Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
File:                     58226FA0060B11EFA116B11FC4F9AE02.roa (raw, json)
Hash identifier:          9nkyuFSeTqMcYC1MtkeuQxZs9syz/yUgIR8TXnZdmek=
Subject key identifier:   C2:C2:67:37:17:77:00:A4:25:87:92:6B:07:BD:97:E7:67:96:85:1D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38D9
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:45 +0000
ROA not before:           Tue 16 Jul 2024 14:31:45 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     9587
IP address blocks:        119.46.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14553 (0x38d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:45 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968451-13b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:cf:98:36:c0:9e:de:0c:b2:a3:37:2e:16:
                    89:7a:8e:dd:16:14:11:76:ba:4b:e1:8f:58:17:95:
                    a3:a5:fa:a9:55:09:2d:30:86:98:89:fb:75:45:59:
                    26:9e:42:39:89:ce:27:e8:36:6b:ce:5a:3c:b2:f1:
                    3b:c4:a4:d2:13:5d:7e:0a:7c:f2:50:b0:54:1c:4e:
                    02:13:06:48:e8:d7:31:2d:78:9f:ea:1e:14:4e:a2:
                    6a:11:53:12:c3:a6:e7:07:e4:f8:61:f1:3a:36:d0:
                    aa:6c:3e:7d:d1:3c:03:25:fd:36:14:5d:f7:0f:04:
                    62:06:d8:69:b5:f7:64:23:10:2c:d3:2b:23:24:62:
                    41:cb:df:94:e8:e8:16:ad:46:e3:59:15:73:45:8c:
                    98:18:37:3b:6c:fd:97:a5:86:f2:ac:61:5a:db:e9:
                    13:20:d8:00:c9:f7:50:6c:70:ab:db:39:b1:84:66:
                    a0:b5:0e:a5:e5:8e:0c:48:fa:4e:e9:33:4c:68:49:
                    52:79:fd:71:5a:bd:9b:c2:a1:a9:3b:fd:4d:54:0b:
                    3f:94:2f:a7:fc:1a:03:76:80:55:38:d0:fe:27:bb:
                    85:b4:b1:b6:ef:bd:81:61:46:ed:6e:c3:e5:6a:75:
                    a3:0a:a8:5f:e9:70:ec:7e:3b:ec:ee:ab:dd:c8:1d:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C2:67:37:17:77:00:A4:25:87:92:6B:07:BD:97:E7:67:96:85:1D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:3c:e1:b6:6f:8e:6f:8f:83:fa:7d:8d:b9:a8:73:ec:eb:
         06:5b:a0:0e:12:be:c8:ef:c5:7b:ce:88:05:18:21:9b:48:fe:
         37:07:34:65:fc:19:a3:cf:1f:aa:9a:ee:8f:f8:e6:08:84:7f:
         b6:0c:bb:ff:7b:f0:f9:47:3e:e7:b8:37:f8:d9:e8:37:ad:92:
         f1:05:32:68:c5:98:1c:19:bd:d1:f7:82:54:f9:ec:fd:d7:88:
         87:ac:19:31:65:42:4c:4a:d1:40:1d:85:7a:8e:b0:4f:00:f5:
         34:2b:dc:10:21:1e:f1:04:85:85:57:26:af:37:54:8e:c8:06:
         c7:c0:a7:3f:78:e3:72:1f:da:8e:58:66:ce:f4:3b:60:df:55:
         ed:f3:da:f4:5e:ff:9b:b9:c8:76:8a:93:51:25:ed:15:27:2d:
         72:f4:79:8e:6e:1e:89:03:68:36:94:70:c3:2d:f1:ad:ff:22:
         af:a2:53:29:8c:74:9e:06:84:e2:78:ca:ea:a7:06:37:98:6d:
         ba:3c:39:d0:93:5c:12:9a:83:d7:32:00:5f:4a:11:9f:fd:cf:
         68:8a:37:df:39:32:af:31:b3:ae:e4:6c:8e:a4:1a:5f:7d:b7:
         8e:e7:66:23:7a:0d:27:3f:2c:c1:6c:e1:17:44:a7:10:16:a6:
         83:92:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org