:90:ab:27:65:82:59:f5:d2:13:64:0c:73:52:
                    56:d2:46:56:43:3d:a7:fc:f1:db:77:59:79:d1:59:
                    8a:a1:77:b5:04:0b:7b:7f:42:c2:f0:36:85:6e:2c:
                    39:a5:94:1f:8e:d7:44:75:54:59:2e:07:92:66:14:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:FC:7B:B7:8D:24:C2:7B:8A:96:DD:DB:CF:AD:C8:9B:F8:3D:7F
            X509v3 Authority Key Identifier:
                keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/E69E92582C4A11EF91F6202DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:ab:61:47:78:07:5c:09:7d:28:1b:0b:13:4b:80:5e:ae:
         aa:6f:92:fa:dd:6f:6c:01:24:d4:f9:9a:e3:de:c3:ae:4f:89:
         df:b6:4f:47:81:77:4f:e2:4e:7c:ca:6d:e2:80:51:bc:b6:d4:
         be:4b:55:0b:2b:7c:43:3e:d3:ac:b5:28:09:72:7f:68:3c:97:
         ea:67:98:92:02:c8:73:ee:ad:ea:23:87:2e:69:45:2d:71:ed:
         a6:db:c4:01:46:73:66:30:8a:cb:a3:9c:3b:7b:ba:68:fc:6a:
         54:da:2d:3c:9a:a1:ac:e5:e3:75:be:e2:54:c7:53:2d:5c:c2:
         e8:f0:94:a4:8e:ec:62:c9:a6:07:ee:e2:04:de:ff:f4:17:c3:
         33:47:a4:3b:ed:28:29:d4:77:13:51:4d:7c:c4:e9:5d:5b:80:
         98:1f:c1:06:74:ea:33:a3:05:da:26:fa:9f:1e:2f:28:bc:7a:
         57:c8:cb:79:c4:c9:8e:6a:63:41:22:5b:32:fd:e9:79:95:72:
         b4:72:c2:ce:8a:0a:09:f8:b3:82:6b:8d:1c:a6:cb:d2:96:d4:
         0e:10:42:a9:89:61:8d:f1:ab:ca:26:7e:89:f5:16:ab:aa:d6:
         0c:5d:58:ec:39:30:81:5c:00:7e:e0:6a:7a:81:bf:b3:e2:b4:
         c5:26:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org