Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
File:                     B059C44831AB11ECAB908E42C4F9AE02.roa (raw, json)
Hash identifier:          jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=
Subject key identifier:   20:66:07:9B:FF:00:19:05:BB:12:17:F6:6D:32:52:19:E6:8A:D3:8E
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       30F8
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 15:52:40 +0000
ROA not before:           Tue 30 Apr 2024 15:52:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6421
IP address blocks:        14.141.246.0/24 maxlen: 24
                          14.141.247.0/24 maxlen: 24
                          59.164.76.0/24 maxlen: 24
                          59.164.77.0/24 maxlen: 24
                          115.110.74.0/24 maxlen: 24
                          115.110.75.0/24 maxlen: 24
                          115.112.20.0/24 maxlen: 24
                          115.112.21.0/24 maxlen: 24
                          121.240.218.0/24 maxlen: 24
                          121.240.219.0/24 maxlen: 24
                          121.240.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Oct 2024 15:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12536 (0x30f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663113c8-fda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:1e:4d:a6:86:dd:6c:c3:dc:80:a9:9c:e5:
                    74:f3:0b:9d:eb:84:d4:9a:cc:23:9d:74:8f:2b:e7:
                    0b:0c:3b:43:0a:29:eb:99:48:1d:62:4c:05:28:aa:
                    7e:6e:56:f3:62:c5:39:3e:4c:6c:cd:e5:a4:13:ef:
                    2b:d3:8a:e2:97:9b:76:a4:71:01:8d:e1:b3:c8:9d:
                    f9:04:f1:99:b9:9c:2d:e7:d9:45:41:fa:8b:07:3b:
                    f6:a0:a6:15:c0:44:f2:b9:b8:95:f8:5c:db:57:b3:
                    8d:57:8a:08:0c:05:63:30:6b:f3:4b:d5:49:aa:be:
                    76:a5:bd:5d:d3:de:0b:9b:9e:cc:a8:0a:9c:9f:1f:
                    27:b4:58:b5:4b:62:3c:e6:e8:ad:8b:d1:98:9d:1a:
                    c5:34:ac:6f:ef:b5:c2:07:04:7a:d8:c4:0b:e3:f2:
                    50:06:11:4b:06:7b:91:4f:9d:07:95:3e:6f:89:c2:
                    4c:53:96:8f:4f:ec:ff:f0:4c:a9:30:09:00:94:98:
                    c2:15:c0:30:6a:d4:f3:74:0b:a9:fb:c0:58:05:c2:
                    98:0c:ed:8c:7a:e9:50:c5:23:1f:35:d4:2f:ba:b2:
                    b0:2c:9c:21:9a:b6:54:1c:7e:9f:19:d9:ea:71:f9:
                    0e:22:e4:f5:68:8a:c8:5f:f8:00:df:7c:b1:1b:e3:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:07:9B:FF:00:19:05:BB:12:17:F6:6D:32:52:19:E6:8A:D3:8E
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.141.246.0/23
                  59.164.76.0/23
                  115.110.74.0/23
                  115.112.20.0/23
                  121.240.218.0/23
                  121.240.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:6a:5e:62:6e:71:52:2d:85:d8:88:2a:59:d2:a6:ba:52:
         46:a7:c9:35:a5:2b:a2:a3:dc:d2:ac:21:b1:8c:b1:65:e4:83:
         eb:af:a8:ef:28:88:a5:c4:6b:02:76:28:47:92:e2:de:25:56:
         62:20:3b:37:e9:8f:09:10:99:94:bb:54:d8:af:92:aa:d1:da:
         68:9f:0d:fb:5a:2c:6f:c6:e6:2d:f9:5a:3f:6e:ea:dd:e3:96:
         84:91:21:b9:b0:34:d9:76:49:74:7f:4f:f9:eb:fd:3f:4f:51:
         c0:e4:ca:2c:25:16:62:9c:64:41:e9:1c:9d:86:ca:2b:3f:02:
         cb:f2:3d:29:96:25:b1:5f:ba:2f:02:62:58:ac:4e:ec:ed:fe:
         7e:8a:41:51:94:2e:a5:d7:95:15:84:7f:ad:38:d2:4b:ce:50:
         8b:7f:e5:99:c5:8e:34:29:b5:4b:86:52:ff:d9:12:67:fc:a1:
         5e:79:04:e4:61:87:32:90:e3:41:9a:af:d2:0f:77:5a:ff:de:
         19:0a:48:8b:5c:6c:6f:59:da:94:c9:00:e8:18:5e:ed:a8:bf:
         51:b5:5a:f9:12:43:b6:98:8d:40:36:b2:6b:62:ef:3e:ae:36:
         90:13:b1:3c:b4:03:61:d7:cf:81:eb:e2:a8:94:38:bb:bd:38:
         5d:55:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:28:56 2024 by rpki-client on console-fra.rpki-client.org