Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa
File:                     46DE5C7875DD11ED86945E46C4F9AE02.roa (raw, json)
Hash identifier:          i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=
Subject key identifier:   4E:CA:04:5D:B1:A8:00:2B:C8:24:49:38:C6:ED:60:D1:56:05:A9:A8
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       016D
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa
Signing time:             Wed 13 Nov 2024 02:05:21 +0000
ROA not before:           Wed 13 Nov 2024 02:05:21 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     38066
IP address blocks:        141.243.8.0/23 maxlen: 24
                          141.243.20.0/23 maxlen: 24
                          141.243.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Nov 13 02:05:21 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67340961-5457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:22:6d:53:67:a3:64:14:16:d5:16:8f:18:
                    77:91:ef:97:c8:40:92:d0:0f:b5:bf:c3:7a:bc:a9:
                    02:4b:4e:6b:03:0e:b3:93:ba:0e:8b:16:4c:86:39:
                    84:37:06:86:27:67:2e:cc:a3:52:2f:44:49:db:7c:
                    15:e8:6c:c1:de:9a:1f:57:4f:6c:27:cb:65:f5:54:
                    eb:64:1b:5e:1b:19:fc:d5:85:97:de:29:31:35:a9:
                    16:c4:15:33:27:3e:0b:55:10:41:38:17:3e:a2:c2:
                    9a:84:b0:b5:e8:89:de:11:d0:23:67:20:ae:ff:11:
                    be:a1:8c:e1:5e:6f:20:5d:8b:eb:ed:b0:96:45:e7:
                    14:61:79:d3:85:c3:ab:83:0f:1c:9a:d8:8c:4c:3f:
                    de:a7:a8:0d:2f:ab:48:d8:18:79:9e:46:ae:0a:d6:
                    d5:77:f2:fc:a0:67:79:60:61:61:ed:ee:96:60:1e:
                    49:3d:b3:e9:1b:b8:0c:c9:4d:62:d8:2f:f0:77:3c:
                    a7:f9:60:f0:f9:bc:dd:c7:44:00:01:15:50:94:0d:
                    85:91:20:1e:32:a7:42:cd:0c:0b:bb:63:95:7f:e0:
                    80:88:c7:99:64:60:ee:1e:0a:6f:15:4c:cd:97:f1:
                    17:97:d8:f7:f8:36:e3:a4:f9:9a:3f:54:29:bd:8e:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:04:5D:B1:A8:00:2B:C8:24:49:38:C6:ED:60:D1:56:05:A9:A8
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/46DE5C7875DD11ED86945E46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.243.8.0/23
                  141.243.20.0/23
                  141.243.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:60:6f:65:21:10:8a:86:c6:bf:91:f6:59:b1:88:bb:cc:d4:
         01:c5:a9:06:59:bb:a7:b2:bb:56:1c:aa:27:60:d8:32:4d:fc:
         e6:4c:75:ba:1f:91:15:9a:e0:f4:4f:29:ca:33:f0:d9:11:1b:
         09:20:b7:8e:5f:cc:44:8b:91:94:12:2d:14:a4:eb:b4:cc:10:
         15:25:eb:80:50:e6:e4:59:4b:b0:f5:f5:d7:76:ca:87:24:9c:
         b6:8a:41:5f:de:04:e6:e7:3a:f5:64:24:6c:f5:2d:c1:2a:0f:
         8f:43:f0:53:24:7f:45:37:d3:79:0a:bf:80:05:c4:27:2e:23:
         a1:2f:46:ac:b8:1d:dc:0b:33:22:32:c7:f8:52:d9:fc:3b:64:
         fd:3b:04:9c:af:96:2c:70:95:fe:8c:4d:dd:b8:b9:b0:9d:54:
         f0:15:78:8e:9a:d2:97:94:77:46:26:9f:d2:0e:ea:14:05:40:
         49:ca:47:d8:5e:ae:a1:fe:43:ee:da:c4:95:0a:c5:57:2b:74:
         39:49:a1:4d:b5:5a:80:a5:e6:88:ff:eb:23:2a:d5:53:10:58:
         02:b4:9d:ff:f1:75:89:85:32:46:6d:e7:a3:3d:69:b8:3b:3e:
         c4:2a:68:fc:e3:12:aa:08:1a:c0:7b:18:cb:c0:f4:76:c9:ba:
         09:b9:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:49 2024 by rpki-client on console-fra.rpki-client.org