Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa
File:                     6C40D48C63D611ED863A4C1EC4F9AE02.roa (raw, json)
Hash identifier:          vdfEDbSirRuc66clI85htVLt2m0yVHUtWtEJTAx6D2g=
Subject key identifier:   DF:DA:C3:4A:94:B7:A7:43:75:7B:CE:DD:9E:DC:A1:88:52:C6:E4:22
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       38C6
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:31:30 +0000
ROA not before:           Tue 16 Jul 2024 14:31:30 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55545
IP address blocks:        58.97.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14534 (0x38c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:31:30 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968442-8c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:95:28:97:41:16:6a:6b:5c:1b:16:47:c5:
                    99:4f:1e:13:3c:56:0d:20:2f:b5:29:bb:23:a5:b7:
                    05:e3:ad:da:49:4b:f0:2b:9e:59:25:d5:fc:a9:26:
                    df:9d:a4:10:15:9d:2b:71:0c:46:33:19:f5:35:07:
                    f6:e1:e7:81:ec:a9:eb:ad:b0:f7:00:36:86:ec:1d:
                    48:4a:c0:05:7c:f0:1b:fd:92:61:fc:df:30:b1:2d:
                    e3:20:4f:5f:48:c4:69:44:63:79:01:6a:5b:fa:02:
                    58:69:a5:53:aa:22:3e:63:30:f3:49:09:e4:e6:0e:
                    ba:76:e2:9d:a5:5e:03:cb:2c:08:71:f6:1b:96:19:
                    1c:97:89:51:eb:e2:c5:c9:ca:09:d4:2f:94:81:82:
                    94:9e:5f:26:76:60:30:62:0c:e3:a7:cb:fc:b4:d2:
                    e1:72:e7:ae:ec:39:93:97:c7:95:59:96:27:af:86:
                    e4:27:d0:31:b1:08:00:a5:65:e8:fa:1b:b8:4a:5e:
                    d5:5b:e1:d1:96:a4:87:4c:8b:6f:81:fe:55:3e:51:
                    c2:31:a7:0b:f0:b9:1b:7d:ce:db:ce:86:04:6c:c5:
                    d6:3d:68:8d:98:6c:a9:05:b1:85:20:2e:ca:f0:d1:
                    98:b7:15:51:d0:18:6a:73:28:92:30:50:4e:43:1d:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:C3:4A:94:B7:A7:43:75:7B:CE:DD:9E:DC:A1:88:52:C6:E4:22
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:9a:fe:98:0c:3a:e1:25:55:ac:62:90:b3:55:00:1a:ec:
         ed:c7:39:2b:e4:da:27:7f:42:be:c9:58:48:d6:72:83:c6:6d:
         c9:c1:ec:32:75:98:da:07:a5:63:1f:0d:85:25:77:b5:5e:a7:
         2b:a7:41:42:97:1a:a4:82:12:64:6a:27:62:a3:00:1c:d6:55:
         63:4e:03:2d:ea:08:62:fd:f0:5c:cf:07:85:be:ff:71:f3:d0:
         41:02:a5:24:cb:bc:e8:84:15:8a:4e:d1:2a:30:a0:27:e3:65:
         c4:b9:59:ee:ff:64:67:ab:b7:ab:5a:f1:f0:45:13:27:40:b6:
         9e:53:99:04:a5:2d:97:8b:bc:df:24:a0:fa:31:bc:11:5e:72:
         75:5a:78:a1:b3:82:51:e9:eb:65:a1:79:ec:89:6d:54:b7:39:
         7a:26:de:82:9d:b9:42:0f:48:ee:69:70:a3:5d:49:b9:a1:4e:
         97:f6:1a:a3:96:4a:6d:61:56:30:66:27:11:7f:a5:40:ee:ab:
         52:47:cd:34:13:01:01:d9:21:9f:08:f6:7b:c2:54:2d:bc:74:
         1f:0f:5a:3e:37:81:db:03:fa:0a:d2:61:ce:55:29:0c:bc:ef:
         34:77:66:ca:df:71:2b:cf:17:07:6d:ce:fb:c8:e8:ee:d4:03:
         5b:da:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org