Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
File:                     BCAE5314F75C11EB95BE8C87C4F9AE02.roa (raw, json)
Hash identifier:          0j4qXjmpQjaICT1LO2qciryz+Oskgntzqwfwnl8SXbw=
Subject key identifier:   C2:92:D4:64:BC:4C:75:88:57:8A:AA:F2:17:56:AB:38:4C:70:72:76
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2615
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
Signing time:             Wed 10 Apr 2024 16:22:47 +0000
ROA not before:           Wed 10 Apr 2024 16:22:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     17557
IP address blocks:        124.109.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9749 (0x2615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Apr 10 16:22:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6616bcd7-7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:29:58:28:47:08:33:a9:f7:e0:17:49:0e:
                    28:a5:a8:a3:19:9e:1a:6f:de:fc:a5:64:21:f5:4a:
                    29:0c:73:a1:19:5e:78:2f:fe:55:f7:17:8c:d3:7f:
                    0d:85:34:27:42:a6:6f:23:d9:79:60:54:60:93:bb:
                    07:be:45:bf:2a:36:c0:97:ca:eb:ed:b5:16:cd:fc:
                    04:6a:22:f4:fb:f7:5b:ab:cc:ad:2c:d1:fa:18:0a:
                    eb:06:69:25:8e:84:e4:a0:bf:29:34:aa:ed:f9:91:
                    9f:37:b5:65:5e:6c:aa:d3:cd:21:63:df:10:7a:5e:
                    7e:15:6a:9d:5f:27:53:23:8b:fc:ea:68:b4:f1:8f:
                    15:bc:8e:e6:56:ef:3e:1c:13:26:e7:6f:d5:ec:0c:
                    3a:b4:1c:fa:f5:ed:e5:f9:4f:1e:59:5a:1a:7d:6d:
                    87:e4:a2:44:93:70:07:d7:52:be:78:dc:58:c4:f0:
                    5a:75:5a:31:72:a2:2b:3d:e2:ec:2d:20:63:2a:2d:
                    ed:2e:3e:5d:f4:7b:cd:11:41:09:f6:2f:45:63:f9:
                    31:0e:00:31:bb:ba:46:77:e5:ff:4a:94:a6:35:af:
                    f8:32:04:62:4a:4f:8f:15:4b:57:29:3a:eb:44:07:
                    19:31:cf:3c:c2:92:35:02:96:70:2f:71:0f:c4:fa:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:92:D4:64:BC:4C:75:88:57:8A:AA:F2:17:56:AB:38:4C:70:72:76
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:28:a1:6c:16:66:08:c5:43:20:52:27:80:20:50:6e:39:41:
         a2:ed:c9:c3:2d:58:27:af:ec:d9:e2:50:7e:92:d9:a4:21:0b:
         fc:15:93:8c:40:65:62:95:41:f5:f4:30:5f:21:07:1b:11:ca:
         4c:19:4a:5c:8a:a8:e4:ed:3b:3a:37:ab:15:ea:c0:45:1a:a0:
         9d:5a:91:c3:cc:14:9d:92:4b:a0:48:45:f0:0f:6f:fd:d8:62:
         90:32:3c:33:1a:38:0c:1c:d4:b3:f0:80:e6:43:db:37:6a:3c:
         50:ba:a0:15:09:44:44:40:b5:a8:71:f0:94:ac:a0:3a:ee:d1:
         5c:06:61:ce:a0:bd:88:77:a0:d0:48:99:29:bb:5a:5f:11:1f:
         be:8d:16:c0:c4:c1:04:68:b9:b7:4e:86:8a:93:6e:ab:e2:a9:
         a4:d5:8f:be:f1:46:39:ac:74:b6:8c:8a:7c:4e:db:7c:26:3c:
         7a:dd:94:27:c6:10:d3:50:39:c4:85:d8:0e:ef:32:6b:19:bc:
         3b:84:16:a7:dc:fd:5d:1d:03:5c:b1:74:68:6e:df:00:cb:d4:
         c4:c3:29:b9:4e:57:f7:9c:90:71:10:ae:9d:84:4e:11:93:66:
         0f:fc:48:39:9d:89:36:34:f4:2e:6f:f3:c3:59:ba:61:08:cd:
         e5:06:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:12 2024 by rpki-client on console-ams.rpki-client.org