Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
File:                     811B0DF274CB11EF941F0A71C4F9AE02.roa (raw, json)
Hash identifier:          /VoFiO8Zbi7a0KlKrVvLZLSieHq69ORzqCPJZA0bmHE=
Subject key identifier:   9C:F5:22:91:D3:B0:6B:9F:FB:34:B4:29:30:75:B9:70:F8:83:69:0F
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       13F0
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
Signing time:             Tue 17 Sep 2024 08:04:47 +0000
ROA not before:           Tue 17 Sep 2024 08:04:47 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     9464
IP address blocks:        202.12.73.0/24 maxlen: 24
                          202.12.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5104 (0x13f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Sep 17 08:04:47 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66e9381e-a1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:f5:7f:c4:01:6c:0a:b8:55:37:a4:8e:d6:
                    a6:1f:a2:fb:cb:cf:97:3c:af:50:40:5f:f5:ff:a3:
                    4b:7f:49:8f:b1:6e:a0:55:05:c9:de:69:7e:17:0f:
                    3b:fa:ec:e8:e9:71:b2:39:4a:27:9b:41:33:0f:ac:
                    2b:20:31:34:0e:45:d8:2c:b9:9f:42:8d:9a:24:8f:
                    c8:58:0f:e6:d5:1b:8c:ea:47:b8:24:2c:a5:3c:3b:
                    ff:87:99:b8:e2:5f:ae:58:5f:cb:75:f7:6c:89:6b:
                    cc:d8:92:5a:c8:23:cc:5c:7c:e9:10:ba:d3:78:37:
                    01:96:e8:d8:6d:3c:51:e2:54:e6:75:51:2d:4f:b6:
                    f5:06:49:1a:6b:0f:22:a8:7d:bf:7c:40:94:3e:be:
                    d5:c9:03:06:c0:55:01:52:a6:2d:d6:85:b2:cb:9c:
                    22:b4:21:8d:45:5f:db:a4:74:cc:06:35:77:78:a6:
                    70:a4:7e:4d:47:99:d9:55:f8:9f:99:c9:74:8a:cf:
                    10:a3:1e:32:a3:82:ac:12:a6:16:9f:62:71:fd:fb:
                    69:fb:4a:6f:66:bb:0f:be:6c:80:8a:d0:9f:0d:80:
                    25:63:fd:64:b3:8f:55:76:45:fd:5f:b9:f4:bf:0e:
                    a2:0e:70:49:53:e9:bb:a6:ed:5f:ed:55:64:ac:51:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:22:91:D3:B0:6B:9F:FB:34:B4:29:30:75:B9:70:F8:83:69:0F
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.73.0-202.12.74.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:67:6c:c7:04:81:6b:89:52:ae:51:f9:83:18:a7:aa:ed:
         08:ec:ef:2f:8c:89:e4:b3:ac:c1:fe:9b:35:85:c9:ea:a0:b2:
         c4:8c:80:7b:b1:43:f2:d6:ba:28:de:52:a1:11:8c:c0:f2:4f:
         79:6b:ab:0c:64:a7:89:24:76:a0:51:05:25:90:77:d7:d2:b1:
         57:24:9f:67:c9:20:ed:d9:61:46:ac:7c:fc:41:71:11:dd:be:
         c6:35:1c:98:36:f2:34:d0:c5:51:3e:a5:88:65:34:27:21:99:
         08:9a:9e:d7:50:39:75:d1:79:af:7b:c1:f3:55:f4:4e:37:fb:
         ba:aa:fd:a1:7d:f4:8e:72:fc:5d:40:2a:0f:27:7c:0e:b9:7e:
         69:ab:a5:7e:8e:e7:22:48:34:5b:51:dd:ac:4e:5f:41:a7:9e:
         49:fc:52:c5:5b:29:5d:30:bd:93:64:a3:30:5d:b7:d0:46:87:
         ee:95:22:75:1c:99:ea:92:58:b9:9f:48:73:f8:dc:83:6b:f7:
         80:fe:f5:44:e8:ad:30:2b:67:78:2a:21:85:9e:f4:5a:60:bf:
         89:46:45:48:90:fc:62:1c:60:88:ae:aa:9f:74:53:4e:ee:66:
         5b:37:28:78:38:ed:41:8d:6d:c0:4c:c6:51:f6:4f:7e:61:9d:
         64:a6:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org