Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/85B249CA30AE11ECB675E112C4F9AE02.roa
File:                     85B249CA30AE11ECB675E112C4F9AE02.roa (raw, json)
Hash identifier:          fMF5RUo699+Rmx6D/LupKJOUzI9JpaFtoJ9Xd1uISe8=
Subject key identifier:   6C:1C:72:DB:A7:9F:13:9A:42:EE:2B:FC:74:7E:DD:61:4A:FF:61:96
Certificate issuer:       /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
Certificate serial:       03B4
Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/85B249CA30AE11ECB675E112C4F9AE02.roa
Signing time:             Thu 11 Jan 2024 02:03:51 +0000
ROA not before:           Thu 11 Jan 2024 02:03:51 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     9744
IP address blocks:        175.41.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl
                          rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050
        Validity
            Not Before: Jan 11 02:03:51 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=659f4c87-b61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:71:18:40:c4:90:3e:18:26:f8:a7:3b:60:
                    9c:19:29:52:a5:65:36:e9:72:f3:cf:34:3b:ff:23:
                    f1:76:ed:e5:87:79:89:48:39:34:42:7b:2a:a2:74:
                    38:f5:94:4b:c0:6d:d8:d4:28:ea:d7:0c:33:1d:16:
                    37:e4:f1:c0:52:86:b8:65:98:54:fa:14:80:60:94:
                    52:51:eb:f2:d6:a0:8f:e3:3f:1d:17:79:e3:b6:2b:
                    0f:eb:80:3e:ef:7c:2d:37:99:fd:09:29:9d:13:7e:
                    3d:f8:59:c6:3d:2e:61:7f:08:fc:08:a6:f6:15:46:
                    b8:0d:be:68:6a:1f:ae:0e:7f:8d:0d:00:11:0f:9d:
                    d1:be:89:7e:b8:fb:06:cb:b2:53:d0:73:37:06:a5:
                    9b:6e:47:b7:43:24:54:bc:22:46:89:09:f8:01:8b:
                    86:81:48:10:76:eb:77:ff:d3:a1:b7:5c:5a:69:d4:
                    43:7f:4a:0b:81:a8:9a:93:77:15:56:eb:67:bb:1e:
                    a1:48:26:8f:5f:de:29:18:62:2c:0c:e7:10:3a:3f:
                    e2:9b:ae:01:7f:eb:a5:cc:30:e8:bb:c4:67:af:7b:
                    9c:36:9c:54:26:02:df:39:64:dc:e2:5a:62:30:45:
                    e8:8e:99:86:12:2f:40:68:5e:5b:6e:f6:a8:b1:d5:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1C:72:DB:A7:9F:13:9A:42:EE:2B:FC:74:7E:DD:61:4A:FF:61:96
            X509v3 Authority Key Identifier:
                keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/85B249CA30AE11ECB675E112C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:9f:3b:90:f8:23:03:54:f7:87:77:a0:41:80:0f:7a:c3:
         2c:fa:a3:7a:09:85:ef:a3:55:df:c1:30:2d:61:3a:73:ee:55:
         f0:83:92:f3:2d:92:33:e5:3c:ed:a6:bd:f3:7e:a4:5c:b0:38:
         2b:29:d3:2d:60:ed:60:f3:f6:b4:4c:ee:b9:e6:86:e9:13:15:
         ec:4b:54:9f:6d:a3:9c:32:7f:0c:a7:be:05:c8:9b:c8:bd:0e:
         ce:6a:59:f7:53:4b:ba:3e:f6:4d:69:4f:67:7b:dd:de:bb:c8:
         34:e9:4d:d2:44:b9:f3:fd:06:f2:1b:36:f9:02:e7:d3:22:6f:
         17:fb:44:99:12:4b:0b:72:ce:e1:5b:00:e2:45:c8:76:7b:a6:
         48:0e:e2:31:02:4f:54:cc:f8:6b:91:ed:c8:b9:8c:f5:f6:aa:
         07:8e:c1:85:98:9c:d2:da:72:54:c6:54:4d:97:b6:9c:21:9f:
         43:5b:4d:14:61:63:85:1d:6b:ba:bb:dc:42:09:e1:7d:f6:e5:
         4c:e3:50:c6:58:08:30:d8:08:35:02:d1:63:c5:9a:6a:c4:8f:
         c6:ab:f4:f7:9d:81:76:37:6f:7b:b2:57:91:ea:4d:bc:80:c8:
         ec:a9:b1:ba:b1:4f:c1:ad:f0:0d:a7:b9:5f:52:18:3a:46:bf:
         54:2b:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:57 2024 by rpki-client on console-ams.rpki-client.org