Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
File:                     446A425EA6BB11ED9D458785C4F9AE02.roa (raw, json)
Hash identifier:          WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=
Subject key identifier:   01:B5:53:BD:79:08:25:71:C5:38:7D:E4:DA:BE:AA:7A:36:08:22:DB
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       2FE2
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
Signing time:             Thu 08 Aug 2024 15:41:52 +0000
ROA not before:           Thu 08 Aug 2024 15:41:52 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        202.6.115.0/24 maxlen: 24
                          203.56.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12258 (0x2fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA
        Validity
            Not Before: Aug  8 15:41:52 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66b4e740-cdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:c0:85:17:39:0b:4b:42:21:7f:18:ac:72:
                    c0:b3:78:3f:2a:95:80:29:61:76:39:53:58:91:45:
                    13:5a:19:11:49:d4:f1:83:e2:3a:d5:d9:54:aa:54:
                    1f:fe:87:fe:40:d8:19:6e:54:dd:ea:c8:08:b0:ef:
                    27:cc:d3:d2:6d:c7:78:b3:22:95:0b:66:92:fb:da:
                    65:7a:c8:da:66:c7:7b:24:18:39:ec:e0:ae:f3:e5:
                    73:65:bf:70:51:1f:1a:7e:82:0a:38:6e:65:c9:66:
                    1a:8d:1b:cb:24:b3:bd:16:bd:3f:b8:69:5d:8e:b4:
                    66:df:a9:c6:99:9d:76:82:67:6b:3f:86:bd:bc:9a:
                    05:c6:15:48:47:dc:cd:d7:27:0d:ae:cb:56:de:37:
                    56:8d:8f:37:07:4d:07:75:06:19:83:9c:90:36:20:
                    1d:33:0b:df:39:50:82:37:b4:37:0d:a2:42:75:e4:
                    bd:35:2e:6d:ce:92:5f:32:ce:95:c7:d7:1b:1e:68:
                    36:76:47:c2:85:98:d7:c5:6a:b1:0b:9f:b4:3b:17:
                    25:d8:54:2b:4c:86:05:87:bf:83:dd:c3:85:87:9f:
                    fc:07:70:7d:88:89:2e:52:a6:b6:8a:4e:30:74:25:
                    15:1d:f9:9a:73:c4:c8:8c:1c:38:e6:13:65:38:6d:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:53:BD:79:08:25:71:C5:38:7D:E4:DA:BE:AA:7A:36:08:22:DB
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/446A425EA6BB11ED9D458785C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.115.0/24
                  203.56.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:ce:10:2a:76:25:f4:7d:23:a5:ea:ce:bc:7d:0f:c6:69:
         06:27:09:e6:4f:d4:2d:04:ba:76:bc:15:cb:c0:5d:5e:51:81:
         16:5e:4b:41:e7:1f:8c:11:e0:4c:6e:d7:10:22:75:63:a4:4c:
         b5:ec:70:37:d1:e5:68:7c:3f:51:24:6f:67:07:04:7f:3e:3d:
         68:85:63:9c:d9:2f:73:32:11:b9:0c:b0:50:96:de:5a:e9:4f:
         e8:d2:3a:dc:c1:98:a1:24:4f:96:93:4f:3f:76:6a:e9:fe:4d:
         78:2a:5f:6e:ce:0d:44:19:a4:b9:04:81:06:09:a1:60:d0:08:
         74:5c:a9:d4:af:ed:59:ff:b3:de:9e:31:74:bc:61:9a:ec:b9:
         32:49:40:a0:ea:35:7e:3b:55:07:28:7e:df:a2:52:33:cd:ce:
         d8:e1:0c:07:88:47:04:f5:d8:92:91:fd:9a:a6:03:c4:e8:b5:
         f4:c9:34:0b:17:a8:76:a1:ca:a7:55:5b:b2:77:86:11:55:5e:
         f5:b3:0e:16:4b:08:da:98:78:b1:80:63:1c:b1:e5:b5:b6:31:
         99:bf:df:b2:26:e5:dd:20:35:75:8a:0a:09:57:31:87:6a:bf:
         41:7e:8a:7c:de:f1:c0:ca:4b:51:60:6b:47:23:44:37:5a:e7:
         c2:43:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:19 2025 by rpki-client