Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/52F3DAA6C1CB11EF9974C909C4F9AE02.roa
File:                     52F3DAA6C1CB11EF9974C909C4F9AE02.roa (raw, json)
Hash identifier:          6wwD4dCdXwtS+LnCDXktDC+zo03fJil5+xbscBQAfeQ=
Subject key identifier:   B9:93:26:05:56:B0:86:DE:BE:2C:C2:4F:FE:39:5C:E5:85:0F:B8:F0
Certificate issuer:       /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial:       06
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/52F3DAA6C1CB11EF9974C909C4F9AE02.roa
Signing time:             Tue 24 Dec 2024 07:47:29 +0000
ROA not before:           Tue 24 Dec 2024 07:47:29 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     6453
IP address blocks:        202.44.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
                          rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163358
        Validity
            Not Before: Dec 24 07:47:29 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=676a6710-54eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:e8:da:d8:1c:0d:35:7c:b7:86:1f:f9:e6:
                    9a:b4:9e:2c:c6:7b:60:df:76:34:24:46:f5:4d:83:
                    6e:47:a7:a8:20:04:1c:aa:10:e5:a4:02:3a:22:4a:
                    5a:d1:04:fb:36:8b:b5:4f:65:2f:88:f0:93:5a:dd:
                    b3:ec:d3:23:8e:f3:7f:ba:38:36:93:7a:4b:66:57:
                    02:3a:88:56:7c:d3:35:85:07:24:c8:85:9b:b0:7e:
                    6c:ec:f9:aa:0a:48:22:de:be:15:6c:7f:c3:5d:a6:
                    a7:9a:65:e6:5e:d6:48:2c:35:4b:4b:8d:95:58:a0:
                    e3:82:17:61:87:8e:a7:21:5c:33:88:ac:86:15:a2:
                    8a:f1:c2:9e:0f:47:f7:90:9c:26:6b:99:15:ec:53:
                    ba:8a:48:c3:56:01:1a:b0:d9:f7:ff:a4:92:e8:6a:
                    e4:69:7b:a6:45:b5:d7:7d:c5:6b:d8:f5:4c:b5:98:
                    90:ae:bb:76:2b:68:39:88:25:a3:16:3b:77:ef:64:
                    a5:70:bb:fb:47:a2:8b:b3:d8:71:20:77:a0:3c:84:
                    bd:2e:cc:88:13:d1:be:47:e5:71:90:09:84:9a:1c:
                    91:1f:98:7b:d9:48:52:35:12:c0:80:76:8a:df:4b:
                    1a:0a:b0:88:4c:f1:22:6c:00:93:e5:c1:32:b6:60:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:26:05:56:B0:86:DE:BE:2C:C2:4F:FE:39:5C:E5:85:0F:B8:F0
            X509v3 Authority Key Identifier:
                keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/52F3DAA6C1CB11EF9974C909C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:30:4d:ff:04:80:d4:6b:b2:38:a3:8d:31:b1:59:4c:c4:20:
         b0:42:a5:b1:83:32:58:fc:0c:24:0b:4d:58:2d:a1:f4:f2:0b:
         33:05:66:5a:93:ef:c0:86:fd:df:60:55:11:8e:6d:19:07:31:
         b6:4e:19:93:a6:a8:7c:04:77:02:57:96:64:88:3a:58:90:9f:
         a7:f2:39:0e:59:8d:85:31:49:2f:fd:57:3a:06:f6:5b:05:15:
         38:67:d9:85:a4:9a:13:64:c7:23:a7:cb:0f:83:5f:64:7c:e4:
         94:13:7e:ce:f0:b8:a3:0b:26:ee:1f:74:3f:da:0b:fd:16:ea:
         8d:68:43:dc:b8:cb:b1:79:7d:13:70:09:cc:c2:59:9b:f3:f1:
         e9:66:09:ff:18:29:3c:f5:6a:82:8a:a4:fb:9f:1a:6c:34:e2:
         dc:50:90:ae:f2:3d:0a:02:1a:56:26:9f:05:00:05:67:75:19:
         8c:7b:95:88:0d:b4:4c:a8:9f:8a:7b:33:80:74:12:2d:de:cc:
         4c:67:2c:65:36:3d:e0:d1:7d:76:ee:5d:66:86:5f:c6:99:0a:
         8d:ef:ae:1b:cc:a2:bc:8b:d3:a9:30:a7:f9:a8:71:bd:b8:bd:
         0e:54:24:2c:eb:bb:05:de:38:97:04:d0:cf:e2:fc:26:ed:8e:
         07:85:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:35:48 2025 by rpki-client