Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
File:                     68356576B0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier:          Lk+ppgIcRBj21y/ZGAyw+BybPAWYveI+BEAROftcudA=
Subject key identifier:   29:D3:BF:A7:78:81:3D:B3:99:4F:0E:43:04:C6:E9:86:09:66:76:E3
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       250F
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
Signing time:             Wed 16 Aug 2023 16:12:30 +0000
ROA not before:           Wed 16 Aug 2023 16:12:30 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     132206
IP address blocks:        125.5.13.0/24 maxlen: 24
                          125.5.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9487 (0x250f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Aug 16 16:12:30 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64dcf56d-aa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:71:1c:f4:d1:6a:68:a0:51:c2:17:d4:db:
                    cd:3d:70:53:c7:ec:39:57:46:dc:4f:a8:b9:54:9e:
                    90:e5:e2:36:cc:87:a2:c5:19:a1:40:f0:d7:2c:96:
                    55:68:2b:48:11:85:52:69:76:0d:83:66:b4:76:c6:
                    11:db:ab:39:16:57:27:09:9f:0e:5e:d2:f3:eb:5f:
                    be:a2:bd:4c:2c:d8:ba:89:0e:58:27:f6:8f:90:82:
                    99:48:d1:7a:ba:df:1f:cd:93:02:6d:2a:c9:dc:66:
                    fc:86:ba:2f:64:6d:0c:c7:f3:40:d1:b9:2d:08:c3:
                    d7:6e:67:c6:ce:94:94:c3:f0:cc:33:71:20:85:41:
                    4c:66:ab:06:6b:a4:15:50:2d:8c:38:20:ad:f3:1f:
                    ca:31:76:09:1a:83:6b:68:5c:1e:ad:41:8e:19:89:
                    4e:be:47:57:1c:02:b5:5c:a5:5e:55:e6:e5:4d:37:
                    1e:6f:3d:51:0a:21:71:d0:0e:de:61:01:b6:cd:82:
                    74:cd:17:9f:4c:2e:b0:13:3c:4a:fa:fa:ca:70:6c:
                    e1:ec:6a:e1:25:d5:a5:52:f2:94:80:96:d0:f6:4d:
                    76:67:8c:23:76:ec:da:e8:35:af:db:38:fb:af:c9:
                    a3:c7:5c:2d:01:80:88:cf:1e:6c:c8:23:cb:2f:35:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:BF:A7:78:81:3D:B3:99:4F:0E:43:04:C6:E9:86:09:66:76:E3
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.13.0/24
                  125.5.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:37:4a:e2:02:ea:b0:a0:66:e1:c1:88:8d:ac:77:42:90:
         1c:cf:8a:1c:a4:7b:84:fd:f5:69:1c:b0:e3:80:d8:77:71:b9:
         4c:ff:4d:f0:66:db:03:9c:ec:17:59:c5:49:7a:11:45:f9:a7:
         5e:dc:de:5a:da:1b:e4:dc:fb:7c:d4:fc:cf:2c:b3:87:11:a0:
         ad:eb:90:44:6c:e6:ae:ab:01:da:27:ba:32:5d:ef:b5:c4:29:
         09:3a:98:16:c7:02:e4:5b:fa:49:a1:d7:9a:fd:ea:08:c0:82:
         dc:a5:c0:b2:64:e8:29:8b:de:76:bf:90:d0:ad:36:34:72:9c:
         28:ba:79:8a:74:a5:0e:af:a9:f7:e0:97:2d:c0:31:77:66:fd:
         50:11:82:dc:b2:47:57:15:56:a7:4d:f3:2b:57:a4:fa:e7:60:
         0c:d4:f4:07:db:2d:7f:7e:1c:b2:b1:ae:c5:95:67:a1:65:cc:
         bb:71:54:87:71:56:fc:f6:e2:a4:05:a7:e2:5f:bb:23:58:e6:
         91:00:9e:c0:96:88:9c:c8:46:42:68:8d:31:02:b4:23:d0:50:
         f8:db:cb:24:b9:6f:ed:29:da:db:9a:f1:73:95:51:02:bf:db:
         7d:53:91:d6:60:70:60:95:25:f3:d0:9c:33:71:d6:6a:cf:da:
         29:08:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:19 2024 by rpki-client on console-ams.rpki-client.org