Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/D1893F2435F111EBBFEA4039C4F9AE02.roa
File:                     D1893F2435F111EBBFEA4039C4F9AE02.roa (raw, json)
Hash identifier:          SDlK72tVgqLaEiiVBcuX/ceq5NukKuq9JwXB6vZpsxI=
Subject key identifier:   D5:02:C1:D1:DC:4F:43:EA:E9:20:A8:A6:AD:C2:76:98:17:DF:16:06
Certificate issuer:       /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial:       33B4
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/D1893F2435F111EBBFEA4039C4F9AE02.roa
Signing time:             Mon 18 Mar 2024 14:50:42 +0000
ROA not before:           Mon 18 Mar 2024 14:50:42 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     37978
IP address blocks:        147.41.0.0/17 maxlen: 17
                          147.41.128.0/17 maxlen: 17
                          147.41.240.0/20 maxlen: 20
                          147.109.0.0/16 maxlen: 16
                          147.109.124.0/24 maxlen: 24
                          147.109.192.0/21 maxlen: 21
                          147.109.208.0/21 maxlen: 21
                          147.109.216.0/21 maxlen: 21
                          192.26.232.0/24 maxlen: 24
                          192.107.101.0/24 maxlen: 24
                          192.190.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
                          rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Nov 2024 14:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13236 (0x33b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
        Validity
            Not Before: Mar 18 14:50:42 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f854c2-8075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:bb:69:15:56:d0:73:ec:09:3d:e1:2f:c2:
                    15:9b:33:9e:8d:15:ab:4b:ff:5f:1a:96:c4:18:23:
                    a2:ec:b6:cf:28:c7:fe:db:67:8a:c8:8e:84:b9:ab:
                    f3:3b:29:6f:89:98:a4:5e:6b:06:5e:d0:58:d9:2f:
                    22:d1:1e:ed:53:a9:ab:b4:01:65:c1:13:f3:e8:07:
                    40:2f:af:f2:4f:7f:84:5d:85:3a:ed:b7:d5:c6:91:
                    2b:5a:4f:a9:ec:51:fe:d4:36:0b:2c:01:9f:c1:b3:
                    06:a2:eb:fa:2e:fd:ca:c5:cb:0f:5f:5b:8d:27:ff:
                    52:40:ca:e6:63:6f:24:10:8c:c0:cd:e2:f5:79:50:
                    2e:e5:a7:63:55:4f:98:81:27:56:7d:90:06:a2:dd:
                    71:42:a7:c6:fd:eb:ad:39:75:41:b5:de:12:6f:7c:
                    d0:a9:f9:69:17:ba:bc:7b:b8:b8:f6:03:fb:24:33:
                    26:1c:b3:b2:da:67:a9:ab:1a:0b:ed:65:11:62:cb:
                    a1:0c:da:74:f9:df:2d:1c:a2:3c:3e:47:14:ae:fe:
                    c9:ad:8f:e9:35:af:a4:c5:90:d0:0d:1a:aa:83:6f:
                    b9:cc:66:58:9f:1c:d4:80:15:dc:c7:81:9d:33:c7:
                    df:d2:a0:93:75:1f:3f:a4:c5:8a:ba:4e:f5:3a:98:
                    3f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:02:C1:D1:DC:4F:43:EA:E9:20:A8:A6:AD:C2:76:98:17:DF:16:06
            X509v3 Authority Key Identifier:
                keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/D1893F2435F111EBBFEA4039C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.41.0.0/16
                  147.109.0.0/16
                  192.26.232.0/24
                  192.107.101.0/24
                  192.190.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:96:1a:55:2c:2f:92:51:2e:e4:4d:70:96:c1:d9:fd:1e:
         f9:a7:0d:a5:60:65:0a:a2:0c:4c:b0:54:8f:6b:e2:5d:20:51:
         fb:48:39:e1:f1:86:5c:65:f8:1e:19:23:7b:21:1b:23:14:91:
         94:05:8f:12:65:91:4b:d3:9c:91:ae:f1:82:39:ba:67:ad:9c:
         84:68:80:58:bd:21:1f:7d:b5:f3:40:26:75:e0:c9:66:0b:79:
         9e:39:69:66:ea:3c:ea:0e:f5:51:a4:68:c1:bc:00:6b:0b:4a:
         4f:32:d2:5b:ce:e5:9f:a7:c3:22:00:df:26:36:65:e6:7b:e5:
         c9:ed:b5:92:77:18:7c:86:d9:23:a0:3d:7b:ff:b6:99:38:a5:
         35:9d:23:8e:fa:17:9b:49:20:b2:25:26:9f:5e:35:38:e6:2c:
         a0:2e:62:3e:2a:fb:23:ad:5c:84:fc:56:bb:c6:d8:a9:b7:23:
         db:53:b9:3d:fa:61:34:d9:22:9e:86:7b:2a:6a:66:75:e7:17:
         97:75:85:a6:89:40:75:c3:04:db:d0:f0:e5:36:0f:a8:35:42:
         79:dc:6c:06:cd:e4:8e:1d:db:42:56:52:fe:b5:cd:5a:8a:43:
         26:cb:da:d2:c5:bd:01:5f:33:50:9c:38:2c:6b:74:bf:e9:37:
         6a:5e:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 17:57:01 2024 by rpki-client on console-ams.rpki-client.org