Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
File:                     9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (raw, json)
Hash identifier:          HpSulYTKjWi9yozCtLRgfGwwq/HpvwINJQ7fctCpbuc=
Subject key identifier:   87:F5:F8:C5:F5:32:12:41:DA:3C:53:4A:89:31:2D:D7:E4:5F:5A:43
Certificate issuer:       /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
Certificate serial:       DC
Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
Signing time:             Tue 23 Apr 2024 06:08:58 +0000
ROA not before:           Tue 23 Apr 2024 06:08:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        203.13.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl
                          rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 06:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350
        Validity
            Not Before: Apr 23 06:08:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6627507a-50d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:b4:f8:35:89:6f:8b:33:82:6b:68:a9:d6:
                    59:d8:4d:56:b5:05:f0:99:73:d6:9d:46:ff:31:40:
                    95:86:52:8f:35:c3:13:5e:d1:fd:d0:9d:9b:92:d2:
                    93:f3:66:b0:0b:19:ed:52:ad:a2:96:f2:62:b6:db:
                    87:da:4d:7e:01:74:3c:3b:d5:5d:80:3f:87:c8:91:
                    4d:1e:81:09:2d:f0:7e:95:51:c4:cc:c6:d3:64:4c:
                    08:c8:ef:f2:5c:e9:69:3d:83:a6:3c:99:46:87:18:
                    d2:e5:44:b1:af:d6:9f:59:f9:40:55:84:06:10:76:
                    21:59:78:08:6e:15:90:53:db:35:92:f2:9a:87:7d:
                    2e:b8:35:c6:f8:53:b0:45:f1:3c:42:1d:2b:dc:89:
                    9c:a6:bd:84:47:3a:77:a0:8f:d7:39:3e:55:e4:69:
                    76:19:4d:b1:e5:18:5b:26:11:2a:58:30:f7:3b:cb:
                    ae:2c:ee:b9:4a:78:1a:c7:40:a6:b7:76:88:84:c2:
                    72:a2:96:aa:e0:be:3e:fe:c6:a8:de:23:71:74:e6:
                    63:4b:18:82:59:82:3e:14:9f:49:aa:db:1b:4b:e0:
                    67:a6:b9:ba:cd:92:3a:67:61:9c:3d:88:54:b1:40:
                    b7:7e:8d:84:ca:1d:86:09:80:a8:fe:2e:c4:4a:02:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F5:F8:C5:F5:32:12:41:DA:3C:53:4A:89:31:2D:D7:E4:5F:5A:43
            X509v3 Authority Key Identifier:
                keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.13.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:19:ff:68:69:81:2f:bb:a4:54:d8:5b:f3:2c:3c:63:5f:
         f4:12:38:e9:a9:97:da:24:17:bc:c0:63:1a:29:ab:2e:86:d6:
         ad:52:0f:a8:6a:17:43:c1:85:ed:0a:0f:6d:3e:67:ae:d6:32:
         a8:40:10:0f:b3:a7:c9:8f:1e:80:31:30:a5:55:cd:28:b8:60:
         30:34:91:eb:1c:bf:cd:89:db:58:7f:3e:ae:a0:ef:b5:27:32:
         bd:25:47:2f:6e:93:c6:53:7f:d6:fb:96:04:21:1f:f6:5a:36:
         8d:c7:8a:db:f9:47:ea:89:f5:17:af:3d:e2:a5:96:19:ab:f5:
         8f:f1:e0:98:cd:e9:7a:ab:3a:f8:06:aa:f7:26:e7:f1:a0:a6:
         d5:ea:b3:b8:6d:96:6b:4f:60:a5:aa:f1:85:f3:51:dd:de:2a:
         89:80:70:13:ab:cf:e9:2c:7b:0b:20:0f:a5:5c:5c:c7:bf:79:
         0d:44:89:4c:f1:82:df:33:d0:e9:dd:b3:78:4f:57:7f:9e:e7:
         c2:94:c4:ad:28:38:1d:4e:20:68:84:21:1c:05:4a:39:f6:4e:
         ec:07:32:08:36:d4:58:46:58:5b:e9:bb:9f:67:ca:de:94:0e:
         9d:2e:65:a9:a7:44:4d:89:f1:53:8e:62:0a:b6:1a:49:7b:01:
         bb:5d:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:54 2024 by rpki-client on console-ams.rpki-client.org