Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
File:                     55056D1CBABA11EB8A51C234C4F9AE02.roa (raw, json)
Hash identifier:          ea+xnebDiK5/cG8Dnkc9U+weTXeQAajoIL5rsjmuAH0=
Subject key identifier:   65:3C:F3:DD:53:C5:07:A7:E7:65:D3:4B:86:F3:66:7D:C9:01:32:8C
Certificate issuer:       /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
Certificate serial:       049E
Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
Signing time:             Wed 13 Sep 2023 00:22:02 +0000
ROA not before:           Wed 13 Sep 2023 00:22:02 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     24112
IP address blocks:        202.45.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl
                          rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 00:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0
        Validity
            Not Before: Sep 13 00:22:02 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=650100aa-22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:b3:06:3e:9a:bb:e6:2e:ae:7b:80:84:6d:
                    4e:fe:01:98:8e:fc:2c:4e:8e:51:05:14:41:e2:7f:
                    07:03:0d:7e:94:35:29:c6:6d:a6:d1:1b:3b:9f:75:
                    0c:28:aa:9b:6c:a0:10:49:5e:41:84:d0:07:23:dc:
                    7f:89:ca:38:aa:a4:f9:55:c6:e5:bb:a8:c8:7c:78:
                    c3:a9:ef:7f:e1:ff:f5:b6:81:9c:d6:cb:6f:21:d9:
                    7e:64:bb:0d:57:eb:cc:b9:58:66:80:3e:31:de:e6:
                    3d:b3:fd:c4:a1:1f:18:bf:9a:ce:ed:29:77:e4:59:
                    ed:9b:55:25:e4:4d:39:14:47:ef:fc:f9:08:53:f3:
                    21:54:26:d0:5f:c6:fc:b1:fb:aa:76:46:d8:7a:fe:
                    ed:5d:e6:1c:31:04:92:93:30:83:60:f0:ce:db:98:
                    97:6e:35:bf:56:67:d0:60:d0:46:1e:66:20:84:91:
                    55:8a:c4:6e:77:07:92:db:e3:c2:91:39:44:8e:f6:
                    e4:e6:79:05:dd:8f:58:68:ca:69:d4:65:66:bb:be:
                    c3:6c:20:43:81:c7:f9:f9:6a:b7:ed:6a:06:c2:04:
                    dd:d0:00:6e:5b:2b:a4:96:03:ee:65:a6:75:51:fb:
                    50:84:f6:fd:0a:07:5c:21:2b:09:7b:57:58:f4:c0:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3C:F3:DD:53:C5:07:A7:E7:65:D3:4B:86:F3:66:7D:C9:01:32:8C
            X509v3 Authority Key Identifier:
                keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/55056D1CBABA11EB8A51C234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:cd:df:6a:59:a6:2b:d3:3c:2c:5c:82:0f:70:45:7e:6b:
         24:d4:38:5d:a4:e5:45:6f:46:a4:1d:2c:68:38:70:fe:73:8d:
         d6:ee:19:12:b4:a8:bf:59:7c:02:8c:7f:6e:b4:31:75:51:1d:
         6d:d8:14:57:ea:40:81:db:63:34:ea:07:d7:2d:9f:d0:bd:36:
         bf:66:79:7f:dd:55:60:aa:25:9d:6d:0f:bd:df:2a:84:b4:e2:
         be:ce:55:4e:a8:b8:d5:6e:fa:3a:1c:d0:a3:bd:c9:d8:78:a7:
         cb:18:30:92:b4:f1:7e:a6:a5:3a:81:2a:15:32:60:a7:31:aa:
         51:ff:8e:21:52:3c:93:9e:0e:d0:f9:c1:e5:09:2c:7f:49:96:
         a5:16:3b:6b:eb:04:4e:69:4f:11:53:a0:05:5b:19:6e:ba:18:
         52:96:85:c1:32:72:6e:f4:68:e2:dd:7e:7c:30:24:e2:3f:da:
         3a:02:58:64:40:ff:44:77:14:89:4a:1c:50:63:5e:ae:38:bd:
         b8:7a:d3:d0:f2:ce:03:0f:fc:c9:3c:21:0b:0a:5d:b4:81:d5:
         a5:be:bd:92:b0:a5:a9:36:04:14:a4:78:25:3b:e8:93:d1:ad:
         b3:19:b4:65:46:87:9d:b6:e2:3c:a6:5d:2d:c6:2f:8d:81:a9:
         32:ee:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:29:34 2024 by rpki-client on console-ams.rpki-client.org