Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa
File:                     997C96220CC211ED8C32645BC4F9AE02.roa (raw, json)
Hash identifier:          5DLrlaEwDnRAYVGqsc8MbRxK5SZfYcfygcKSB5RewQw=
Subject key identifier:   D6:2E:87:9C:99:A4:5A:B6:C5:4D:ED:66:5D:C4:C4:71:71:D4:95:F2
Certificate issuer:       /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial:       074A
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa
Signing time:             Tue 08 Oct 2024 21:30:31 +0000
ROA not before:           Tue 08 Oct 2024 21:30:31 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     59316
IP address blocks:        116.206.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
                          rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 21:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
        Validity
            Not Before: Oct  8 21:30:31 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6705a477-b81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:cf:e2:54:1e:cc:cb:09:c5:b0:55:b6:9b:
                    69:f2:1a:ea:d8:b9:fb:ef:02:85:01:3d:f9:2f:c4:
                    fe:f7:84:b9:75:d3:53:5d:bb:d9:23:dd:4f:f0:11:
                    84:a2:ab:1a:eb:64:13:c2:99:03:16:53:aa:bc:2e:
                    3b:9e:f8:ae:d9:ac:95:af:02:9e:11:d8:c8:a8:9e:
                    0b:f8:82:0d:2c:a2:dd:fa:a8:67:5c:37:cc:7a:7b:
                    29:53:e5:eb:f2:d3:45:4c:d8:e9:5f:d3:c5:15:67:
                    73:43:25:42:fd:b9:ff:eb:2b:2d:dd:9d:bd:46:41:
                    26:c9:b7:f4:28:09:51:4a:e3:b1:dd:97:b0:8e:86:
                    8f:57:67:98:0e:4e:60:a2:10:d8:44:1e:23:39:df:
                    62:45:af:5a:97:4d:3f:87:33:ae:bd:f2:3d:35:d9:
                    a2:5b:bb:d2:3a:5e:43:fc:f3:3c:16:8d:67:60:70:
                    19:84:05:f5:62:03:42:2f:19:e8:34:f5:c8:8d:24:
                    f5:79:35:3c:9e:17:22:2b:dd:b7:7c:59:9a:87:85:
                    a3:6e:9f:ca:35:71:64:81:94:4e:50:bb:4d:b6:4a:
                    b1:d5:52:cf:b4:e1:72:a9:db:f6:96:32:68:5c:ce:
                    e1:5f:dc:77:f3:c1:2e:15:a6:a6:c9:a2:6f:e9:ea:
                    f1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2E:87:9C:99:A4:5A:B6:C5:4D:ED:66:5D:C4:C4:71:71:D4:95:F2
            X509v3 Authority Key Identifier:
                keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/997C96220CC211ED8C32645BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:60:29:29:15:2f:bc:87:fc:85:ec:b5:f3:e6:2a:b5:23:9b:
         91:a3:ed:86:14:9d:8c:87:cf:7e:14:2e:e8:42:e5:49:d6:61:
         db:ff:e7:31:f2:f4:ed:65:1e:fd:1c:1b:7f:33:a4:69:09:fd:
         79:db:29:88:bc:a9:57:bc:f1:a6:42:a1:a6:5a:3b:47:52:b1:
         4d:8e:f7:c3:93:8b:b5:aa:56:48:8c:6f:b1:de:f1:6f:27:71:
         5c:ef:92:b9:02:30:9c:3a:e8:83:46:62:91:c7:21:8a:7e:45:
         6c:98:39:2d:ed:da:c9:72:8f:47:67:8f:19:d3:93:cf:26:b4:
         cd:4c:7d:3e:17:56:27:2b:8e:a2:75:51:5a:d7:d2:47:9e:51:
         c0:cd:cd:12:0e:a9:24:16:91:60:ce:ff:2e:20:9c:51:a1:51:
         b2:1a:8a:01:73:57:64:7e:c2:dc:8e:fe:55:c1:7a:da:6b:33:
         8a:d3:ea:51:ff:3a:68:47:53:41:e0:b8:d1:12:3b:30:72:1c:
         4a:1b:68:e1:89:8f:b4:e3:c9:8c:a4:fc:ae:7d:2e:17:5e:b6:
         f4:04:6f:d6:e3:4a:49:7d:b8:d2:84:93:d3:71:4f:48:72:e7:
         6d:56:3b:bb:04:61:3f:bf:10:5c:8b:b3:d5:ea:9f:3f:7c:a8:
         47:9e:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:10:00 2024 by rpki-client on console-ams.rpki-client.org