Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
File:                     4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (raw, json)
Hash identifier:          2ce2Q0ttLGEsbw3JwNBLdsXBERRq9UXcUfzc1vkNo7g=
Subject key identifier:   F7:77:12:B2:FB:59:B5:70:33:ED:F3:29:B2:D9:C2:A2:98:9C:AB:6C
Certificate issuer:       /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial:       54
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
Signing time:             Tue 20 Aug 2024 06:27:26 +0000
ROA not before:           Tue 20 Aug 2024 06:27:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152634
IP address blocks:        202.36.116.0/23 maxlen: 24
                          2001:df3:88c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
                          rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
        Validity
            Not Before: Aug 20 06:27:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66c4374e-dea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:bf:39:0c:f9:df:19:d9:7c:8b:3c:c1:ce:
                    e8:26:5b:0d:df:f0:04:9e:d9:25:f8:d1:b2:97:62:
                    a0:01:09:a6:58:93:f8:c2:ce:27:4c:56:5a:f2:3e:
                    0e:87:91:09:49:d5:b8:39:5a:42:17:5b:59:e0:16:
                    38:af:7a:30:cd:d9:82:d0:5c:f5:2e:00:4e:13:a3:
                    2c:e5:95:e6:c6:59:aa:8e:ca:23:1a:ea:61:57:12:
                    b4:b3:31:8f:08:33:7c:c5:ef:af:95:6e:0f:99:e8:
                    91:a0:07:e2:1d:cd:90:8b:b6:84:b8:af:b7:7c:a0:
                    11:53:e6:0d:2e:48:08:df:f9:7b:43:1e:70:2c:dc:
                    13:e9:57:03:1d:3d:97:b4:54:44:64:ef:bd:55:6b:
                    8f:68:f1:a0:7d:99:e3:f0:5f:e6:96:fa:8a:26:e2:
                    94:4e:4f:d6:42:56:c3:07:d5:c0:d2:aa:7b:3e:ce:
                    e1:7e:ab:0b:3d:c0:57:db:15:54:1e:6a:3f:0b:32:
                    9d:57:4a:5b:e8:98:3d:5e:2e:6c:f7:f5:2b:ea:ed:
                    5d:5d:9b:8d:9f:f9:9a:dc:03:cc:f1:2e:4f:6a:21:
                    e6:0d:28:2a:b4:fd:5b:41:94:32:42:37:3d:fe:88:
                    84:6b:22:51:6e:ef:1a:c6:ea:dc:25:85:11:4d:cc:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:12:B2:FB:59:B5:70:33:ED:F3:29:B2:D9:C2:A2:98:9C:AB:6C
            X509v3 Authority Key Identifier:
                keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.116.0/23
                IPv6:
                  2001:df3:88c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:57:07:47:8b:2f:55:90:7d:a0:ce:ae:62:28:d0:d2:36:67:
         1a:c9:52:ff:86:6b:6c:79:c6:ac:db:ba:15:91:03:cc:74:99:
         b1:0a:29:8b:0d:bc:61:34:39:01:dc:e7:fc:33:67:d4:d2:1d:
         b6:96:f2:70:f2:fe:95:30:f6:eb:93:45:6d:65:6b:39:49:19:
         f2:ea:94:b7:9b:49:08:af:03:7b:b9:14:2a:e7:18:99:aa:1b:
         86:56:4f:39:16:ac:ff:89:46:b1:de:5d:ab:96:28:9f:bd:06:
         53:09:d9:52:f6:45:e9:e8:ad:69:be:42:5b:a3:0e:47:4b:9e:
         ef:9f:07:56:0a:2d:e6:c4:d7:3c:50:3a:d2:05:4b:e0:ef:d8:
         fb:92:49:b6:1d:3e:76:80:bb:6d:b4:4b:1c:34:b3:80:5e:62:
         79:96:8e:0c:3f:62:80:6c:81:98:f0:ef:ed:64:1f:52:c2:b1:
         45:55:35:db:fd:34:41:75:44:79:61:ac:e8:e8:ee:1c:20:bc:
         1c:e2:c5:1d:b0:99:a4:a6:37:7c:6c:34:c8:7c:2c:43:03:b1:
         68:c4:d9:f0:c4:19:c6:84:89:d9:7c:4e:ac:0f:37:f1:31:2a:
         5b:be:c3:74:fb:91:ab:e8:8b:b0:5b:4b:84:02:6d:ed:8c:66:
         53:f1:02:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org