Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
File:                     1C12F510A05011ED8B25FE52C4F9AE02.roa (raw, json)
Hash identifier:          1wzAAO4AKYUAtPaQCenURf1G+xzx/JZUm83LqUNjO1s=
Subject key identifier:   0C:6A:B2:28:D1:BB:41:D2:71:97:D3:17:42:55:9F:02:49:96:D1:B7
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2821
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:05 +0000
ROA not before:           Thu 28 Dec 2023 16:03:05 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     147187
IP address blocks:        49.231.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10273 (0x2821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:05 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c39-5e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:61:19:39:09:ec:1a:d4:a5:d5:0c:0b:44:
                    dc:65:89:d6:0e:30:62:ec:bd:5f:83:6b:22:14:c7:
                    2a:b7:7a:ee:ce:b0:b8:5d:6d:e7:52:ca:44:b2:41:
                    3f:14:ce:0d:ee:1b:87:b6:e3:22:3f:2c:8d:d3:24:
                    a5:08:db:4b:50:b4:57:a2:40:5b:09:b5:dd:c0:b5:
                    c2:86:5c:c8:ff:f2:11:a7:27:dc:8b:ab:8e:df:fe:
                    4c:ad:35:b0:fc:52:8e:fd:91:3b:ad:85:70:01:8b:
                    8d:f0:26:72:e7:5e:8d:6c:61:27:17:01:e9:9c:4c:
                    49:87:5b:be:56:e5:3c:1c:14:c1:dc:a3:0f:5f:f3:
                    f7:89:cc:1d:2f:25:d0:75:6f:f1:72:2b:19:25:b3:
                    78:ac:6d:8f:a2:66:11:34:9a:e4:f6:d6:41:73:a1:
                    93:7d:9d:70:fb:97:64:36:0e:3d:6e:11:6e:4f:03:
                    c7:69:5c:a0:f1:55:b5:2a:c4:d0:2a:bc:41:d4:0c:
                    b7:cb:b6:cb:d4:52:1d:9d:8e:d3:00:31:8e:8e:14:
                    74:9c:c9:2f:71:0c:a3:3b:25:f0:f1:8f:82:e3:c9:
                    41:cf:bb:25:4d:36:1e:e5:43:dd:65:6c:0a:c6:4d:
                    69:2d:83:10:ed:45:e1:14:ee:4b:f2:b3:81:24:9f:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6A:B2:28:D1:BB:41:D2:71:97:D3:17:42:55:9F:02:49:96:D1:B7
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C12F510A05011ED8B25FE52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:b7:97:2f:ac:55:69:77:d4:3a:d1:96:96:b0:87:58:5b:
         7c:16:69:9b:46:c6:d7:77:98:c6:cf:86:63:d0:24:53:a6:5d:
         ce:d5:db:2c:c9:39:78:ea:e1:28:5e:08:12:35:99:df:56:76:
         fd:51:e9:fb:82:72:f2:37:8b:f8:b0:59:00:bd:d8:71:26:fc:
         ce:a9:a7:d0:2e:b8:40:dc:0f:29:bf:71:18:c3:fa:07:a8:81:
         b3:06:80:72:d0:eb:e3:c4:9d:5a:d7:0d:45:50:1b:fc:48:58:
         18:69:57:25:10:61:83:a0:85:48:f8:cd:96:8f:32:8d:14:41:
         34:18:69:b6:6b:2a:44:1b:75:49:e6:63:58:11:b6:fe:aa:a5:
         4c:4b:5c:02:d0:7a:b0:89:06:38:52:a7:17:64:0c:bf:c5:cc:
         32:f0:e4:13:f1:d8:a3:8e:1a:b6:65:00:8f:a0:f0:4a:e7:90:
         8f:25:77:f3:7e:2f:dc:96:c3:fd:60:17:a0:af:63:c1:01:69:
         71:ac:32:76:be:96:f4:97:64:6e:8f:68:bc:46:6d:d6:6b:67:
         5b:32:64:27:94:c2:3d:7d:ce:97:a3:8c:a7:4e:b4:a4:bd:57:
         dc:c2:3f:86:29:70:bc:e1:80:31:c0:20:51:a7:fe:d5:8f:0b:
         91:0b:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:03 2024 by rpki-client on console-ams.rpki-client.org