Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa
File:                     3A0818A6A6C711E9933CF621C4F9AE02.roa (raw, json)
Hash identifier:          1g67cbWkfoHfH38TqnuwuXBiU6DRHwpF9jTBceu2aoA=
Subject key identifier:   48:3F:E4:67:61:81:70:36:E5:03:6F:15:E1:10:9D:FE:DB:F8:61:07
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       3403
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 14:40:35 +0000
ROA not before:           Sun 02 Jun 2024 14:40:35 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     59235
IP address blocks:        202.57.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13315 (0x3403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jun  2 14:40:35 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665c8463-b25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:02:b8:02:08:ae:cd:2d:71:cb:10:bc:a4:
                    8a:f1:a6:0c:24:f0:26:7a:a9:7c:00:23:0b:69:84:
                    89:fa:4b:78:77:6f:80:47:c4:e0:ba:bf:a9:bd:80:
                    b1:f3:b8:55:38:f8:4f:99:d1:6e:3b:eb:3c:98:cf:
                    52:f2:3f:3f:ae:df:a0:30:70:cc:31:ff:d7:8f:4b:
                    04:64:26:4b:c2:48:1f:8f:36:05:6e:38:a7:d1:40:
                    17:85:db:24:84:e1:61:fe:43:64:bd:ac:ed:5e:7f:
                    95:f4:cb:26:92:0a:61:11:73:2d:42:29:79:61:6f:
                    26:59:08:a4:ac:9a:33:68:fb:59:01:dd:db:08:66:
                    3a:0e:cd:5e:0d:c8:35:46:02:49:ff:58:ad:ad:51:
                    3b:83:09:c4:6e:5c:7c:76:d4:79:1b:0d:9c:2c:cf:
                    21:4b:4d:ed:95:cb:81:f8:73:94:0e:cc:06:da:05:
                    df:a1:d2:cc:ac:f7:b7:dd:8e:7d:d0:cd:79:3b:ef:
                    08:5b:cf:f5:ea:b8:46:d7:33:16:c3:72:1c:1e:9d:
                    ad:d7:c3:72:ff:f2:c7:bd:5b:bc:61:25:f9:cd:a7:
                    de:e8:d9:84:ba:94:77:bc:60:98:15:8b:2b:ba:c4:
                    82:c5:89:5b:7e:ef:97:54:ed:b4:4a:6b:2a:db:06:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:E4:67:61:81:70:36:E5:03:6F:15:E1:10:9D:FE:DB:F8:61:07
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/3A0818A6A6C711E9933CF621C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e6:aa:45:7e:a4:2f:b8:12:2c:59:1c:d3:7f:26:8b:14:ad:
         c4:95:70:b9:f5:40:39:fe:30:95:c3:0a:d3:9b:5a:e5:29:86:
         42:71:bd:e1:8c:b3:01:91:d3:d4:83:30:7e:24:59:3b:ea:70:
         01:28:3d:4e:e2:58:a6:e1:bb:64:43:e0:4e:01:fb:90:64:24:
         95:75:1b:27:32:65:c0:50:19:68:d0:84:99:43:e7:a4:fb:58:
         2c:b7:01:82:30:b8:42:52:3d:ce:3c:c4:00:2d:45:aa:13:5e:
         2b:61:b0:db:d4:cf:2a:61:3f:dc:2f:71:02:58:4f:91:a0:8f:
         3b:49:ac:c3:07:0c:18:9a:53:f6:8f:2a:7a:2b:7d:7b:6b:a7:
         6e:96:54:e0:0e:da:e3:41:cc:27:ef:96:a7:ba:66:36:3f:27:
         4b:a1:ff:7a:26:c7:aa:55:9f:74:5c:d4:c5:a4:e6:b6:44:ec:
         0d:d4:46:c1:45:db:7f:a1:52:04:44:83:b3:28:b0:db:ed:c8:
         83:3c:fd:68:b5:de:b0:a9:8a:ee:cc:d3:1d:e6:3f:dc:dd:bb:
         b2:da:ca:c9:ed:a5:04:c0:00:dc:4a:be:ac:02:f6:c3:3c:8f:
         1f:86:d3:58:98:ca:04:0e:be:3c:b0:d1:95:3a:6b:25:ee:e3:
         66:41:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org