Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
File:                     7D232E6033A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          7lwNL3t/JdazFMQVAAWu8rGphtVMmdlmg5/1e8s3fEI=
Subject key identifier:   A9:CA:E7:73:7F:40:B3:BD:C6:86:21:73:48:E6:A1:EC:DC:BA:48:9D
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       0699
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
Signing time:             Tue 02 Jul 2024 23:11:49 +0000
ROA not before:           Tue 02 Jul 2024 23:11:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     2497
IP address blocks:        149.234.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Oct 2024 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 23:11:49 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66848934-cd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:9b:18:0f:91:be:98:bd:ba:9d:0f:73:b7:
                    e8:0f:d2:59:d0:37:a5:7c:a8:19:f9:ba:27:7b:44:
                    5c:ff:f8:51:4b:2b:85:8f:82:39:24:21:70:00:90:
                    1f:bd:65:9a:df:88:a4:af:ce:e1:32:be:77:54:03:
                    8f:c6:77:36:96:af:98:d6:df:2c:9a:26:d3:6e:22:
                    d3:74:7b:ef:ed:d6:ab:72:53:98:dd:e8:d7:42:9e:
                    1b:39:81:ed:9b:fa:f7:91:c2:09:a2:63:2a:96:d3:
                    36:11:50:23:77:e3:a0:53:a9:cd:22:57:a7:bf:69:
                    c2:d4:6f:19:78:a1:dc:cc:be:56:e7:7a:a9:b4:9f:
                    c0:35:f7:7f:5d:c2:cd:77:87:08:b0:ea:e0:b1:73:
                    54:cf:4a:2c:ee:33:8f:ef:c7:de:73:ac:29:d3:bb:
                    6d:23:c1:8a:c2:1d:91:f5:a7:92:ee:3f:8b:d4:5c:
                    aa:6f:e5:ed:18:18:3a:54:9b:c6:fb:2c:48:eb:65:
                    33:0b:e7:b9:9b:ae:7b:f6:92:fa:bb:3c:83:f2:1f:
                    a5:0a:15:e8:ad:ed:b7:22:af:21:20:23:65:70:ef:
                    32:69:bf:dd:8c:77:b7:f5:59:1f:fb:27:f1:0a:df:
                    62:9a:fb:65:a5:55:31:dd:cc:b7:09:a7:5c:0d:d9:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CA:E7:73:7F:40:B3:BD:C6:86:21:73:48:E6:A1:EC:DC:BA:48:9D
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7D232E6033A611EB8B013530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:61:04:ba:4b:7c:1c:e2:d0:af:2d:d0:da:bd:44:cd:ae:91:
         be:08:64:34:07:d7:3a:cf:40:0e:61:19:d6:d4:56:89:31:1b:
         46:d0:3d:77:01:e3:6b:46:93:e2:18:f4:f7:c5:c7:85:7e:7d:
         24:83:4e:88:a0:f8:01:4b:d6:91:5b:0e:3a:4d:2f:80:c8:d9:
         86:bf:09:66:8b:78:e8:cd:e8:c2:b7:37:ee:a7:1b:00:f3:9d:
         03:93:c4:29:2b:a9:5a:1f:4b:38:0a:aa:21:fb:3c:46:0a:17:
         a4:0c:f9:09:c6:26:2d:e2:da:3c:b6:d9:dc:96:93:23:8a:14:
         08:37:fa:6c:9e:bd:49:78:06:03:e9:db:bc:74:07:e2:31:f0:
         8a:1f:bf:d8:34:8e:fe:5d:6c:08:54:28:b1:63:b1:f2:72:26:
         21:71:ab:26:38:94:d8:a8:b5:1b:cb:80:f2:ee:13:97:28:9d:
         8e:57:69:f3:a1:ba:9a:c7:93:b5:ff:f0:22:4a:bd:0d:50:66:
         22:51:f8:02:fb:f5:89:5a:91:53:26:c1:ef:10:04:47:a4:b0:
         cb:17:10:51:69:7f:43:fd:a6:e9:41:47:12:45:0e:a9:a9:68:
         e4:78:db:da:de:77:94:79:fc:52:7f:87:34:30:ca:34:25:40:
         2e:ac:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:13:30 2024 by rpki-client on console-fra.rpki-client.org