Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa
File:                     AF4E5B08483911EEB846EA36C4F9AE02.roa (raw, json)
Hash identifier:          Z5rwHrC448B40suI00nA+b9ZQO0bU/yo217qnIMhWts=
Subject key identifier:   CC:E3:1D:56:7D:D2:2D:65:61:74:A7:5A:DD:42:F1:4F:52:C5:49:83
Certificate issuer:       /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
Certificate serial:       092D
Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa
Signing time:             Thu 31 Aug 2023 20:05:09 +0000
ROA not before:           Thu 31 Aug 2023 20:05:09 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     150744
IP address blocks:        123.253.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl
                          rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 21:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2349 (0x92d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093
        Validity
            Not Before: Aug 31 20:05:09 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64f0f274-fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:3f:52:cf:c9:da:3e:5e:dc:18:e0:0b:e3:
                    35:82:d5:80:73:9f:3b:8d:08:5c:a8:41:04:53:6e:
                    70:72:49:04:33:c9:d4:1e:37:29:8c:5b:63:5f:9e:
                    e8:23:97:a6:cb:ec:08:6f:78:3f:e8:13:a2:02:b1:
                    04:a9:89:4d:f2:54:89:f1:6a:49:74:a3:02:f5:b2:
                    e9:50:54:30:45:0f:44:03:62:ac:be:b3:43:a4:20:
                    cf:0b:06:60:6a:fa:50:2c:dd:97:f4:4f:3f:21:ec:
                    2c:00:75:21:04:fd:39:b5:f8:94:c6:bb:da:56:2d:
                    5c:28:8f:be:79:59:17:d1:de:b4:0b:2a:a1:1a:c0:
                    c6:68:47:e1:a9:83:b7:4a:73:68:9c:c1:3a:f9:c5:
                    6f:b9:55:92:fb:5c:d1:ee:5f:f5:45:7a:75:c6:d9:
                    e4:2d:29:fa:17:8e:27:0d:3e:55:2e:8b:b8:db:9d:
                    75:f6:98:4e:8a:70:d4:b1:cb:f9:7a:d4:51:83:6d:
                    a9:b3:4f:4d:7d:68:65:46:5f:f0:a4:92:13:9f:a4:
                    76:96:ff:06:5b:e8:a7:c8:b4:a9:fa:d6:d9:77:d2:
                    e4:2c:21:6d:fa:47:b6:3a:71:dd:fd:5c:5b:c0:f1:
                    49:04:98:58:91:be:8d:8f:6d:8f:11:2c:e2:2d:fb:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:1D:56:7D:D2:2D:65:61:74:A7:5A:DD:42:F1:4F:52:C5:49:83
            X509v3 Authority Key Identifier:
                keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:2e:ab:f6:b8:65:1b:5d:02:07:d8:79:fb:b3:05:9f:5d:
         51:94:47:b1:c3:c3:ec:69:32:c1:1f:c1:2f:3b:02:89:f7:d4:
         6b:c2:2a:b3:55:a1:8f:a5:88:c5:f9:12:90:80:1d:cc:67:76:
         85:d0:68:57:d6:7e:52:40:16:a8:ff:10:c8:a2:f4:c6:85:9a:
         5d:a7:0d:23:fd:6d:a4:78:c3:37:b5:e1:da:03:94:80:fd:c5:
         66:ad:86:bd:19:cb:22:40:f6:94:2f:11:f6:5a:ef:99:81:eb:
         3c:92:b9:2d:f1:7e:77:7c:d1:55:07:5d:9b:3e:d0:55:78:d7:
         37:44:ef:fa:21:83:9a:b6:70:24:88:f2:70:f9:f2:3a:05:74:
         21:7f:98:c3:e6:6d:30:06:41:2c:e8:19:c4:83:96:1b:55:8b:
         45:b6:1c:ae:99:d7:4d:75:5a:d2:35:91:6c:64:c7:2b:30:32:
         c7:81:43:b8:6b:e5:a3:e5:09:4d:9f:3f:55:56:e6:fe:d1:59:
         d7:14:04:34:1b:d3:09:b8:ea:f2:f5:81:f1:69:84:28:71:a2:
         58:1f:b6:a2:c4:62:81:8f:b1:09:4c:f7:9d:7b:4b:93:48:1b:
         89:41:04:40:5e:ba:5b:de:96:e5:e6:74:94:ed:b0:95:19:42:
         ef:99:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:12:00 2024 by rpki-client on console-ams.rpki-client.org