Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
File:                     F6935C8EB35911EF96C43242C4F9AE02.roa (raw, json)
Hash identifier:          RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=
Subject key identifier:   BF:21:22:E5:95:64:6A:AD:5E:D1:4D:8E:E6:32:94:4F:56:28:32:12
Certificate issuer:       /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial:       02
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
Signing time:             Thu 05 Dec 2024 22:40:44 +0000
ROA not before:           Thu 05 Dec 2024 22:40:44 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153472
IP address blocks:        203.33.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
        Validity
            Not Before: Dec  5 22:40:44 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67522bec-a1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:bb:c6:61:f9:62:66:99:7b:6c:92:48:e2:
                    62:dd:f9:2c:8d:7a:9e:84:e8:b5:f0:a0:8a:48:ed:
                    07:2b:be:a8:48:d6:30:4c:f1:04:df:b2:5b:b1:6c:
                    26:b5:05:cd:1d:6f:1a:d1:4e:1c:be:aa:95:83:b3:
                    74:27:5b:fd:69:71:df:48:f4:86:28:2d:0d:c0:1e:
                    a2:f9:85:5d:8e:a2:ae:dc:fd:37:f4:03:07:a6:95:
                    87:ca:f4:07:21:10:41:50:ba:3d:06:83:bb:60:46:
                    71:0e:41:d3:51:b6:20:91:5e:6a:13:de:3c:90:3b:
                    ea:7d:bc:47:c6:a1:13:bc:35:bd:7b:ee:14:e5:f7:
                    63:d8:27:08:be:ea:8e:a2:a2:2a:f5:d3:da:38:46:
                    c8:eb:30:e4:18:cb:13:2d:00:f6:59:e3:ab:78:5b:
                    9e:b9:b6:66:9e:65:47:8b:32:7e:b0:5e:06:c7:90:
                    c4:0d:08:b3:20:83:93:d6:9a:6d:b3:81:5a:5c:93:
                    c4:b5:ef:d7:6e:5b:57:86:a2:75:fe:08:3f:77:8c:
                    9f:b2:75:30:b9:06:5a:7e:c8:c1:06:f0:e2:93:06:
                    48:8f:71:29:ad:d2:5e:67:77:11:2a:57:8d:22:56:
                    51:63:23:d9:d3:9f:c6:13:17:f6:72:24:67:54:75:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:22:E5:95:64:6A:AD:5E:D1:4D:8E:E6:32:94:4F:56:28:32:12
            X509v3 Authority Key Identifier:
                keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/F6935C8EB35911EF96C43242C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:67:08:eb:e0:67:69:78:0f:ef:72:84:be:ca:09:ba:e4:
         f8:6b:70:04:f8:86:53:ba:d3:76:d9:cb:4d:49:33:fd:ef:a7:
         0a:78:1a:22:96:39:fe:40:27:d2:83:4d:ff:c6:6f:01:f0:99:
         27:96:09:53:a4:13:74:8d:51:4c:77:ce:24:00:11:e1:c7:88:
         52:99:35:83:75:fc:af:43:dd:87:b9:99:c9:01:54:fe:17:b6:
         dc:3b:5a:3a:99:99:a4:ff:a9:b8:21:c4:16:4f:7e:a0:4d:3f:
         02:d7:07:05:85:bb:d7:47:35:5b:a2:3b:2e:ca:94:b1:38:b1:
         ec:c5:a5:9b:88:cb:91:f6:f7:6b:8a:9a:b7:50:df:bc:98:07:
         8d:85:97:ac:2e:ae:6e:59:9c:54:68:8e:3a:a5:b2:16:2f:a9:
         0d:84:38:7a:9a:f6:3a:b2:02:41:ba:cb:ce:12:c5:be:e5:c2:
         92:1b:c4:f0:ed:d3:a8:8e:4c:87:64:2d:ad:50:5f:34:ee:ee:
         0b:ff:74:77:b8:e0:a3:90:2f:28:1e:00:7a:32:33:7d:b1:59:
         02:7d:1a:61:6c:fd:eb:91:13:e2:05:4e:f4:12:94:5e:34:8d:
         6b:e0:eb:2c:56:15:21:17:27:29:86:bc:57:51:ff:f7:eb:4e:
         d6:fb:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 08:43:53 2024 by rpki-client on console-fra.rpki-client.org