Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
File:                     E1B073B689F011EABAEDCE2FC4F9AE02.roa (raw, json)
Hash identifier:          3mizSI3ttwr9fYLhX95SY8SiU7O6qd9AnRwusH6MEfo=
Subject key identifier:   3D:CE:43:5F:A4:29:4D:E4:30:68:8A:50:3A:F1:DC:AE:D8:0C:A6:AA
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1C5D
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
Signing time:             Mon 28 Oct 2024 14:40:42 +0000
ROA not before:           Mon 28 Oct 2024 14:40:42 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     45779
IP address blocks:        202.61.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7261 (0x1c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 28 14:40:42 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=671fa26a-b4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:a0:65:21:d5:ec:f7:55:92:11:2b:be:59:
                    7e:95:3b:49:fc:48:94:2d:c1:bd:47:59:68:07:4b:
                    28:51:ec:dd:db:52:af:06:b4:fc:a0:fc:4d:4c:ce:
                    34:d9:34:b8:a6:c1:53:a2:25:f1:bf:48:9d:1b:75:
                    8c:03:0a:ee:14:37:a8:90:ca:aa:e9:fa:85:23:a8:
                    76:b7:b6:04:b9:66:06:f4:7e:01:b9:9c:80:f0:72:
                    82:ca:48:f2:61:03:3b:43:1d:28:6b:9b:dc:7d:1d:
                    8d:6c:ae:a2:9e:37:8e:09:43:3f:8a:60:f1:85:d8:
                    3a:71:0a:47:9c:15:05:c9:2c:92:7a:f9:d0:7e:80:
                    e1:ec:fc:fd:00:cb:44:c8:3c:83:5e:68:a4:ee:ef:
                    72:4e:13:15:93:ac:92:0f:56:79:12:c5:8a:32:fe:
                    7e:8d:f9:96:68:b2:11:62:78:31:69:87:10:49:30:
                    1b:96:6e:03:1a:fb:c2:65:b6:6b:45:2d:b8:f3:a3:
                    9c:47:fc:dc:51:11:bf:24:17:30:21:96:49:01:10:
                    43:4a:52:41:15:33:b9:7c:a3:76:6f:25:e3:2b:d4:
                    2e:67:a6:f7:d7:9c:da:b3:c9:3e:ba:d6:7e:e7:2e:
                    b1:14:32:af:50:af:73:86:26:8c:4c:de:a5:b9:54:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CE:43:5F:A4:29:4D:E4:30:68:8A:50:3A:F1:DC:AE:D8:0C:A6:AA
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:30:49:ca:41:a8:c7:6b:cc:d2:6e:e4:a4:88:ba:5c:01:d0:
         b1:22:83:12:69:ff:a1:41:73:fa:62:cd:ce:83:cb:66:de:93:
         5f:82:7a:e9:91:11:0f:ff:8f:99:9f:cf:4c:c7:3b:31:b4:f9:
         21:a9:5f:54:7e:46:43:e7:b4:c6:e5:fe:9d:9a:df:89:29:37:
         9f:d8:67:38:01:d5:ee:ee:fb:df:65:5e:a0:cc:e7:f0:ec:c8:
         c3:e6:e7:f0:13:72:95:5e:bb:ec:b6:f5:6d:e5:74:77:5f:fd:
         6a:b0:54:37:17:a9:28:6d:8b:da:f8:70:20:1e:7a:a7:d7:15:
         59:b8:37:7d:2a:28:a8:2c:49:5a:8c:5d:00:c3:51:6a:27:51:
         8e:02:0f:f0:3e:37:7e:33:c7:cd:48:f6:f7:81:56:61:40:9c:
         ce:7e:8d:c1:f8:b7:e0:36:50:2b:3c:56:b7:11:be:75:de:d8:
         4f:c0:79:eb:ae:00:ef:96:35:4e:11:1c:00:c2:b6:8a:e0:e4:
         26:b2:34:fa:29:8e:15:c6:1a:a5:6f:52:a2:63:9d:97:dd:04:
         ff:40:a1:09:e3:e9:58:3b:8c:7c:a0:a7:25:95:cd:4c:b9:03:
         3b:f1:77:b7:4c:23:da:17:a4:72:38:0a:52:7c:a9:4e:74:38:
         3d:06:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org