Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
File:                     B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (raw, json)
Hash identifier:          U3r7gOdI0y7v58kpvuRKxIkw0qomkyuS/Mmv5pVcbGs=
Subject key identifier:   ED:46:D9:BA:6D:5C:82:DB:F4:2B:1C:43:43:43:4F:0F:1C:95:82:B6
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       D7
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
Signing time:             Fri 03 May 2024 06:49:39 +0000
ROA not before:           Fri 03 May 2024 06:49:39 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        116.197.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: May  3 06:49:39 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66348903-7a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:89:44:69:b1:76:b9:c0:23:9d:b3:46:3b:
                    4f:09:43:7c:df:67:1c:af:ec:8d:73:b8:cb:d5:be:
                    05:fb:aa:0c:59:f2:74:bb:02:b4:38:51:ea:89:89:
                    bd:53:35:d4:1c:35:ae:f8:34:77:c4:01:32:62:f5:
                    e0:fc:69:00:59:2e:c7:34:49:a1:85:25:ee:95:b5:
                    e3:75:fa:a7:11:4c:40:6f:68:87:1b:85:25:07:e2:
                    94:93:59:d1:ea:eb:f8:d4:7b:52:56:03:0c:39:72:
                    1d:7e:f1:66:6d:f3:20:fd:12:fe:22:49:b0:fb:f2:
                    5b:ff:76:9c:c1:5c:84:f9:2e:9b:79:a7:64:19:e0:
                    96:ac:9f:20:e8:1b:a2:5f:58:fe:ac:0e:33:58:a2:
                    e5:10:6a:0e:59:ab:0c:eb:62:36:04:f2:b0:e8:ad:
                    85:52:a4:9b:36:02:3b:30:a0:f1:ba:3e:f6:3e:8d:
                    39:c8:86:5b:bc:e5:47:6e:53:c2:8d:ca:bf:c0:21:
                    74:a3:3a:02:70:1a:c3:86:ea:60:71:11:64:4d:78:
                    ac:3d:7c:0e:60:df:b3:cf:0e:1d:a1:fc:28:16:3f:
                    9b:4a:24:66:ef:15:9b:1c:3d:87:e9:59:d4:40:86:
                    f6:8c:8f:00:ba:f6:cc:fc:28:7f:df:a2:e2:1f:ad:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:D9:BA:6D:5C:82:DB:F4:2B:1C:43:43:43:4F:0F:1C:95:82:B6
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d0:6f:55:c7:80:c2:dc:96:84:d8:42:52:84:08:6b:08:d8:
         00:63:e7:bf:b8:3a:4e:9b:14:0c:cd:e5:5f:fa:05:f9:12:43:
         d2:67:6e:8b:14:9c:3d:53:b1:73:b9:15:98:b1:c5:e2:c1:ec:
         40:8c:0b:ff:b3:96:b7:58:c5:c3:e2:1c:9d:b8:a6:cc:de:d2:
         0d:9c:49:74:77:cc:8c:f4:15:15:35:2d:4d:97:b0:b2:3e:e8:
         25:2b:98:04:96:5e:37:fc:56:e1:4f:1e:b7:79:b0:c8:8c:5a:
         34:5c:b7:65:1b:42:f4:eb:64:2d:d4:c8:4b:b4:22:87:0c:b8:
         cb:91:36:ab:9c:82:43:50:b3:b9:7b:03:81:2d:8c:02:34:b9:
         f2:73:40:a6:96:be:eb:9e:ce:14:f4:c7:83:7f:51:d1:79:74:
         dd:8e:40:c1:f0:29:fb:ef:4f:0c:8b:11:6b:7e:60:91:e8:d9:
         54:dc:fc:0d:21:8c:92:0b:9b:d6:26:cc:be:61:dc:a7:68:f4:
         45:52:a5:0b:8c:bd:7c:9b:b8:18:33:5d:e5:3a:a4:60:64:d4:
         f0:db:e0:65:29:0a:e2:5e:0e:b4:46:d6:8f:08:9a:46:14:db:
         d8:54:73:87:4e:f3:36:5a:1b:b5:27:47:dd:51:70:d9:05:fc:
         78:8c:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org