Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
File:                     766B426A7A9011ECA266DE36C4F9AE02.roa (raw, json)
Hash identifier:          42rM/YXw/GYdbNXckygMx1iVCDC/xjgnKGAPtnBzAdI=
Subject key identifier:   37:B0:AF:55:84:B3:19:41:25:97:C0:0E:05:F7:58:B6:B9:AA:46:B3
Certificate issuer:       /CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
Certificate serial:       030D
Authority key identifier: 62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
Signing time:             Sun 03 Mar 2024 02:54:33 +0000
ROA not before:           Sun 03 Mar 2024 02:54:33 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     38911
IP address blocks:        203.100.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl
                          rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 00:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195456/serialNumber=62DEFDD9D5D76B3E1E68F9812957150DC0F53C5D
        Validity
            Not Before: Mar  3 02:54:33 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65e3e668-6937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:dc:8d:b0:25:22:cc:1d:d8:80:78:e3:7e:
                    c2:a1:d5:f5:f9:14:fe:f0:b3:2d:1c:f0:af:8e:34:
                    da:7f:9a:e3:24:0a:b0:22:80:89:9a:90:d2:a8:30:
                    ba:88:fa:fc:cb:1b:a8:aa:0f:c7:cb:19:f7:5f:61:
                    5b:27:87:f9:5b:b3:04:3a:60:b3:40:98:9b:b2:3c:
                    1c:e0:f7:94:67:d2:ea:42:23:60:3a:90:27:b2:21:
                    00:c0:5c:59:b4:70:6e:8e:a7:ea:85:e7:29:63:15:
                    70:3c:b0:da:21:1e:9b:d6:2e:e3:77:f4:a8:df:66:
                    69:b6:7c:1d:b2:c8:52:90:58:57:29:32:88:3b:68:
                    99:dc:7c:e8:47:fa:b1:8c:f1:66:79:34:dd:0e:1e:
                    77:b7:cb:58:71:50:1a:ef:22:68:ae:ca:cb:35:b2:
                    b2:24:a6:2f:2d:8f:9e:c2:1d:8a:c8:31:7a:79:6e:
                    9b:02:63:f0:24:04:0d:7f:d1:e9:89:5d:46:d5:40:
                    4f:98:5e:13:11:67:79:ac:12:5a:90:c6:48:02:a7:
                    ca:f5:7a:70:89:69:a8:12:99:8a:40:fe:54:a0:91:
                    f9:ed:8c:97:6e:50:5b:c1:11:89:91:1a:c2:9d:40:
                    a4:82:f2:11:16:80:71:50:6d:cf:59:dd:8c:18:53:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B0:AF:55:84:B3:19:41:25:97:C0:0E:05:F7:58:B6:B9:AA:46:B3
            X509v3 Authority Key Identifier:
                keyid:62:DE:FD:D9:D5:D7:6B:3E:1E:68:F9:81:29:57:15:0D:C0:F5:3C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/Yt792dXXaz4eaPmBKVcVDcD1PF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yt792dXXaz4eaPmBKVcVDcD1PF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195456/9C45B9B47A8D11EC84B90534C4F9AE02/766B426A7A9011ECA266DE36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.100.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:53:53:f7:67:25:60:e5:e0:d2:42:83:22:bf:ee:6d:78:e4:
         10:ab:7a:c7:b4:7e:6f:fb:87:fa:8d:8b:c0:f3:b2:51:34:89:
         05:fa:1b:0c:8d:86:51:17:9f:cf:18:e2:ba:75:09:18:c9:f7:
         03:cc:cd:0a:f9:78:fe:c2:bf:e6:9b:34:6f:6b:28:84:d5:1a:
         10:a1:7d:4f:0b:d2:1d:e7:2b:d5:de:63:fc:fa:30:87:13:f0:
         50:bc:a9:4f:93:f0:d6:41:8f:95:8f:df:ec:fb:f1:e5:93:e8:
         82:62:4f:b2:a8:a9:a6:a3:84:7f:b2:98:7a:96:e4:05:af:ca:
         3c:1b:ec:1b:42:93:27:6e:3f:5f:13:70:e6:01:83:34:9c:bb:
         5a:53:a0:3f:58:ff:60:57:27:e3:ea:a2:2e:88:3e:d5:bc:84:
         7c:c7:b3:b6:32:ee:11:52:93:1a:18:b1:cf:1f:3c:61:5c:93:
         0b:13:b9:da:0b:29:0f:94:89:de:61:0b:49:66:f3:3a:40:49:
         14:57:8e:86:8c:eb:f4:b3:49:d6:19:9a:60:72:ef:49:28:c8:
         3e:e2:db:67:d4:a6:95:ff:01:df:a1:ea:2c:48:45:08:68:51:
         5c:b1:e3:ce:49:f9:5a:0f:6a:6c:27:7b:d8:11:d7:64:b8:d9:
         91:c8:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:04:22 2024 by rpki-client on console-ams.rpki-client.org