Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/17FCD734563A11EE89046132C4F9AE02.roa
File:                     17FCD734563A11EE89046132C4F9AE02.roa (raw, json)
Hash identifier:          ktJtMkzuTUh0v+NxXIM4Dx8Uq3ryMvoU0AKXaxgyouY=
Subject key identifier:   AF:E0:83:14:AD:A7:DD:5A:C1:FF:CC:15:A5:ED:B6:FD:08:6E:5D:89
Certificate issuer:       /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial:       051C
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/17FCD734563A11EE89046132C4F9AE02.roa
Signing time:             Wed 15 Nov 2023 00:32:03 +0000
ROA not before:           Wed 15 Nov 2023 00:32:03 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     18464
IP address blocks:        58.84.52.0/22 maxlen: 24
                          103.197.68.0/22 maxlen: 24
                          116.206.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
                          rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
        Validity
            Not Before: Nov 15 00:32:03 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65541183-5487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:69:f4:fc:ed:a2:a5:ab:28:56:78:b4:91:
                    83:b6:31:72:3a:2b:13:8a:5c:60:3d:b6:5d:da:e1:
                    e5:a6:6b:9c:92:28:26:17:9d:10:3c:4b:fc:c4:8b:
                    ab:7a:00:18:14:68:1e:ff:30:7b:a3:96:b2:05:c5:
                    0c:17:ce:7f:45:23:b5:12:0d:bc:23:d2:98:2e:79:
                    2e:9e:d1:96:83:96:28:32:07:e1:4c:93:95:18:85:
                    31:af:be:e7:16:48:82:79:71:3a:73:4d:1c:25:cb:
                    b2:eb:34:01:c9:97:72:64:1b:75:9e:16:10:68:6f:
                    07:38:d4:ee:2d:42:bd:f3:ae:9d:a8:4c:0e:1a:33:
                    d4:d3:9f:f8:d6:cb:1f:62:06:75:34:c8:51:d3:84:
                    94:d9:bd:8d:06:7b:d0:be:f2:bf:e8:e1:0f:51:28:
                    79:ba:74:ef:78:2e:3b:52:06:75:da:4b:fd:9b:67:
                    eb:d8:8f:ca:c5:f9:ea:d1:bf:96:1f:19:2f:36:ee:
                    52:e1:c8:51:b4:f8:d4:a8:95:65:02:b9:eb:95:90:
                    2c:3a:0d:ca:97:14:e8:d4:c7:9e:55:6f:fd:f9:d0:
                    96:53:73:a5:84:7c:89:7a:17:65:01:cc:8c:8e:f9:
                    b2:af:56:da:11:1c:37:74:26:44:56:33:79:10:55:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:83:14:AD:A7:DD:5A:C1:FF:CC:15:A5:ED:B6:FD:08:6E:5D:89
            X509v3 Authority Key Identifier:
                keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/17FCD734563A11EE89046132C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.84.52.0/22
                  103.197.68.0/22
                  116.206.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:8b:22:0f:5c:b7:c4:6a:44:2b:0f:e3:97:ff:54:a1:44:
         69:81:63:a1:11:f5:83:77:4e:03:a1:af:73:bc:f8:19:20:d0:
         ef:62:c7:a1:40:fa:f6:cb:88:34:83:5e:de:11:0d:75:f7:a8:
         41:9d:56:38:fa:3c:4c:ce:51:e3:37:03:eb:a0:94:da:27:15:
         07:e0:ce:04:d2:db:9f:9f:f3:c2:25:df:cc:06:91:e4:32:5b:
         ab:e5:9b:fb:d3:5c:7b:6d:d5:e5:14:fa:65:fd:ee:63:79:f2:
         d0:05:da:07:c8:76:89:59:de:24:04:18:f5:16:c8:c4:9e:0a:
         ba:d5:fd:04:1a:1a:e4:48:90:29:54:24:53:78:a1:d9:5a:97:
         74:fc:38:f7:c8:a4:7d:a4:8a:db:c4:2c:46:df:f5:a1:7a:f2:
         d7:60:8a:c9:31:7b:e6:de:a4:f0:0e:7b:6c:d6:87:3b:eb:7a:
         46:fe:be:ae:72:0c:65:29:25:c5:c7:22:2c:16:63:f9:3f:b9:
         d4:ae:71:aa:93:50:6e:dc:d8:73:30:41:5a:15:a6:d9:ae:30:
         d9:f4:1d:1e:c0:75:e5:c6:cf:ed:e8:48:b3:32:6a:56:66:f6:
         fe:a6:31:87:2d:71:30:8f:12:55:76:91:90:ce:68:b6:06:0f:
         49:d0:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org