Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
File:                     58226FA0060B11EFA116B11FC4F9AE02.roa (raw, json)
Hash identifier:          6bezYDqkSl0D9xLyfB++dWHk9QpZf0JKW4JyO4vGmVE=
Subject key identifier:   EB:FB:33:4A:0C:95:AF:73:7A:5F:9C:68:32:D6:C4:ED:E3:92:D8:16
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       382A
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
Signing time:             Mon 29 Apr 2024 09:32:06 +0000
ROA not before:           Mon 29 Apr 2024 09:32:06 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     9587
IP address blocks:        119.46.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14378 (0x382a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Apr 29 09:32:06 2024 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=662f6916-e3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:02:c7:bc:93:39:5a:c1:1e:54:87:a5:21:
                    ea:67:c9:31:6f:30:35:9c:e5:83:76:0c:d1:cf:bf:
                    4f:c4:0f:2e:75:18:66:3f:39:fa:da:20:f8:12:9f:
                    96:9a:2a:f9:27:30:8b:9f:ab:9b:83:0f:95:84:b3:
                    e9:9e:c2:55:62:9c:be:12:5f:8a:de:71:ec:53:30:
                    72:32:9c:32:84:36:75:87:65:38:c2:e5:31:f7:b0:
                    82:88:7d:30:1d:a0:e9:6d:9c:35:10:25:68:fd:24:
                    77:7e:01:22:3c:34:de:93:45:8d:b8:5e:f7:ec:3e:
                    bd:d3:24:01:c9:fa:5d:c8:bb:ee:16:7d:e5:eb:2c:
                    06:5b:60:9a:cf:3d:a0:a7:9e:70:e9:ab:1e:99:c5:
                    66:22:5c:b5:38:9f:a7:26:d6:5f:86:74:da:a1:7d:
                    fa:ff:31:66:ad:62:0c:23:bf:b5:12:23:6b:50:84:
                    dc:48:f6:88:bd:42:f8:31:4e:a3:58:93:0c:be:93:
                    dd:6e:5a:70:8a:ca:d8:bc:05:8d:70:98:45:80:e5:
                    9a:d8:ec:89:79:81:36:d7:92:e1:d3:78:81:f1:48:
                    0e:28:70:47:49:6e:cb:c9:7a:a0:a5:da:ce:03:99:
                    46:57:78:7d:36:2c:de:5f:35:bb:9c:da:46:90:8e:
                    ee:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:33:4A:0C:95:AF:73:7A:5F:9C:68:32:D6:C4:ED:E3:92:D8:16
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/58226FA0060B11EFA116B11FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:e2:3c:6a:42:41:b8:94:68:0a:7a:10:72:5d:b9:4b:c9:
         18:d7:cc:b7:48:25:16:8d:2e:b2:4c:74:af:b8:16:b8:bd:cf:
         42:52:80:bf:02:6f:97:0c:3c:fb:b0:49:0b:37:44:d4:22:30:
         13:4a:59:b4:43:0e:52:ce:d3:52:c4:e0:8a:f4:fa:66:da:fb:
         e3:0e:de:e8:f0:e2:d0:ac:3b:ad:23:d9:ec:fb:ad:fc:1b:5d:
         d8:36:69:92:b3:c7:31:57:6a:6e:12:53:88:4f:bd:75:3c:fb:
         0f:45:7b:b4:38:08:45:e7:e2:2c:f6:d6:b1:82:ba:52:d0:09:
         56:aa:be:24:03:d2:c3:04:20:74:79:c7:a5:66:19:a6:28:a2:
         bc:42:58:f9:b6:6a:8f:14:43:44:cc:8a:72:3b:87:59:89:86:
         74:e5:a7:3b:db:bd:7f:42:2c:7d:ad:43:58:b5:61:34:4a:59:
         3e:8e:4a:be:35:99:43:9f:79:37:0c:52:79:49:72:cc:cf:c3:
         2f:8b:80:20:fb:f0:59:dc:4b:8c:9d:8c:33:67:9e:5c:1d:f5:
         7f:56:b1:b7:17:e3:70:d8:be:19:bc:52:48:88:93:16:6e:f0:
         7a:36:90:09:f0:88:7f:b1:1f:95:f6:e9:7a:43:49:bf:28:ee:
         78:e2:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:02 2024 by rpki-client on console-fra.rpki-client.org