Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa
File:                     4E0218421E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          lQ5LUxzG6LVSaQBrFC211+MdZyvjUcvFVpCHQb6CFFQ=
Subject key identifier:   8D:62:78:3D:D9:41:7E:83:CB:0B:E7:0F:9B:29:32:2A:BC:4B:49:8D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38BA
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:20 +0000
ROA not before:           Tue 16 Jul 2024 14:31:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     45254
IP address blocks:        119.46.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14522 (0x38ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:20 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968437-6b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:92:1f:1c:7d:75:43:de:bf:c4:a7:50:8d:bc:
                    30:3f:06:cd:93:74:fa:4f:34:cf:43:1a:5e:aa:86:
                    bd:24:a6:6e:1f:a5:30:49:b7:dc:49:3e:23:a3:4b:
                    4b:df:e0:c3:f7:51:10:be:3b:cb:f1:e1:68:d9:18:
                    2a:2c:6a:a3:f7:1d:92:68:0b:ce:d1:1a:43:b0:60:
                    b9:98:9f:6f:a5:2f:e5:66:fc:08:6a:a1:44:b5:1a:
                    6a:39:4e:ad:65:55:92:76:73:19:3a:e1:47:6b:09:
                    32:c1:c6:ac:a6:47:ba:0e:0d:b1:9b:ae:f1:38:a1:
                    ec:d0:af:c4:3e:ba:59:a9:a4:44:99:58:fb:51:34:
                    06:c3:55:a9:20:a7:83:89:93:cc:24:87:18:e8:e0:
                    4a:19:5f:fb:cf:b3:09:de:7e:ea:78:ed:73:04:b8:
                    b8:9e:41:3c:fb:86:6b:7a:02:e0:e2:39:94:23:9c:
                    f1:bc:c0:eb:1d:f7:46:28:f7:aa:69:93:03:73:fe:
                    ba:21:78:a4:a1:ad:cf:b7:de:f4:30:86:ab:ca:6d:
                    0d:f3:42:be:f4:df:a0:3f:02:fb:c6:9d:dc:cd:96:
                    a4:c8:73:b7:95:71:64:ce:d3:a6:20:86:2d:db:8c:
                    e4:70:b3:13:6c:de:0f:2a:3b:ac:77:2b:e2:42:70:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:62:78:3D:D9:41:7E:83:CB:0B:E7:0F:9B:29:32:2A:BC:4B:49:8D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:4e:9e:53:85:aa:3c:d7:04:5f:50:b2:ac:bb:97:f1:7c:
         95:31:97:15:5f:ea:5e:41:ec:45:64:55:85:1e:1e:e5:a7:05:
         78:ed:a9:78:05:20:e9:bc:d6:6e:73:6b:07:95:0d:43:af:35:
         16:01:79:72:64:81:3b:ab:78:75:5a:99:fc:93:a1:f2:6a:1c:
         5a:9c:9c:54:86:c3:17:dd:9e:7d:37:82:ed:b5:5a:d0:70:17:
         6a:78:c9:88:8c:e9:4c:89:02:8e:1e:f5:5b:df:62:67:32:b1:
         2a:a4:3f:e0:07:e0:6f:5e:7a:30:b8:19:b6:23:e3:04:e8:f5:
         08:2b:4f:a6:d3:77:62:77:00:59:74:3e:ba:fd:6f:53:4c:d7:
         d7:13:58:f9:79:88:f6:72:7f:42:36:bc:d5:3f:29:8c:02:7f:
         f8:04:f4:68:87:cb:37:6b:8b:6c:70:67:3a:fc:98:02:36:5f:
         08:31:52:b9:01:1e:14:ec:f0:62:46:c6:16:ff:cb:6e:34:20:
         0c:47:d6:f8:45:96:e2:a0:7b:7d:57:ac:2d:78:49:3f:ae:b5:
         1b:a4:55:8f:b1:47:7a:a3:c1:5a:e5:aa:21:fc:73:38:db:04:
         98:21:d3:fb:81:d3:81:f1:db:7a:ee:6a:26:66:73:34:ab:0f:
         bc:52:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org