Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa
File:                     C18E24EEB1F911EF80160911C4F9AE02.roa (raw, json)
Hash identifier:          IaSXU0hhTqd/kbD/ZDjyAZBXMXMDGHq4FlHzzaXzxz4=
Subject key identifier:   DB:2D:34:C3:5B:31:70:64:2D:E8:5C:08:C5:11:60:45:65:C7:90:E8
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       06
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa
Signing time:             Wed 04 Dec 2024 04:39:32 +0000
ROA not before:           Wed 04 Dec 2024 04:39:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     64072
IP address blocks:        160.250.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Jan 2025 05:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Dec  4 04:39:32 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674fdd04-53f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:31:80:88:b1:87:3f:e0:10:25:76:38:fc:73:
                    51:1d:be:d5:d8:60:04:36:c8:99:7b:2a:3d:e2:5d:
                    72:78:56:e7:d7:84:21:5d:4b:ca:37:d0:ed:78:97:
                    40:8a:10:d0:bc:86:4f:38:e0:e2:cb:79:21:2d:cd:
                    d8:84:1e:fb:6b:c8:29:e3:0f:64:88:bb:a2:d4:a0:
                    c4:bd:28:1c:47:c5:d1:4a:75:72:26:1a:ae:92:44:
                    9b:c7:32:82:7c:67:fd:fe:26:8c:a7:28:27:f2:f7:
                    bb:b1:8e:3c:c9:57:30:d1:fc:56:be:64:c9:6c:bb:
                    c6:f1:90:68:86:ae:fa:4b:8d:25:62:55:f2:53:34:
                    20:d3:43:49:5c:72:0e:f7:33:49:02:c9:5f:25:93:
                    a0:2f:0e:da:e1:51:3b:24:96:4c:60:0b:16:d9:2d:
                    7f:9b:e7:15:96:c3:5d:22:38:d5:16:31:30:af:1f:
                    88:c5:28:01:39:78:81:4b:1f:d8:4a:14:ed:67:4b:
                    1e:f8:29:91:66:f5:84:4b:8f:f1:fa:bd:bd:71:66:
                    cf:7b:ed:27:45:e0:f1:a9:79:8d:cd:85:f7:9e:ea:
                    35:03:b2:fe:24:a0:9c:57:16:6a:61:98:af:c4:7f:
                    c0:50:03:b2:f2:82:87:7e:eb:da:88:71:08:db:bd:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2D:34:C3:5B:31:70:64:2D:E8:5C:08:C5:11:60:45:65:C7:90:E8
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:8b:04:58:00:63:78:e8:f8:31:3b:d7:c3:c1:0e:d9:f1:
         49:83:55:8c:44:79:fd:24:7a:2a:e2:01:f2:35:6e:b4:96:30:
         31:2e:c4:b1:29:c6:aa:23:33:a8:a0:57:ae:14:a1:eb:93:f9:
         ef:46:a5:c6:03:a9:8e:ad:8e:71:46:03:97:80:3e:92:12:bb:
         ca:ff:9d:ca:e6:e8:af:94:85:fc:c1:91:7a:f4:75:b0:a7:1a:
         4f:f7:b1:c4:9e:b4:fd:44:81:da:cb:4d:ee:e9:2d:2b:e6:20:
         d6:a1:f1:8b:43:6e:58:9e:91:c2:9c:6d:86:aa:f5:81:5f:d8:
         51:f7:8c:cf:c0:d0:00:77:5d:c0:12:1e:9e:4c:21:10:4a:7a:
         76:02:0e:a3:71:97:87:5c:1a:fe:2d:5c:77:f7:89:f4:d6:d4:
         05:a0:ec:54:61:cb:3c:33:2b:92:ab:50:30:d2:d8:8e:47:48:
         eb:3d:7f:14:32:5a:1e:30:d9:0a:34:98:0f:9f:59:ec:3d:46:
         ac:33:04:47:43:53:22:09:0d:54:6e:9f:57:20:b3:c0:fb:51:
         b6:94:28:54:8f:79:9f:7b:50:b7:83:46:74:e7:c8:72:9c:68:
         fa:2d:28:84:69:43:62:b3:28:2b:c7:a8:03:13:00:83:c8:60:
         5c:73:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:43:20 2024 by rpki-client on console-ams.rpki-client.org