Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa
File:                     8DE3FDEECF3E11EC88326E70C4F9AE02.roa (raw, json)
Hash identifier:          l/vcU5yFSq7FPiqE/de8Y5g9e9S/3evnhMfXot90GYg=
Subject key identifier:   16:AB:83:5F:15:9F:5A:77:69:23:1A:0C:A6:03:14:6C:6E:E8:3F:0B
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       388F
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa
Signing time:             Tue 16 Jul 2024 14:30:42 +0000
ROA not before:           Tue 16 Jul 2024 14:30:42 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     138915
IP address blocks:        119.46.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14479 (0x388f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 16 14:30:42 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66968411-2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f2:23:0b:a3:91:90:fd:7a:9a:70:ab:33:62:
                    18:5f:ec:43:be:35:d5:f7:7b:09:6e:39:11:b1:db:
                    d1:b5:3f:cf:fd:72:77:8e:00:c4:0a:15:21:1d:51:
                    4a:0d:ac:02:fb:e6:02:81:a6:6b:5c:89:e0:d1:c2:
                    4e:db:4b:7c:e2:64:15:b9:c3:76:d0:8e:f4:87:d0:
                    9e:fa:65:89:80:ed:f7:70:b1:e9:e9:9f:e8:ee:b3:
                    c1:f3:67:33:61:35:4e:32:27:6a:44:ad:92:f5:2f:
                    e5:24:b9:23:b9:3b:c6:e9:7b:cb:0d:6c:05:a0:d9:
                    c7:77:37:4a:ab:4e:dc:31:7f:0f:ac:50:36:d4:12:
                    c2:a1:c7:e7:ef:8d:6d:ed:28:29:ec:d0:81:6d:b2:
                    15:3f:9b:a3:e8:d4:28:2b:9b:85:6f:2f:de:34:4c:
                    36:51:c9:af:a3:58:23:f8:ee:c3:43:96:d0:4f:5c:
                    a6:3c:a6:12:16:a0:3e:20:c3:24:8d:5d:55:0d:d0:
                    16:39:ab:14:1f:bf:da:2c:2a:c3:30:0d:39:53:16:
                    a2:1b:79:8d:5c:02:9a:87:8b:76:d0:02:ee:fc:94:
                    b5:e3:84:4a:fc:c2:2e:14:bf:cd:a6:8d:a0:47:4d:
                    31:da:2e:a5:0f:d0:61:45:11:a6:b0:77:bd:33:de:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:83:5F:15:9F:5A:77:69:23:1A:0C:A6:03:14:6C:6E:E8:3F:0B
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8DE3FDEECF3E11EC88326E70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8c:aa:49:10:37:b1:a2:ca:25:ca:b4:0f:ba:20:31:77:29:
         5b:42:83:04:69:1c:5f:0e:a2:9a:57:7c:a6:4b:93:63:89:e6:
         26:ca:d0:76:4e:1d:ee:92:5f:53:51:44:6a:c4:51:8b:7d:fe:
         a9:c4:a8:59:5a:d1:1f:cd:84:15:26:3c:02:e6:ff:00:7b:32:
         30:7e:6a:12:ce:9f:0f:0c:d2:7d:d3:27:29:03:c9:c9:67:47:
         c3:92:98:29:e9:5f:ee:df:f5:f7:14:8e:15:d1:be:76:9f:6a:
         bc:f1:a9:fe:c9:ab:1d:0e:e1:2f:9b:d9:f2:03:b0:80:61:fb:
         3d:85:68:95:8f:8e:f1:5d:1a:b9:9c:42:bd:9f:17:49:39:c0:
         ca:52:b1:0a:bf:58:8b:46:cc:91:92:9d:9e:a7:20:bf:eb:5d:
         53:62:89:47:ab:9b:91:b4:a1:3b:10:77:8e:9a:9a:df:93:e6:
         1d:fc:10:1e:6d:00:ef:af:9b:3b:9c:22:15:88:63:4b:f3:60:
         6c:2a:4b:88:ab:2e:a3:02:9a:7a:f4:6b:9a:de:5e:e9:d0:d8:
         0e:e6:12:bb:86:92:29:6f:0d:f1:19:3e:a2:ab:b3:26:9a:39:
         f9:7e:5d:d3:06:ca:83:90:ca:a3:75:71:93:f5:e6:17:50:9a:
         41:2e:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:00 2024 by rpki-client on console-fra.rpki-client.org