Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa
File:                     7E42E396175111EC8D2A3722C4F9AE02.roa (raw, json)
Hash identifier:          wUpjCW1BnmM2USx+s/GNvjS+HWCeP4g5FA3SQH9kRJs=
Subject key identifier:   20:39:CA:97:A9:3A:D9:88:DF:82:BE:06:57:05:4D:0B:F3:2D:65:E7
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       043E
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa
Signing time:             Thu 03 Aug 2023 01:02:04 +0000
ROA not before:           Thu 03 Aug 2023 01:02:04 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     138475
IP address blocks:        220.101.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 01:02:04 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64cafc8c-0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:62:b6:0c:f4:1b:de:93:93:ba:35:27:14:
                    5b:78:c0:9b:8a:d4:c0:b3:4f:8f:e5:64:f6:d0:6e:
                    f9:99:f6:01:49:17:60:76:dd:4c:08:9e:08:da:5d:
                    fd:fe:c6:59:60:16:1d:50:d7:c8:69:37:c6:6d:6c:
                    c5:f1:fd:8a:a8:96:bb:b3:91:be:00:48:b4:44:04:
                    c6:1d:7f:e4:bb:8c:5a:09:d9:1b:35:ff:6d:bf:a6:
                    ff:49:7f:19:f5:61:20:13:69:9c:6a:b9:ab:5c:ab:
                    29:62:7d:83:6d:22:b1:21:ce:07:fe:8d:57:ea:c9:
                    63:1a:4d:90:1a:4c:80:50:57:a2:ba:18:6b:69:2e:
                    6a:c6:0c:c0:90:44:5a:87:4d:33:15:c2:45:15:3c:
                    68:a7:9e:be:62:aa:86:f2:f2:37:82:5f:23:a7:bb:
                    12:2a:f0:4c:63:1e:6f:0a:df:f4:98:a8:f1:6d:ba:
                    eb:f9:7a:64:36:1a:3d:c8:9e:83:2f:27:72:1b:47:
                    d4:18:96:03:ad:09:ad:34:5f:63:12:89:a0:42:cd:
                    85:39:50:6a:52:b3:89:bc:15:cb:d3:1a:2e:8a:6b:
                    18:3d:d7:5b:fa:d9:0c:e4:5e:b2:15:04:29:2f:39:
                    b3:13:11:83:ff:c1:53:55:6b:af:ff:39:e3:8f:47:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:39:CA:97:A9:3A:D9:88:DF:82:BE:06:57:05:4D:0B:F3:2D:65:E7
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7E42E396175111EC8D2A3722C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.101.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:84:f1:e6:bf:1e:84:bf:ac:7e:6f:5b:f8:2b:d7:47:dd:
         b7:17:22:12:01:df:c2:ee:b4:90:8a:ab:c0:81:a5:ee:db:f0:
         9d:38:ba:0d:8f:2b:fe:e6:45:9b:78:8a:1c:fd:53:57:43:73:
         a7:d3:ff:d0:c4:a6:29:7f:5b:cb:f7:88:18:3d:7b:80:a8:3f:
         47:13:af:01:5c:12:f0:9a:87:f6:94:1d:2d:85:37:a1:66:b4:
         da:80:9e:8b:b5:df:0f:6f:92:9a:32:cd:53:0d:8e:fd:cd:5c:
         53:95:a2:f7:af:ae:41:8b:29:34:ca:f9:ca:f4:80:3f:ad:a6:
         90:b0:d0:04:97:7a:9a:1b:bc:fa:ce:2b:e2:4e:e6:24:08:a9:
         fd:72:51:9a:d3:f4:e4:78:c1:c6:12:cb:ad:73:a2:49:23:2d:
         98:5e:01:4d:2c:ce:a6:c0:b9:90:c7:24:a8:5c:04:09:b9:92:
         d7:f2:bf:00:68:61:61:33:f4:fe:ca:28:6e:72:2b:72:09:f5:
         1d:2c:04:2c:9f:49:af:e8:ef:18:34:2a:8c:7a:15:fb:8f:e7:
         11:d0:2e:5d:28:03:d3:d3:64:4a:67:77:08:a7:15:eb:5b:8a:
         7f:71:8e:f9:8d:e1:3c:6e:a0:b5:20:54:c5:5a:c8:7a:7d:74:
         89:51:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:31 2024 by rpki-client on console-ams.rpki-client.org