Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
File:                     DB120D6EC34A11EB9559E184C4F9AE02.roa (raw, json)
Hash identifier:          tHohMDezcM2Z918uKGH0lOYypWieJQz8Tcbr5jbijDE=
Subject key identifier:   65:E9:17:36:CF:1F:6D:B3:C4:2D:6E:E9:14:E7:8A:EB:EE:BD:AA:53
Certificate issuer:       /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial:       0639
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
Signing time:             Sun 03 Dec 2023 00:12:39 +0000
ROA not before:           Sun 03 Dec 2023 00:12:39 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     142143
IP address blocks:        202.83.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
                          rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
        Validity
            Not Before: Dec  3 00:12:39 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656bc7f6-2e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:d4:69:04:5d:0e:78:a3:81:54:ed:47:68:
                    f4:b8:31:77:fe:c0:f4:54:2b:36:55:11:b5:c8:61:
                    f0:5b:22:40:fa:98:82:8b:8d:f1:6b:7d:9b:01:c9:
                    e7:a4:0e:42:cd:7f:11:a2:60:c4:3b:58:98:7b:9c:
                    b3:fd:77:5b:3b:cd:fb:1b:af:5e:a0:c9:82:64:f3:
                    36:36:e1:93:b6:94:e7:a0:2a:20:ea:99:70:c9:66:
                    b9:6a:c4:0f:6a:78:ac:ea:0d:2b:fd:29:86:dc:df:
                    d0:68:49:1b:35:41:cb:58:6c:7f:25:07:f3:3d:00:
                    f0:4c:ce:d9:19:f5:5f:6e:e5:66:9b:96:29:3c:7a:
                    a2:e2:6c:15:8e:dc:aa:f0:13:2e:cf:5b:c0:07:4b:
                    f1:28:7f:82:13:4a:1a:75:ff:2c:ba:cb:ec:f8:41:
                    ba:f2:32:79:2b:40:c6:dd:92:8a:74:b9:71:27:78:
                    3e:08:6b:4d:ae:8a:9e:dc:eb:89:ff:8e:e8:9c:5b:
                    74:f2:50:13:89:1c:dd:7f:5d:ba:ed:fc:29:9c:c9:
                    3f:45:47:1e:41:c0:c4:05:bc:e5:dc:48:1a:ee:9b:
                    2f:07:87:b1:97:c7:6f:12:68:34:dd:06:be:25:49:
                    05:40:73:df:a9:a3:67:66:ec:84:ea:de:e5:b1:fc:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E9:17:36:CF:1F:6D:B3:C4:2D:6E:E9:14:E7:8A:EB:EE:BD:AA:53
            X509v3 Authority Key Identifier:
                keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/DB120D6EC34A11EB9559E184C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:fe:42:93:fb:70:a5:3a:1b:17:0a:4d:3f:c1:c2:2d:1a:d4:
         80:70:46:9e:ec:5a:db:23:9d:06:c3:d7:ee:b2:1a:75:6b:d4:
         46:0e:63:72:d8:95:cb:b4:22:29:89:de:42:ac:77:14:12:7e:
         da:df:01:0c:12:85:03:11:aa:4b:2a:0b:a9:36:c5:a3:8e:a9:
         f5:8b:87:3b:6b:73:cc:c8:54:2f:08:1c:b8:83:2c:cb:c9:b0:
         1a:ae:09:a1:0f:d7:a8:3e:6c:ff:32:f5:7b:ba:87:b1:51:7e:
         81:6c:93:77:3c:ed:12:68:c4:c5:46:ef:94:54:49:77:db:25:
         8e:b1:f1:e5:85:b3:7e:5a:5d:47:51:5b:8a:b8:27:b9:41:e8:
         ce:43:a3:34:3a:6d:df:37:46:64:15:53:72:d0:3e:1b:f6:7a:
         26:67:cb:9e:17:87:15:00:4b:53:97:1b:f6:e6:44:6e:c4:94:
         ce:ab:54:c2:79:c5:d2:b2:cd:cf:22:63:7c:a0:97:71:a6:80:
         41:82:c8:54:94:bc:84:2c:80:b4:43:55:9b:dd:a0:a9:ce:2e:
         53:39:95:74:5b:e0:bc:65:3d:c8:d1:91:77:4e:c0:78:55:cd:
         b5:e7:e2:eb:13:19:a6:71:e6:96:30:a4:6b:74:65:f9:f8:62:
         c9:78:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:07:00 2024 by rpki-client on console-fra.rpki-client.org