Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/A37B20206FE111E9B3465D70C4F9AE02.roa
File:                     A37B20206FE111E9B3465D70C4F9AE02.roa (raw, json)
Hash identifier:          yJlLAaym8LODZOP3qHrwUI/2A/4o2Eczor55+AGHrBo=
Subject key identifier:   9B:E5:6A:CF:D8:05:ED:9A:93:63:D2:29:B6:19:0B:BF:DB:A4:1A:04
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2B40
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/A37B20206FE111E9B3465D70C4F9AE02.roa
Signing time:             Sat 18 May 2024 15:52:34 +0000
ROA not before:           Sat 18 May 2024 15:52:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134739
IP address blocks:        45.64.72.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11072 (0x2b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: May 18 15:52:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6648cec1-aa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:3a:34:6c:85:14:3c:10:b7:a2:b3:bc:df:
                    5a:ae:29:36:cf:40:93:73:e9:a7:da:e6:5a:2a:60:
                    42:96:e8:85:fe:8d:a4:96:de:f6:73:b7:1c:91:72:
                    31:fd:dc:58:24:9f:95:35:3c:e5:e5:9a:fa:67:fd:
                    29:e8:72:8b:c6:0a:ca:da:fb:ce:e4:91:d5:a4:7e:
                    30:7d:be:e7:f6:29:58:f5:95:6c:2e:bb:78:3c:5d:
                    e1:9d:bb:f6:01:e8:09:0d:6f:f7:ff:72:73:1f:ef:
                    e5:a4:fe:85:26:3d:c4:f3:bd:9c:60:6d:40:97:a8:
                    58:f0:cb:8c:6f:58:d3:f5:41:6d:fa:4e:40:53:c6:
                    fe:d3:2d:28:9c:71:5c:eb:d1:08:dc:5e:51:de:38:
                    f9:ba:7d:ee:11:dc:f3:99:87:9e:01:ac:e3:b6:2a:
                    fb:90:44:9c:30:f8:46:43:75:98:d3:3e:c7:39:7b:
                    55:c8:75:ac:f6:ef:c1:18:26:ce:2f:fd:2a:34:9f:
                    4c:3e:83:03:59:4d:47:d8:53:86:5d:14:ae:94:23:
                    cb:76:94:f0:59:9e:08:f0:a4:f1:b6:0d:4e:fc:cc:
                    5e:9f:e1:c3:97:8d:10:9a:05:a1:73:fe:1c:67:28:
                    90:6a:53:4d:a6:b1:b8:80:55:9a:dc:74:e6:0f:df:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:6A:CF:D8:05:ED:9A:93:63:D2:29:B6:19:0B:BF:DB:A4:1A:04
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/A37B20206FE111E9B3465D70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:83:4c:e1:c7:d9:e1:d1:79:f4:73:fc:69:ae:10:fa:b6:b6:
         44:e5:72:78:d6:6e:72:bb:23:a9:36:3c:6c:75:c6:fb:af:9c:
         f0:a6:fb:a2:59:67:a8:47:1d:9f:e4:3c:3d:0c:dd:9c:e0:00:
         03:76:72:73:6b:aa:e0:02:e5:d3:28:74:2b:51:9c:9a:bb:fc:
         52:32:74:b6:30:fd:7b:dc:bc:c1:32:f9:19:58:72:5c:9e:2f:
         1e:ab:87:49:05:94:17:af:5f:3e:d9:04:7c:7f:0e:60:20:5c:
         aa:13:33:0c:ad:ab:f1:85:65:b6:01:60:5a:18:75:06:68:2a:
         e2:f7:8c:90:59:33:59:cc:bb:21:33:62:c2:e6:67:55:7f:4e:
         fe:4b:2b:a2:89:05:64:57:03:59:90:e9:46:94:f8:be:af:b9:
         41:d3:d8:44:a1:ba:d4:2b:06:25:34:fc:aa:9a:b8:36:ad:52:
         bc:30:c8:af:36:4d:ab:5c:24:9c:76:86:9d:70:54:08:24:05:
         b1:5e:34:30:c7:40:6e:a0:11:56:31:d6:f4:47:7f:2a:ba:5a:
         24:73:02:3e:4d:8c:62:44:78:66:b7:8a:39:ec:58:c2:5b:8e:
         3f:63:ef:3d:2e:ba:bd:3d:60:21:56:f7:f8:52:55:63:24:7d:
         13:ce:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org