Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/727368486F1F11EDA34CF049C4F9AE02.roa
File:                     727368486F1F11EDA34CF049C4F9AE02.roa (raw, json)
Hash identifier:          NZbs45t8XXl/tBdxXy7mih7R8Y+MNfTCo2/0Q6D+AY8=
Subject key identifier:   E3:77:3E:68:B0:7E:AA:C8:A7:F4:EC:ED:9B:F3:66:15:7E:F0:36:A9
Certificate issuer:       /CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
Certificate serial:       340C
Authority key identifier: 3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/727368486F1F11EDA34CF049C4F9AE02.roa
Signing time:             Sat 04 May 2024 14:50:50 +0000
ROA not before:           Sat 04 May 2024 14:50:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     45736
IP address blocks:        203.123.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl
                          rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13324 (0x340c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171634/serialNumber=3FC971292CE91A591A8CDFA7D1AE09CA46E03E87
        Validity
            Not Before: May  4 14:50:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66364b4a-bb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c7:ef:03:f3:f8:b0:66:8f:1f:e5:9c:62:8b:
                    62:05:a6:a1:91:a4:30:ea:cd:36:5b:c2:cb:c7:10:
                    fe:2d:0e:43:54:18:7e:b1:4c:f1:f9:ec:3b:25:82:
                    28:47:3d:29:61:f4:93:68:2e:38:18:41:81:c5:9e:
                    be:70:51:7d:9f:49:0d:bb:e8:c0:84:de:15:75:9d:
                    1d:45:c4:a3:70:b5:77:fd:81:ce:aa:98:fa:ca:89:
                    d5:b1:2e:43:ab:8b:5d:d5:19:2e:68:d4:29:90:4c:
                    c4:6a:7b:f2:ca:2a:a0:6f:d6:b6:9f:87:c8:39:93:
                    b5:f4:b0:42:7d:c0:86:ca:4d:8e:a1:08:4c:f6:71:
                    ea:cc:68:ad:98:e6:40:14:c5:85:82:5e:fb:4a:a3:
                    44:bc:2c:cc:3b:b2:7f:3d:f4:29:d1:5d:bc:8a:dc:
                    68:13:fb:78:48:df:69:a7:9a:ae:c7:fd:b8:32:33:
                    4b:78:40:53:57:fa:b9:8e:44:77:7f:54:50:00:b0:
                    05:3a:b9:f3:cb:7c:94:f1:9b:ea:84:3d:43:40:ba:
                    26:de:7c:44:33:c2:aa:e3:af:90:a1:5a:81:e7:1f:
                    f9:c3:7b:be:0d:c2:29:6b:d0:cb:9e:fd:ac:79:9e:
                    d1:ac:d3:d1:83:1d:a7:b1:a0:e9:69:fc:59:67:f2:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:77:3E:68:B0:7E:AA:C8:A7:F4:EC:ED:9B:F3:66:15:7E:F0:36:A9
            X509v3 Authority Key Identifier:
                keyid:3F:C9:71:29:2C:E9:1A:59:1A:8C:DF:A7:D1:AE:09:CA:46:E0:3E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/P8lxKSzpGlkajN-n0a4JykbgPoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8lxKSzpGlkajN-n0a4JykbgPoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171634/942B83BC1D9011E2A36166F008B02CD2/727368486F1F11EDA34CF049C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.123.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:17:59:b4:c9:b8:c5:eb:ff:32:e0:d5:93:93:be:a4:41:
         79:63:8a:46:09:73:f8:7c:c9:b5:02:8d:bf:b0:86:84:2b:c5:
         14:5c:6c:65:71:8e:08:87:f7:a7:7f:03:39:de:1c:e8:50:7e:
         3d:69:6b:0c:f9:13:e7:c6:03:5c:d7:1c:f9:e3:03:56:83:9b:
         7c:c9:6f:4c:ed:1b:f7:4c:d4:cd:5f:7a:39:2e:fc:ba:75:8c:
         65:c0:f5:87:95:c1:44:45:eb:fe:1f:4c:3e:d7:1f:5d:e9:12:
         5e:13:ec:4d:77:8e:b2:a9:0c:94:51:69:0c:3e:47:54:67:a7:
         a2:12:71:d4:26:18:50:e7:9e:17:a9:20:f5:db:16:ec:7c:3b:
         cb:ef:5d:5d:5a:88:52:b8:01:8b:ee:e3:50:52:d1:e5:5f:36:
         9b:f0:ed:ac:37:35:6c:33:50:b7:11:36:7f:71:58:c6:a5:5b:
         e5:11:d6:d8:88:8a:b6:72:02:79:1a:71:1c:3d:14:31:05:8e:
         1a:80:c2:4a:d6:31:60:cd:19:d0:46:46:24:c4:d0:8e:2a:77:
         d1:fc:62:d2:2b:1f:c0:92:1c:23:85:74:d5:9e:9f:b5:e6:82:
         b6:bb:cb:18:e7:02:36:79:49:c6:9f:fc:dc:c0:98:8d:0d:7f:
         17:37:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:15 2024 by rpki-client on console-ams.rpki-client.org