Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/FAE7339CF7B911EA91318653C4F9AE02.roa
File:                     FAE7339CF7B911EA91318653C4F9AE02.roa (raw, json)
Hash identifier:          Zo13ZbklXiV5KnDTyJL8a80G8CmYR1LoLevv07Onz6c=
Subject key identifier:   CA:A0:B5:BE:6C:28:EC:72:EE:CA:6F:6C:50:84:D8:CC:59:44:A4:6A
Certificate issuer:       /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
Certificate serial:       069C
Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/FAE7339CF7B911EA91318653C4F9AE02.roa
Signing time:             Sat 14 Oct 2023 22:10:03 +0000
ROA not before:           Sat 14 Oct 2023 22:10:03 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133105
IP address blocks:        202.1.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3
        Validity
            Not Before: Oct 14 22:10:03 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=652b11bb-799c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:a1:5f:37:ca:06:fe:17:44:4b:e7:5f:3a:
                    a9:f8:30:55:fc:09:58:92:65:7d:4b:51:ed:43:98:
                    4a:e8:6c:e8:b1:f1:5d:2c:36:53:81:d8:1f:e8:86:
                    44:ba:27:eb:25:e1:fa:50:47:54:a4:0b:6e:ec:a4:
                    5c:f5:86:8c:5d:72:b9:17:8f:07:e5:8c:da:ab:fc:
                    5e:56:84:17:d9:71:55:93:54:29:ba:7f:1b:e0:82:
                    a0:f1:fe:0a:3b:fe:5a:21:e1:fa:8b:89:bd:44:97:
                    ff:c4:85:2a:68:ae:f2:1e:72:8d:a9:c1:e5:e8:93:
                    44:97:5c:f5:dc:f7:e3:eb:d3:05:a6:3b:da:cf:e1:
                    99:99:d8:9a:05:95:5d:c6:0f:a6:5e:34:1b:56:a8:
                    98:b3:29:39:74:b8:cd:3f:ac:0e:2e:17:af:a9:d0:
                    19:5c:39:9a:59:4f:e4:95:f3:5e:3a:9e:f3:66:38:
                    63:a8:77:98:a6:1b:6f:18:22:bd:aa:52:c2:78:d2:
                    c8:51:38:7d:57:e3:70:ae:1e:2a:52:7f:6f:c1:be:
                    2a:89:c3:4c:ac:8c:8f:ff:12:06:4f:64:58:80:75:
                    1b:7b:00:59:60:04:c8:1d:f1:6d:40:50:43:e7:37:
                    7d:b2:ab:7b:d2:e7:03:38:ef:01:20:08:c4:38:5e:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:B5:BE:6C:28:EC:72:EE:CA:6F:6C:50:84:D8:CC:59:44:A4:6A
            X509v3 Authority Key Identifier:
                keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/FAE7339CF7B911EA91318653C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:27:29:dc:cf:f0:43:79:b0:4f:dd:64:44:98:e2:61:5f:06:
         d9:c9:2e:c0:1d:71:3d:30:42:84:58:6d:3f:b1:86:46:fe:df:
         5d:d8:3e:7e:9b:d1:8c:44:e2:26:00:ac:71:06:6b:a1:6d:6b:
         84:1f:f2:8f:bc:f2:89:d0:36:d0:92:2e:28:a5:78:06:4d:ff:
         d9:39:4f:36:94:88:a0:8c:97:9c:f0:c6:87:de:78:81:50:3f:
         35:2d:2e:e5:dd:75:db:db:4a:d6:99:4d:ae:33:43:aa:aa:70:
         5c:ad:20:ad:e5:ec:88:5a:a0:85:45:b6:44:2b:03:82:51:06:
         04:48:3f:1d:a7:39:93:a3:7c:7b:91:dd:2c:4b:05:92:1e:8a:
         da:c7:5e:09:1c:ba:0a:7f:3e:55:d8:b1:ad:f8:7f:b8:4d:d6:
         73:64:c6:16:04:35:eb:fa:dc:54:4f:87:56:f9:91:d7:c3:6b:
         9e:4f:4a:6c:f5:31:73:da:4a:78:29:b1:4d:4d:a0:3d:de:03:
         f8:fb:9a:87:9f:1b:41:de:21:54:3b:71:52:6c:31:74:c6:1e:
         c2:15:76:7d:a7:69:38:6b:b2:33:28:e5:68:c4:c0:e7:b6:5f:
         ed:0f:1f:72:6d:3b:fc:fa:2f:46:13:77:f4:38:b8:85:ae:34:
         e8:5d:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org