Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa
File:                     C9E62876DD0A11EA97BF0347C4F9AE02.roa (raw, json)
Hash identifier:          yJxNF4ZUAPB5RcZ2qNMefaRI0wxOyMyeqicC7LHVTpc=
Subject key identifier:   D3:3B:A8:36:8F:54:11:9D:5B:55:DE:14:BF:6F:35:B3:06:00:CF:FC
Certificate issuer:       /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial:       08D2
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa
Signing time:             Fri 10 Nov 2023 21:08:43 +0000
ROA not before:           Fri 10 Nov 2023 21:08:43 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4134
IP address blocks:        63.140.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
                          rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 18:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
        Validity
            Not Before: Nov 10 21:08:43 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=654e9bdb-60f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:da:8c:91:19:8d:6d:62:57:00:55:42:96:
                    41:71:6e:15:8c:40:ad:6e:57:8b:1a:ba:98:e7:6f:
                    32:58:ff:d6:f8:d7:d8:1a:35:0e:bd:c0:f6:41:f7:
                    42:d2:ed:e3:c3:95:8d:b7:fe:f0:20:66:54:61:4b:
                    70:81:d6:b7:23:f3:24:0c:88:89:7c:cf:13:49:e0:
                    33:5f:3e:18:d1:20:9c:27:99:be:f1:ee:9e:70:f9:
                    ef:6e:29:8e:32:4b:0c:2c:43:f7:f5:63:4a:20:65:
                    30:ac:0f:07:f7:d0:df:41:3f:60:9c:8d:80:c0:ba:
                    c6:c5:09:46:24:68:59:12:b7:e1:8b:15:45:60:3a:
                    30:80:93:d6:4a:b2:14:2b:87:b2:d2:d9:33:08:05:
                    ac:90:9e:ee:6b:60:d4:03:ad:e4:cf:9d:d8:7d:8c:
                    ea:9c:07:78:0b:62:96:ec:88:40:3a:ae:69:0a:81:
                    12:aa:92:80:d6:6b:f4:83:8d:3f:39:73:53:ab:e8:
                    4e:fa:23:45:0a:f1:36:dc:e8:47:99:5a:2f:11:5f:
                    1e:a3:32:77:5f:2b:29:cb:b2:1d:23:19:97:23:92:
                    18:44:c3:e0:43:d1:9f:c2:84:e2:51:45:a5:4b:24:
                    b1:65:25:3d:0e:b8:d2:ac:12:a7:47:5a:e9:64:80:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3B:A8:36:8F:54:11:9D:5B:55:DE:14:BF:6F:35:B3:06:00:CF:FC
            X509v3 Authority Key Identifier:
                keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:8a:d2:83:3e:64:c2:5b:e1:db:4d:ba:b5:ea:9a:cc:63:
         12:e1:46:27:f1:94:2f:cf:a7:58:55:ba:61:df:97:98:f8:4e:
         28:77:4a:eb:6f:61:61:f5:29:6a:c0:95:ac:8d:58:1b:5d:01:
         fc:3f:cf:7c:b0:73:c9:2e:df:23:98:98:c4:21:c2:45:bd:6e:
         8f:27:7e:8b:b2:77:a8:35:bf:45:9d:02:52:3d:0e:bd:b2:27:
         78:97:54:9c:09:96:00:7b:30:55:5f:be:84:36:a9:74:65:a2:
         87:30:10:d8:b4:c7:37:8c:42:bd:fb:a4:9b:0e:bc:3d:eb:58:
         8d:09:a7:56:d1:f2:44:e4:ae:c2:f9:d7:87:79:07:74:13:5f:
         ec:4e:da:83:86:5f:c5:bc:de:55:66:17:d5:0e:66:0b:1c:84:
         c6:fa:96:60:59:3b:1b:26:a5:fd:87:a5:e9:0a:18:82:11:a5:
         8a:27:aa:24:f3:23:46:f1:e0:15:bf:6f:b8:b1:28:f0:7e:80:
         4b:e3:60:92:4b:a6:45:26:8e:5e:d5:4f:2f:f2:5c:f5:21:90:
         b3:ed:a1:db:b6:6b:14:37:08:e5:ee:8f:88:7b:bd:35:88:82:
         56:42:c9:38:29:cf:e8:0f:9b:8c:b0:3c:51:42:60:77:05:78:
         b3:7c:37:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:19 2024 by rpki-client on console-ams.rpki-client.org