Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
File:                     7539EF341CC611EEAD8F6969C4F9AE02.roa (raw, json)
Hash identifier:          DhnEP4KL8BGueYtdhqpPKqo4ZVfA2e3SWaZ4Ysu/+44=
Subject key identifier:   A8:06:55:BF:36:12:94:AC:A3:1D:D4:37:A5:C5:3D:CF:ED:12:D1:2F
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       03F4
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
Signing time:             Tue 29 Oct 2024 01:26:36 +0000
ROA not before:           Tue 29 Oct 2024 01:26:36 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     174
IP address blocks:        113.20.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Oct 29 01:26:36 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672039cc-1c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:61:e0:1b:e0:27:db:cf:c2:73:7c:94:c6:e0:
                    42:53:fb:49:bf:4a:a9:45:61:90:49:df:29:72:8d:
                    14:cb:0f:6c:ce:ba:d9:bc:78:12:2f:08:5c:1e:17:
                    62:30:f2:cd:a8:53:f5:74:43:35:3b:1f:56:80:ca:
                    50:ca:3d:59:e7:15:4e:6b:30:46:21:b8:0b:1b:f1:
                    14:15:09:d7:f6:7a:2b:50:1b:c9:36:35:6e:b3:0f:
                    25:48:dc:35:5b:00:d2:62:b8:f2:fc:7a:34:48:55:
                    60:25:c0:23:90:57:57:31:65:e5:1a:c8:ea:ed:8a:
                    b5:71:9f:80:f8:05:fb:2b:65:ca:b6:d7:c2:a1:e2:
                    d0:e7:41:60:a6:f7:77:bb:92:81:a3:2d:cb:20:66:
                    de:e4:92:c1:f4:fa:6d:45:ef:64:05:52:14:87:e0:
                    a1:33:49:e0:da:8f:ab:37:f2:39:51:ea:2b:ef:13:
                    b3:e5:df:42:66:b3:12:35:cd:46:17:07:1b:d2:90:
                    8d:4a:0a:c2:4c:d6:de:ab:8a:4c:c5:f8:83:ca:81:
                    d4:29:30:ef:24:33:2f:c4:e7:50:b1:73:8b:bc:8d:
                    a1:09:ab:72:92:6c:4e:0d:ad:55:40:7d:c6:d7:ea:
                    be:f7:3d:17:5f:12:16:ab:4e:70:c3:bf:3c:26:27:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:55:BF:36:12:94:AC:A3:1D:D4:37:A5:C5:3D:CF:ED:12:D1:2F
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/7539EF341CC611EEAD8F6969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:20:58:a1:2c:87:48:5e:98:32:d8:a8:e5:5e:e5:f3:eb:d1:
         1a:47:c2:be:81:80:28:14:40:e7:73:0b:8d:96:c3:af:83:61:
         ac:3b:ae:8e:f2:bf:54:aa:ae:41:4f:a2:1c:66:ea:c2:9f:04:
         61:2a:61:1e:e7:63:d5:f9:38:90:9a:c0:f9:af:65:d1:47:7c:
         1f:08:f9:85:57:eb:24:ad:20:c9:53:6f:52:3d:a7:92:c5:23:
         9c:37:56:9f:03:ad:b0:c2:fe:9c:4f:5b:d8:61:64:14:d4:68:
         b1:42:52:3b:7c:5a:26:2a:db:b4:a4:35:bd:7c:99:7f:38:45:
         b6:ea:2b:a3:f5:ff:e0:cc:dc:81:b1:a2:47:fb:bd:58:63:6e:
         12:1f:28:8c:81:1a:c2:ea:af:3b:64:78:e4:65:2c:d1:ab:f1:
         6b:9e:e9:09:61:e0:aa:2f:d5:7e:4e:e8:8d:25:f0:b4:6c:ea:
         54:13:84:b7:5b:6f:eb:6d:46:0e:37:2f:87:3c:27:3a:bf:d3:
         f1:da:d0:1c:a9:82:14:6b:94:bb:53:ed:e4:43:90:37:13:38:
         83:1c:b7:86:3e:7f:00:61:01:7f:8e:20:f0:cf:2b:95:c4:9f:
         ca:b4:2e:ef:c2:c5:2c:00:75:d4:c3:29:de:f1:05:48:a4:b5:
         5c:78:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org