Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
File:                     9052A59870AF11EF87B5DA0DC4F9AE02.roa (raw, json)
Hash identifier:          ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=
Subject key identifier:   6B:0B:9D:EE:05:1E:13:1E:F4:01:90:D9:89:95:A3:61:29:C9:2B:89
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       35
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
Signing time:             Thu 12 Sep 2024 02:34:42 +0000
ROA not before:           Thu 12 Sep 2024 02:34:42 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     38809
IP address blocks:        202.12.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Sep 12 02:34:42 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66e25341-4b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:fb:e5:39:00:1b:4c:a8:43:0b:b6:9e:1d:
                    a0:0d:8f:8b:c7:af:2f:54:50:d1:b2:7d:88:42:8f:
                    98:89:c9:3b:b9:3c:73:b7:a9:16:95:10:2b:2f:81:
                    d1:9a:2e:0a:69:a4:94:30:0e:d5:fa:e5:81:1d:b9:
                    37:1c:24:c3:ec:36:9b:2a:f5:3b:4c:e8:5f:ef:7d:
                    92:08:76:91:1c:f5:18:21:8c:a2:72:e8:19:7d:7a:
                    b2:55:13:b0:5f:b4:0d:ab:51:47:89:94:1e:4c:6f:
                    23:66:92:46:b5:b0:43:7f:f2:69:1a:a2:ea:55:a7:
                    5e:1f:11:3c:6b:d1:4c:02:b2:b6:d3:f6:be:85:99:
                    93:0a:85:8a:53:e4:00:10:4d:a5:f1:dd:d5:7e:f6:
                    d5:a4:10:3a:3d:0f:7b:2d:12:3f:a7:85:7f:9c:b6:
                    9f:c2:08:98:1c:d9:a5:86:c1:d0:2d:e8:d7:fa:b0:
                    d8:b9:26:8f:c3:6e:34:3b:05:c0:be:eb:42:17:f3:
                    3a:ee:8a:b0:a2:37:7b:9b:41:e2:bd:c8:16:bf:25:
                    88:58:52:49:0e:49:15:6e:9b:89:4a:af:58:69:ea:
                    31:1f:c0:e6:04:8e:a4:55:87:20:be:e3:58:1e:93:
                    ab:3b:44:60:33:35:d1:83:a5:ca:98:3a:45:f2:98:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:9D:EE:05:1E:13:1E:F4:01:90:D9:89:95:A3:61:29:C9:2B:89
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4c:2d:15:32:cb:08:63:2d:d5:f4:f2:9a:e5:56:60:8a:28:
         fc:fd:14:82:87:63:64:e1:7d:b4:b8:b0:11:df:b1:26:3c:31:
         e5:e9:93:54:8c:14:f6:e4:c3:a4:0e:c7:6c:e9:f0:76:c0:ae:
         22:f7:3f:3a:d2:b7:29:60:00:34:a6:be:2a:6a:1b:ea:3e:c7:
         d0:80:83:d4:80:c6:fe:14:da:7c:c2:ec:cf:73:ab:d3:1b:6b:
         af:a7:a7:36:83:88:ca:35:e7:f8:27:c7:ab:41:bd:bf:16:33:
         9b:13:a7:18:4c:ee:fb:8a:5c:c7:88:9a:1f:70:af:3e:1b:00:
         74:fa:2a:24:4a:31:e4:4f:fb:f9:07:3e:44:63:88:f3:ff:a3:
         21:d0:ff:0b:15:70:78:3c:95:2c:1d:be:15:ac:b5:62:cd:f2:
         39:9b:7f:5e:8e:f8:04:87:a3:d1:7b:cc:b2:23:de:ee:c5:ea:
         ea:4b:2f:ab:e9:f4:93:1f:ca:0c:38:cb:58:11:73:5c:9e:38:
         1a:c0:fb:52:c7:1e:dc:6e:28:ff:c6:16:de:10:9f:ce:4c:2a:
         a8:29:a4:b7:93:a1:b7:81:cf:d1:93:2e:91:61:92:df:20:dc:
         cd:11:5e:81:29:80:60:3b:f5:d6:d9:7a:f1:a3:cd:a6:f4:c8:
         47:1c:94:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org