Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
File:                     9EA66A9E737D11ECA0A3A018C4F9AE02.roa (raw, json)
Hash identifier:          351c1xDCKrPS/Zgdm9IuCdTBAtSfPFKtcdL0Nkv+aac=
Subject key identifier:   18:59:A2:21:EB:42:05:E2:61:A5:4C:74:3E:D2:6B:1B:08:44:85:9C
Certificate issuer:       /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial:       0766
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
Signing time:             Thu 04 Apr 2024 23:01:48 +0000
ROA not before:           Thu 04 Apr 2024 23:01:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141435
IP address blocks:        149.234.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
        Validity
            Not Before: Apr  4 23:01:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660f315c-ad7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:9e:64:da:cf:3c:df:46:c5:fd:44:92:29:
                    90:ef:b9:9a:3d:f5:b4:61:2f:4b:6e:5e:47:ef:55:
                    15:1e:74:a3:ef:c5:e4:fe:0f:9d:cf:35:36:f3:73:
                    1a:28:c2:54:1b:59:81:38:39:db:2f:e4:0e:c4:0d:
                    28:b5:b3:82:b1:af:ac:bf:01:a9:e4:c9:d9:85:ad:
                    a7:20:f3:1d:f5:9f:00:70:db:7d:f0:6a:73:78:9a:
                    4a:79:2b:29:c0:95:e9:7d:d3:73:cf:1d:47:2c:d6:
                    3d:b9:9b:b7:79:37:43:05:e3:84:9d:93:77:15:0e:
                    d7:04:b2:c7:d4:e8:13:90:09:05:f2:65:af:8a:c7:
                    ec:7f:54:fd:ac:46:ca:9b:68:56:c2:ed:88:f5:04:
                    3e:d9:12:ce:e0:55:6d:0c:84:d6:a0:48:62:23:ed:
                    10:3b:20:b2:ab:e0:38:41:d1:c5:12:68:9f:2f:d9:
                    22:06:af:42:72:46:17:3f:d6:dc:06:85:5e:74:ac:
                    0b:6e:3d:7b:c7:e8:56:37:0c:fa:c0:75:10:de:2c:
                    6c:ce:f9:5c:43:e3:69:71:9c:29:19:77:1a:be:56:
                    df:94:b4:1e:1f:f8:87:2b:79:86:9c:bc:a6:48:a6:
                    0c:bc:fb:f5:bd:10:66:fd:8f:be:ee:19:d5:db:45:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:A2:21:EB:42:05:E2:61:A5:4C:74:3E:D2:6B:1B:08:44:85:9C
            X509v3 Authority Key Identifier:
                keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/9EA66A9E737D11ECA0A3A018C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:c4:72:9b:64:b2:72:dd:f1:ca:b9:f0:e2:c2:aa:f7:a7:
         2e:16:4f:62:ca:5e:99:a4:0a:7e:26:bd:7e:8f:be:ce:9a:86:
         85:13:d2:8e:bf:09:11:13:49:00:2f:c2:f0:af:f4:82:36:3e:
         e5:d5:01:74:4a:b7:ac:b1:6f:62:48:6a:d6:62:c8:ed:66:ec:
         63:85:da:d7:af:6f:62:a4:62:6b:c9:73:73:19:4b:6a:fa:ba:
         cc:bc:54:85:39:f6:71:3a:52:3e:90:9d:bf:80:0d:16:ad:bd:
         aa:a5:38:7d:83:47:88:2d:c2:fd:28:0a:f7:fa:21:9d:5f:dd:
         84:03:5a:ca:8d:9c:70:99:34:47:0e:cb:b5:cf:f4:32:8a:b8:
         be:70:f4:5f:ec:46:8f:91:b2:b4:e6:cf:26:70:4b:81:69:cb:
         96:99:15:44:3e:2b:74:47:2d:43:18:43:ed:83:fb:fe:d1:80:
         fb:3c:3c:60:d5:a7:ef:5d:c4:3f:c5:d8:af:9e:9e:23:29:9e:
         e3:e1:c7:dc:a6:87:d7:b9:85:f9:c6:87:e7:1a:e8:ef:34:11:
         24:72:d4:30:19:6f:92:cc:3f:9d:fc:3f:51:3b:06:a8:82:c2:
         25:bd:c8:6a:89:b3:68:66:ec:6d:cc:92:a1:dc:a2:26:4f:15:
         5f:f4:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:36 2024 by rpki-client on console-fra.rpki-client.org