Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
File:                     AC270A727D0711ED8181DA7FC4F9AE02.roa (raw, json)
Hash identifier:          TV2ETZpSfJsFD1ONe5ZtFObX2m18pq7S4p/BI/BJVc0=
Subject key identifier:   4C:3B:A7:57:42:2A:FD:2F:99:8F:7D:ED:9E:AA:2E:59:D5:0F:D7:9A
Certificate issuer:       /CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
Certificate serial:       D8
Authority key identifier: 34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
Signing time:             Thu 01 Feb 2024 05:36:39 +0000
ROA not before:           Thu 01 Feb 2024 05:36:39 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136615
IP address blocks:        203.201.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl
                          rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8F36/serialNumber=34D7D6D441C32D7C87142E9FE5C7EBC4F479B0CD
        Validity
            Not Before: Feb  1 05:36:39 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bb2de7-ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:c1:f4:f7:11:e6:ef:31:2a:e4:0b:cd:f0:
                    79:2d:6d:21:88:4e:e5:a1:99:9d:03:7b:56:26:ba:
                    46:a5:e8:72:23:8f:b6:6a:b6:0b:05:0f:b8:ba:ac:
                    db:c0:ee:76:63:2a:a7:f0:6f:86:2e:5f:d7:fc:f8:
                    2e:62:92:e0:75:1c:da:90:cb:c3:7c:4c:d2:b6:63:
                    16:7e:ce:85:f4:83:39:b9:aa:d9:f6:d6:f7:bb:f5:
                    9d:ef:99:8e:17:44:29:2f:ab:0b:85:7c:ee:b2:d4:
                    70:d0:e2:69:05:f7:61:bb:87:f9:58:5b:96:a9:36:
                    64:e0:27:9c:90:5a:25:f0:28:1d:67:19:2c:09:55:
                    53:d7:6a:7d:bd:a3:04:fd:76:0e:11:c0:61:6a:a7:
                    43:6a:73:5b:9a:96:cd:cf:01:34:cc:55:c6:3b:3a:
                    40:61:8b:2c:5b:7b:30:6d:c6:58:b0:f4:0c:0c:fb:
                    55:f4:b8:bc:88:9b:a5:f1:23:95:27:59:23:5f:7b:
                    fd:0d:4a:12:eb:8b:8b:07:9c:d8:37:41:44:ca:b9:
                    d9:6e:7e:5c:00:fe:aa:84:d2:df:09:c4:3a:09:c9:
                    82:b3:51:d4:18:3c:0f:a0:c6:6d:58:33:f5:1a:57:
                    ba:6d:1f:64:1b:0b:64:a5:c8:ff:3f:2e:bc:3f:bb:
                    d4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:A7:57:42:2A:FD:2F:99:8F:7D:ED:9E:AA:2E:59:D5:0F:D7:9A
            X509v3 Authority Key Identifier:
                keyid:34:D7:D6:D4:41:C3:2D:7C:87:14:2E:9F:E5:C7:EB:C4:F4:79:B0:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/NNfW1EHDLXyHFC6f5cfrxPR5sM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNfW1EHDLXyHFC6f5cfrxPR5sM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8F36/249F41467D0211ED9C5D7D62C4F9AE02/AC270A727D0711ED8181DA7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:3c:d5:0a:f9:07:41:62:24:15:cb:3c:11:aa:a3:24:af:
         8e:08:dc:85:19:f1:55:af:1a:1b:89:fd:36:d1:98:94:62:8a:
         1d:53:17:09:9d:d1:f8:9b:ef:15:83:92:69:40:fc:fb:bf:44:
         9c:cd:78:86:36:67:d0:e2:57:e6:83:67:bb:08:84:76:ca:0a:
         89:58:d3:9e:e4:be:eb:77:b4:62:86:9d:3e:59:0f:ff:12:c9:
         f9:ac:8f:7a:b1:e7:63:e4:7d:1d:48:d0:68:ce:12:60:ae:2f:
         c9:bf:91:ee:62:32:66:87:f8:df:10:e3:a0:d5:18:6b:15:27:
         9d:a4:a7:23:47:4e:d5:42:a9:ea:77:98:8b:f9:a2:70:eb:28:
         ce:59:de:30:9c:6b:e3:ff:d3:7b:14:a3:24:a7:98:44:2d:aa:
         d6:db:81:9b:4c:96:44:e8:d0:e4:1f:8e:5e:f9:2e:85:22:da:
         60:ba:c6:ea:51:8d:64:11:c3:45:e8:94:13:e6:b1:c2:31:bf:
         4e:6f:6c:14:b5:12:c5:4c:d5:29:40:5d:45:d1:0d:29:93:5c:
         dd:18:a4:59:26:0e:c1:56:39:3f:7d:c2:31:e4:0f:50:e2:5f:
         16:a1:56:26:e1:fd:18:35:1a:34:af:b8:78:ae:8f:58:3c:47:
         b2:9a:f7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org