Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
File:                     7F716274C95611E9A630AC3DC4F9AE02.roa (raw, json)
Hash identifier:          eOpJ3RmY4vXKFSwUGzOYTfe5Xkbew+dDUarLwwiuABc=
Subject key identifier:   B4:BB:3C:10:26:14:C3:52:4B:B8:52:2C:B8:86:A0:90:96:13:B5:29
Certificate issuer:       /CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
Certificate serial:       18FB
Authority key identifier: 26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
Signing time:             Mon 30 Sep 2024 16:54:19 +0000
ROA not before:           Mon 30 Sep 2024 16:54:19 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     59236
IP address blocks:        180.210.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl
                          rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6395 (0x18fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914589A/serialNumber=262790CD914CEA8EC11E25869B898DE0001FBD09
        Validity
            Not Before: Sep 30 16:54:19 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fad7bb-785d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:a3:a6:34:8a:31:c1:cd:7a:69:84:41:f8:
                    60:2d:a0:f0:88:1b:58:77:e0:2a:f8:2e:b5:d1:0b:
                    c0:74:33:0c:da:23:32:7e:5e:55:7e:d4:89:c4:ee:
                    bc:db:92:78:f9:55:1b:88:0c:c9:4d:b5:3b:b8:ed:
                    a9:2f:38:96:9c:31:0b:c6:a6:56:a0:8c:31:0e:10:
                    5a:ea:94:bd:d5:d1:2a:76:69:4e:62:9d:4f:19:69:
                    8a:f5:6c:cc:22:fc:5c:47:39:af:2d:c0:d2:36:f4:
                    bb:23:63:85:6f:10:52:94:8f:e1:a8:8f:1f:7d:50:
                    b2:49:07:47:3f:cc:fe:d4:e5:bb:bc:62:ce:5a:a5:
                    f2:05:8a:6f:70:61:31:72:fd:9f:17:e0:1a:d0:bb:
                    db:75:73:f1:f2:ba:21:f8:e8:8e:0c:8f:98:18:72:
                    10:eb:b9:c2:a0:3b:6f:79:be:da:02:1f:d9:a9:9d:
                    1a:ba:e3:82:0d:e4:ec:b8:a1:52:68:d8:8f:0d:fa:
                    8e:de:d8:72:9d:42:c4:b9:0b:28:e6:6b:ab:7d:de:
                    28:c1:31:f8:1f:b4:9e:e5:76:44:e0:1b:fd:e2:44:
                    7e:eb:57:a8:5a:45:df:d2:76:51:f7:53:7d:d9:49:
                    43:45:35:8d:44:7e:b2:b4:33:d2:a5:22:11:d0:37:
                    19:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BB:3C:10:26:14:C3:52:4B:B8:52:2C:B8:86:A0:90:96:13:B5:29
            X509v3 Authority Key Identifier:
                keyid:26:27:90:CD:91:4C:EA:8E:C1:1E:25:86:9B:89:8D:E0:00:1F:BD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/JieQzZFM6o7BHiWGm4mN4AAfvQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JieQzZFM6o7BHiWGm4mN4AAfvQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914589A/ACD6FB8A7D9411E7938BCF4EC4F9AE02/7F716274C95611E9A630AC3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:af:69:a4:1f:21:10:0c:84:43:bf:11:54:c8:51:10:0e:e0:
         21:27:42:fc:27:7d:c2:8c:a7:09:00:b3:d5:78:a3:ce:66:b9:
         31:cd:e9:ab:88:46:2b:3e:1a:dc:11:21:f7:30:87:50:f8:d6:
         88:df:d4:35:aa:a9:6f:cd:a9:15:eb:df:8d:09:bf:67:63:d9:
         5d:1e:65:79:d9:36:0d:a8:62:3c:56:f9:10:1b:f1:e0:e1:40:
         b7:10:a2:02:93:81:c0:1d:10:b0:8d:94:54:01:89:dd:1c:fe:
         2c:34:73:72:45:f2:64:c7:c2:58:bd:4b:3f:b6:ce:ac:5b:74:
         a6:30:e7:53:24:dc:94:c9:1b:e0:76:61:41:8b:46:00:1d:4f:
         00:03:37:d1:db:8f:a7:9a:89:f8:ce:3e:33:5c:92:8d:80:80:
         9f:27:09:21:68:da:6f:bf:c1:6c:62:69:b1:7d:d9:90:fc:5c:
         6b:a2:a5:4a:8e:56:c3:d2:6d:13:a5:f2:0b:02:53:00:78:0a:
         fc:0f:fc:6b:7d:37:0c:84:25:7c:a5:7c:19:b7:d4:bb:4f:f3:
         81:7e:87:42:8a:fe:db:4a:4b:64:a3:91:fa:d8:7d:71:6d:29:
         85:2f:08:5b:84:34:c5:76:cd:71:08:ec:b5:78:b3:ec:c6:7f:
         88:eb:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org