Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
File:                     5D81DB7C51B611ECA674F080C4F9AE02.roa (raw, json)
Hash identifier:          Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=
Subject key identifier:   65:6F:3F:DC:20:15:82:54:3A:6A:46:D3:6E:93:6E:B8:F2:BA:F2:25
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       05F1
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
Signing time:             Fri 05 Jul 2024 00:22:25 +0000
ROA not before:           Fri 05 Jul 2024 00:22:25 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     55331
IP address blocks:        115.126.23.0/24 maxlen: 24
                          118.99.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
                          rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Jul  5 00:22:25 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66873cc1-3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:c3:dd:25:6c:72:b4:11:8e:d6:56:2c:01:
                    c0:0b:95:2d:3c:82:1c:81:0f:86:90:9c:ee:fd:89:
                    06:1c:a5:71:f4:98:05:95:b2:9e:91:45:bc:0c:85:
                    39:9d:85:df:97:c6:c6:7c:bf:7d:4b:7b:44:cf:f7:
                    ce:cd:7b:1c:a3:22:9f:90:09:fd:c7:a8:4f:5e:71:
                    02:0e:79:f4:66:c1:fd:2f:14:44:b7:bf:5f:ec:e6:
                    16:ae:4c:5a:3c:90:14:8b:25:df:71:a8:f7:4e:5c:
                    85:af:a0:4a:9e:7d:01:c8:80:75:88:54:c9:a4:cc:
                    bc:51:6f:d8:aa:33:fc:2f:82:b7:d1:d6:fd:d9:87:
                    08:68:43:3a:ee:f1:e8:95:7f:87:59:f5:04:a4:ea:
                    7b:44:24:e1:d9:e1:4f:c2:cd:87:29:09:14:65:60:
                    d7:52:01:dc:1c:38:0f:b7:c6:46:83:f3:1f:b3:c7:
                    1f:c7:97:54:f7:1c:f2:62:89:92:27:96:16:ef:fa:
                    8c:b5:4b:e6:73:4b:25:25:01:ff:72:89:89:23:1a:
                    71:b7:3c:50:22:e4:5d:b7:7b:6d:4d:fa:02:88:2a:
                    bd:a4:52:e7:32:21:63:5f:f0:e9:3e:21:0f:e6:34:
                    86:80:bf:d4:94:0b:f7:d3:46:f1:7c:31:4a:7d:c8:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6F:3F:DC:20:15:82:54:3A:6A:46:D3:6E:93:6E:B8:F2:BA:F2:25
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.126.23.0/24
                  118.99.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:81:14:ac:f2:f3:23:1f:ed:34:0f:0e:65:c9:7c:4d:5c:9e:
         45:7c:18:6c:1c:f6:55:f9:1e:b6:ad:c3:39:81:f7:fb:ea:4b:
         ad:a8:85:c9:76:01:fe:eb:72:61:68:88:e8:3e:3e:7c:3b:74:
         5d:a9:41:b6:2e:24:92:d4:9f:ad:17:bf:58:3b:8e:f8:4d:fe:
         92:d2:90:bc:6a:88:29:53:ee:91:a6:ef:ab:0e:fe:da:d6:db:
         6f:01:b4:e1:4e:1e:b6:d9:58:08:19:b8:96:fb:c7:2b:73:e5:
         20:21:05:d5:3a:c5:87:75:1e:f1:da:60:7f:fd:a4:67:79:8b:
         02:98:a3:4d:b2:56:59:39:90:d8:01:6d:5f:ce:19:03:c1:9e:
         3e:4c:da:b9:8f:90:3b:05:c4:8f:21:3f:6e:95:3f:9a:e9:0b:
         ea:df:46:53:d6:34:d9:8a:3f:80:01:7f:03:91:83:b1:64:8f:
         a0:8b:8b:78:51:f5:01:a3:79:4e:53:c8:c8:8d:76:cd:33:04:
         74:fe:19:38:b5:84:b4:62:37:70:9e:de:b4:72:a1:32:38:9b:
         63:26:6c:19:b0:cb:01:5b:ca:78:6c:05:18:3b:f5:7e:e0:46:
         17:52:e5:07:ba:61:93:26:0b:09:57:dd:c8:4c:c6:52:32:50:
         6f:fc:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:42 2024 by rpki-client on console-ams.rpki-client.org