Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa
File:                     0454DCC4C63A11EAB59CC262C4F9AE02.roa (raw, json)
Hash identifier:          cH+HNTdNPLB+Mpe8pDEkV7NrSte2+A6Fkurnr6HR0N4=
Subject key identifier:   35:61:02:46:8A:84:AA:46:0F:1A:E3:59:E4:E8:47:CE:03:0E:D8:FC
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       0732
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa
Signing time:             Mon 28 Aug 2023 21:38:27 +0000
ROA not before:           Mon 28 Aug 2023 21:38:27 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        202.173.24.0/24 maxlen: 24
                          202.173.26.0/24 maxlen: 24
                          202.173.27.0/24 maxlen: 24
                          202.173.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
                          rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 21:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
        Validity
            Not Before: Aug 28 21:38:27 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ed13d2-2b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:f1:6f:27:c3:92:b2:d5:f6:29:f6:8f:2e:
                    21:d2:d6:88:ad:97:de:54:92:fb:d8:d5:5d:fe:73:
                    95:00:c4:2b:30:67:e8:01:9e:68:2f:84:76:ff:8f:
                    4a:69:4c:7e:91:5e:01:6c:a7:b8:5e:94:5d:c0:ae:
                    0b:9e:0a:76:c4:08:c3:a4:6f:73:84:9a:9c:63:f8:
                    45:52:a7:08:ff:72:88:e5:3b:3d:70:76:08:5b:0b:
                    00:07:fe:bf:ed:4c:04:93:f7:1f:8d:66:73:37:da:
                    77:18:31:71:f7:73:a1:b5:6b:ea:26:25:e8:d5:ef:
                    3b:3c:b0:cc:8f:9b:48:ca:40:97:41:6d:2c:de:8c:
                    f0:4f:f2:81:27:5f:78:0a:a3:f1:bc:7a:b7:25:66:
                    6f:d5:2b:de:d1:4e:e9:dd:e2:51:5f:19:64:8c:b4:
                    5a:10:eb:bf:01:a4:a4:2c:c8:03:7c:aa:c3:9a:52:
                    cd:27:f8:0c:55:b9:aa:d4:31:1b:0c:81:f0:b1:e6:
                    26:95:c7:5a:1f:3f:87:04:6e:35:55:cb:a8:11:09:
                    3c:b0:f1:5a:e7:c3:f8:4f:3d:11:60:14:2c:19:8d:
                    e0:16:0c:ce:d1:0e:96:a9:d1:3e:ee:a9:e5:4d:8d:
                    fb:df:99:28:f7:b6:0d:2b:92:6c:82:2d:a6:1c:e4:
                    10:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:61:02:46:8A:84:AA:46:0F:1A:E3:59:E4:E8:47:CE:03:0E:D8:FC
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0454DCC4C63A11EAB59CC262C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.24.0/24
                  202.173.26.0/23
                  202.173.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c4:f7:23:82:49:98:d5:7a:05:26:d7:b5:df:a0:e4:07:cb:
         c0:34:f3:30:44:20:d6:a4:a5:b4:c3:8f:21:ef:95:07:48:ae:
         39:28:ae:58:6c:f2:66:51:27:b6:b7:3d:71:c4:b0:1a:e0:4e:
         6b:81:8a:91:0c:ff:af:b6:1d:ab:69:33:47:3a:4a:2d:7f:eb:
         21:1d:aa:8d:db:43:c6:63:22:d6:89:f2:0f:1f:0e:0f:92:d6:
         25:d5:3c:c1:73:e6:6a:b3:8f:4b:8d:e9:2a:f2:dc:6f:f1:03:
         be:d2:70:b4:00:9d:21:42:d5:d0:e8:89:3d:5d:be:9d:b7:89:
         37:c8:7a:7f:17:9f:f6:01:d9:dc:23:1e:26:42:31:98:7d:77:
         31:59:02:9c:19:45:8b:89:43:70:f2:e7:71:47:4b:1c:5a:01:
         d4:ed:6b:f8:45:76:08:ac:0e:8e:52:6a:65:c8:bc:3e:53:4e:
         f7:74:94:2a:61:d4:b6:3d:44:57:d6:14:a1:6b:28:4b:e3:fb:
         63:42:fa:26:26:4f:13:49:b5:c0:33:6b:d1:0f:3f:1c:4c:3d:
         a3:1b:12:87:a1:79:b8:a3:af:cc:4f:a4:c0:50:d2:a2:6f:7c:
         fe:a1:d7:cf:31:e7:c9:8d:eb:49:de:34:19:be:93:79:cb:1f:
         b9:ee:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:44:36 2024 by rpki-client on console-fra.rpki-client.org