Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/01CD0726931B11EA974F0D67C4F9AE02.roa
File:                     01CD0726931B11EA974F0D67C4F9AE02.roa (raw, json)
Hash identifier:          8rUvu6Zm9mS07ZXUdbkRAFT1ufjglbtScs1T7Sy1+Yg=
Subject key identifier:   D2:CC:A9:33:F1:FF:8B:FB:4C:DC:5E:27:CA:0E:45:8C:06:56:31:9B
Certificate issuer:       /CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B
Certificate serial:       0905
Authority key identifier: 45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/01CD0726931B11EA974F0D67C4F9AE02.roa
Signing time:             Sun 31 Mar 2024 22:00:28 +0000
ROA not before:           Sun 31 Mar 2024 22:00:28 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        122.252.145.0/24 maxlen: 24
                          122.252.146.0/24 maxlen: 24
                          122.252.147.0/24 maxlen: 24
                          122.252.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl
                          rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 21:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309 (0x905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D5F5/serialNumber=45D8610FCE17D9FF4E8C9E2D7A253DA5C2F87F9B
        Validity
            Not Before: Mar 31 22:00:28 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6609dcfc-694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:e0:c2:c5:05:95:0c:e3:b5:87:5e:34:24:
                    47:ce:cf:2b:20:c8:b2:e7:6d:12:9b:91:12:20:35:
                    2f:e6:f0:60:84:d8:ce:8f:6a:b7:66:91:1f:6e:30:
                    29:42:99:8e:3a:4f:9f:4e:2f:f1:28:b5:b7:66:1c:
                    67:91:ef:72:55:b0:11:7a:ce:26:72:c7:d1:c2:1f:
                    b4:53:2d:7b:56:3c:21:0a:21:96:72:26:62:71:09:
                    8a:f0:3b:d8:58:da:b7:d2:85:36:ce:89:0f:a3:07:
                    98:2a:d6:0f:a2:70:c1:85:ca:39:c3:ec:5f:31:6e:
                    2a:c8:8a:68:5a:18:19:41:e5:70:93:34:f4:43:9c:
                    58:a8:b0:bb:d0:98:a5:af:b9:f6:80:21:d3:56:aa:
                    ac:69:58:3d:32:8c:42:cc:fe:81:eb:be:7c:ab:de:
                    e4:f8:2d:1b:79:e1:86:12:96:a9:26:f1:52:28:83:
                    cc:e6:0d:8f:ea:1d:4e:ae:36:47:ed:ae:e9:83:a7:
                    06:ff:05:63:f6:3f:e0:1e:12:bd:2f:8f:4d:94:f1:
                    2e:47:87:44:6d:d4:b9:e2:f7:0e:c7:82:d9:4b:c8:
                    b9:a4:7e:6c:a5:7b:f4:e2:86:3e:0e:a0:c3:6b:f0:
                    23:19:a6:ee:b7:ad:8c:15:57:df:5c:4e:4a:ba:fc:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:A9:33:F1:FF:8B:FB:4C:DC:5E:27:CA:0E:45:8C:06:56:31:9B
            X509v3 Authority Key Identifier:
                keyid:45:D8:61:0F:CE:17:D9:FF:4E:8C:9E:2D:7A:25:3D:A5:C2:F8:7F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/RdhhD84X2f9OjJ4teiU9pcL4f5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RdhhD84X2f9OjJ4teiU9pcL4f5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D5F5/9B18B43088F211EA899EBE67C4F9AE02/01CD0726931B11EA974F0D67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.252.145.0-122.252.151.255

    Signature Algorithm: sha256WithRSAEncryption
         a1:37:3a:0a:1d:87:e7:dd:1e:92:60:64:5c:ce:1a:d3:3b:66:
         77:20:e7:bd:a3:17:b7:e1:0e:42:bc:08:e3:fe:0a:aa:fe:95:
         0b:df:be:1d:23:1e:3f:1a:91:46:d2:2c:e7:19:9e:bb:18:b2:
         9d:24:dc:07:de:85:75:18:30:fb:ff:85:7f:be:3f:59:16:c9:
         9e:49:d3:0a:72:21:37:89:b2:39:2e:f2:b0:99:a4:a7:cc:9c:
         d5:0b:5b:97:f5:2d:bc:29:2b:86:85:67:e7:19:3b:7e:40:54:
         e1:b1:24:45:9d:b2:f1:63:68:e7:f6:6f:60:c5:4a:87:3b:51:
         42:7e:11:0a:59:73:c2:4f:30:01:24:99:cd:df:8e:7f:82:14:
         26:10:9c:25:46:f2:6b:5d:32:93:7e:be:31:39:30:78:df:7d:
         a5:a2:f9:ca:ef:86:97:59:ef:46:8b:ba:ba:f0:0b:0e:08:31:
         c6:7a:68:48:6b:d2:5f:a3:f0:d9:e0:80:5d:f3:f2:67:da:1c:
         61:fc:5c:fd:d2:39:04:b1:05:88:2d:c9:8b:f5:97:6c:17:ca:
         0d:8a:b9:34:a2:01:4a:30:ad:6f:9b:12:67:00:3b:5b:1c:1e:
         2d:1c:bc:9b:7b:4d:05:7b:98:f2:e0:88:54:3c:f1:9c:04:1a:
         4d:66:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:03:39 2024 by rpki-client on console-fra.rpki-client.org