Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
File:                     AF625B0680FA11EC96280855C4F9AE02.roa (raw, json)
Hash identifier:          E3B3g4VAEyLf5g5lxP3OkUQYcv0XXwClQf1bCMVwZF8=
Subject key identifier:   27:75:70:62:9A:E8:31:03:AF:C3:60:FB:CA:88:BD:D2:9B:2C:BA:73
Certificate issuer:       /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial:       0B29
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
Signing time:             Tue 20 Feb 2024 19:48:14 +0000
ROA not before:           Tue 20 Feb 2024 19:48:14 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141731
IP address blocks:        113.212.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
                          rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 20:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
        Validity
            Not Before: Feb 20 19:48:14 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65d501fd-691a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:57:90:8d:83:78:c3:4b:40:fc:f9:0f:bc:
                    29:ec:78:76:4d:c1:e1:c0:40:c3:fd:ae:6c:0f:15:
                    eb:f4:80:5f:50:9a:fd:d3:aa:c4:58:04:ff:af:3a:
                    e6:3d:61:45:31:ba:27:2e:70:a0:68:ef:c1:a1:1f:
                    b9:d7:af:a4:e9:e6:5a:3d:5b:60:7e:25:d5:87:16:
                    1d:05:db:b5:03:c4:a8:2a:97:3d:0a:db:77:d3:e6:
                    ff:ea:79:e5:f6:0a:97:89:a2:b7:8a:99:80:8e:2f:
                    c5:51:02:93:98:d6:6f:83:30:51:27:e4:9d:c1:81:
                    d4:67:ba:d2:7b:e4:f9:5a:2d:f2:f1:f2:9d:ad:92:
                    11:7c:ea:21:41:58:6b:d0:01:5b:2b:11:f6:33:44:
                    24:70:b9:64:3a:05:a1:63:93:98:59:e1:aa:0f:ad:
                    c0:3e:57:df:3f:11:ad:2f:98:b7:35:2a:b3:1b:9b:
                    90:59:3c:41:a6:9c:0b:e1:4d:39:7f:45:11:1a:e4:
                    c3:71:a4:d9:54:99:8b:be:ba:88:aa:64:b9:16:39:
                    6c:71:3a:b9:51:9a:9c:ed:d7:df:cd:4f:f9:e4:33:
                    91:65:5c:19:cd:28:8e:82:a6:de:1b:09:df:83:bd:
                    fd:d2:10:a7:43:7c:94:ff:cd:31:06:67:ac:0b:6d:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:75:70:62:9A:E8:31:03:AF:C3:60:FB:CA:88:BD:D2:9B:2C:BA:73
            X509v3 Authority Key Identifier:
                keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/AF625B0680FA11EC96280855C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:cb:84:ed:ed:2e:fb:3b:95:41:06:0c:0d:84:ba:c6:26:
         8b:c2:2c:fa:9b:8a:61:66:5f:77:96:46:d7:08:1c:fe:c3:a7:
         a8:2c:6c:6e:3b:86:96:67:a1:89:eb:88:e8:16:ff:2a:ba:dc:
         cc:23:dc:10:88:67:7b:3c:29:74:aa:e8:c8:96:74:26:a7:9f:
         76:b8:92:3e:ba:cd:c9:43:74:95:82:16:d4:87:76:d3:0c:82:
         15:56:6c:37:13:b1:65:72:6a:cf:cc:96:58:06:e2:6e:8f:92:
         c9:0c:0a:44:92:64:b0:20:fc:cf:89:e9:a9:2a:11:09:6a:37:
         6f:1e:cd:08:f1:d3:7e:6a:4c:54:82:32:bd:32:fb:91:f4:95:
         05:b6:9b:84:67:f9:90:49:a7:21:3d:5f:be:67:d2:a1:fd:3d:
         f2:32:04:d2:5b:37:a8:b1:b3:8c:11:9f:0f:33:d9:08:f7:fa:
         7b:5d:77:5c:e0:90:6b:c6:05:87:92:5e:3e:ad:02:b7:42:e2:
         01:5b:c7:3e:08:d0:2b:b3:2d:a6:84:53:f4:21:b1:44:15:61:
         f6:99:b6:cf:fd:88:44:66:77:1c:de:3c:67:7a:01:45:1a:20:
         ad:bf:ef:87:c3:9e:e2:df:9f:f2:f4:9e:b0:8e:09:4a:f9:ee:
         21:ce:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:12 2024 by rpki-client on console-fra.rpki-client.org