Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
File:                     39F7B4EE902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          4+5V+vAoXiW+3NpEIdyHPyFGZS2Uwfw6CAOuxckQw5c=
Subject key identifier:   99:84:04:87:5F:6F:64:AE:2C:9D:DD:00:23:D6:81:A4:7B:DE:B5:D7
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3531
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
Signing time:             Sat 02 Dec 2023 14:40:28 +0000
ROA not before:           Sat 02 Dec 2023 14:40:28 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24042
IP address blocks:        61.19.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13617 (0x3531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Dec  2 14:40:28 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b41dc-329c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:80:61:e4:b9:6d:b2:e9:8f:a4:e8:f3:6c:
                    54:e3:30:ee:92:08:02:42:0a:ed:7d:71:88:87:80:
                    a3:bd:cc:ea:54:b4:58:9f:de:0f:c0:99:27:bd:b3:
                    f9:10:91:23:9b:26:7b:9b:2a:1e:36:b4:b8:42:88:
                    fe:be:17:29:8b:39:67:bd:dc:81:7e:41:75:3e:0b:
                    f4:3c:60:ea:10:b6:6b:e7:69:44:4a:37:dc:fc:38:
                    40:07:49:58:c0:68:6f:5a:22:1b:47:f5:94:a2:e2:
                    df:d1:b3:3c:0e:59:e3:2d:a7:31:16:dc:e4:61:ca:
                    eb:e4:e1:8e:26:4c:b3:af:db:28:eb:03:a1:51:84:
                    a2:0d:68:11:15:34:cf:26:4f:0c:9f:4f:fb:ec:e8:
                    b3:0c:63:c2:1e:a9:f0:8c:87:9e:8c:c5:43:8f:c5:
                    0c:b0:33:54:ed:26:cf:bd:07:08:e7:2e:8d:cd:70:
                    11:d2:03:84:99:02:cd:07:47:6e:8b:0a:bd:d2:36:
                    20:42:1f:df:58:f5:50:50:4f:76:e2:42:8b:82:4a:
                    6d:f0:f1:16:8b:cf:a0:d4:1e:aa:92:a5:bc:6d:19:
                    41:45:79:e7:15:67:52:8b:3d:86:4a:c7:cf:15:ae:
                    48:00:96:61:7d:af:fa:e0:c0:3e:b4:7b:0e:97:86:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:84:04:87:5F:6F:64:AE:2C:9D:DD:00:23:D6:81:A4:7B:DE:B5:D7
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/39F7B4EE902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.19.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:70:f1:1d:fb:5b:f2:91:39:c6:20:7f:cc:ca:df:f6:84:
         0d:35:ac:52:6f:46:51:71:bc:6c:2a:63:a1:4f:9e:8b:ad:05:
         72:9f:9b:f2:50:ff:0f:ae:3a:04:6b:ea:d0:eb:fb:aa:a7:f2:
         85:29:9e:ad:5a:20:ab:81:65:8a:93:87:21:73:ef:7c:5d:58:
         bb:f9:94:96:f9:42:b9:42:a0:7d:b9:f4:67:0a:d2:07:c3:b1:
         ce:8e:08:9a:af:14:63:58:92:9b:d9:ef:da:96:e4:28:23:e4:
         f2:ab:43:e8:1c:0e:5d:45:66:24:88:09:23:4a:7d:69:54:a7:
         d2:ce:b8:fb:77:56:cf:3b:39:44:a0:fe:a3:36:e4:70:b7:2c:
         eb:ea:d7:58:ea:56:2e:1b:dd:b1:f0:83:93:1f:0a:8d:0f:9d:
         89:a9:98:38:1d:3e:31:a0:3a:d5:32:a8:fb:e8:9d:39:92:92:
         a5:8b:20:fc:6d:b2:23:57:1d:11:1e:2d:0f:d6:eb:36:b9:b8:
         7c:f4:fe:0c:ca:17:66:1c:cf:dd:a7:6e:2d:f4:c8:fd:35:09:
         f4:e6:3e:96:14:06:1b:c6:34:6c:5f:ab:00:31:73:d4:56:dc:
         39:0d:51:a8:fc:17:12:d4:cb:69:05:4a:ea:fd:51:10:79:88:
         83:9a:27:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org