Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa
File:                     63BFE4C0292811EEAF894530C4F9AE02.roa (raw, json)
Hash identifier:          WHD8ucoKeZ1K97J6qkuwoCcKwch7wYg6344jbdnFRDg=
Subject key identifier:   D7:9B:20:89:AC:54:A8:82:35:35:A8:3C:F2:31:60:43:9E:56:8E:C8
Certificate issuer:       /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
Certificate serial:       208F
Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 16:13:05 +0000
ROA not before:           Tue 26 Sep 2023 16:13:05 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     31898
IP address blocks:        43.230.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 16:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8335 (0x208f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4
        Validity
            Not Before: Sep 26 16:13:05 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65130311-18e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:6b:87:54:67:03:17:f9:86:ce:d7:bf:f4:
                    ee:2b:70:23:d7:f0:41:4d:58:03:6f:b3:44:d0:7f:
                    2f:75:b4:83:89:9a:1b:7e:5e:48:c0:eb:e5:20:d0:
                    03:2e:f8:9f:e4:9f:04:be:09:9b:98:f4:b2:a6:4e:
                    87:27:ba:ae:64:0e:e4:0e:9b:37:63:19:32:9a:66:
                    c1:d0:78:ce:53:4f:db:29:34:ce:46:83:52:78:e8:
                    a0:5f:8d:dc:3f:98:38:e6:52:53:8c:49:dd:7c:f2:
                    fb:6d:69:3e:2a:fa:61:58:7c:7d:a9:17:b1:fd:22:
                    98:4a:e1:47:10:3f:29:d0:66:7e:8b:5a:f2:b0:8d:
                    7a:34:98:f3:24:c8:44:98:3c:ce:e3:63:05:6f:b4:
                    b9:b5:ee:92:d2:8f:74:26:06:65:da:03:dc:e7:3d:
                    9a:fe:f2:e5:f3:2a:4f:c4:d1:14:f5:6b:be:42:07:
                    b0:ca:ae:ad:47:87:53:fd:cb:8a:42:b4:88:ca:62:
                    23:ef:57:c2:6c:2a:4b:96:31:2e:96:06:02:91:07:
                    3a:98:93:5e:8a:f4:0f:ab:8f:02:94:8e:d3:22:4b:
                    cb:8a:ff:dc:0b:83:71:f4:b0:89:b9:6c:f6:9a:a1:
                    db:4a:b3:5c:1d:4f:b9:4b:1f:94:f0:6e:04:98:0a:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:20:89:AC:54:A8:82:35:35:A8:3C:F2:31:60:43:9E:56:8E:C8
            X509v3 Authority Key Identifier:
                keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:05:11:bf:3a:7a:d5:a0:8f:d6:06:28:84:7e:e1:e7:23:5f:
         f9:65:13:31:1f:fc:f4:54:a1:4f:e6:0e:1d:80:bf:71:9c:36:
         81:e2:5e:d9:04:e0:58:31:2b:7b:59:69:8e:c5:05:25:34:eb:
         e1:54:83:54:a6:c9:50:5b:2b:ca:51:7a:51:51:1e:be:05:74:
         d3:ff:3f:a7:5d:f7:e7:fc:20:4a:0b:05:6f:ee:9b:22:2e:af:
         7a:05:87:0b:98:56:43:cd:5e:a1:25:bb:fd:9e:b7:49:40:b8:
         fa:82:df:29:22:0e:46:ad:7e:ed:dd:6a:9f:6a:a8:23:4c:43:
         d2:e9:35:84:b7:c8:e4:fe:2b:95:83:27:f6:ff:45:c7:0f:fa:
         de:6a:9a:ff:40:ca:68:88:9b:c2:44:18:e5:c9:c6:4d:47:f6:
         53:d0:60:b3:47:69:1d:ad:52:26:b8:de:75:99:84:b1:c1:ee:
         7d:a2:f6:2d:66:63:70:e3:c4:8d:f8:dc:48:25:15:b5:4e:6f:
         d5:74:f0:ef:be:d4:a2:dc:77:7c:0c:24:6a:fc:5c:24:d6:77:
         c1:0c:be:c5:d3:1b:f3:e6:ef:66:32:27:83:38:2b:e2:47:5c:
         3c:d9:03:9c:29:aa:d1:54:07:e9:e3:11:e8:57:e9:b2:f2:d5:
         66:c1:42:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:22:56 2024 by rpki-client on console-ams.rpki-client.org