Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
File:                     C4E57D9EE55A11ED98D38780C4F9AE02.roa (raw, json)
Hash identifier:          9n7ji7mRbxqw5LbmJKOtKEWm7L5OaLEva61LWM3vFFM=
Subject key identifier:   5E:BC:5E:54:6B:46:23:84:A8:B9:05:AB:43:40:7A:E3:8D:FC:AB:D4
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       05F9
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
Signing time:             Thu 04 Jul 2024 23:41:23 +0000
ROA not before:           Thu 04 Jul 2024 23:41:23 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     45201
IP address blocks:        202.125.168.0/24 maxlen: 24
                          203.56.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 23:41:23 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66873322-6ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:4d:16:22:a1:ae:45:ff:f6:54:fb:17:30:
                    e7:d7:bd:14:00:85:2d:3c:c1:39:d1:6d:da:68:70:
                    9d:4e:74:92:27:6d:a5:90:74:af:27:02:5b:d0:48:
                    fd:a7:1f:d4:18:a3:49:b6:99:c3:5b:44:c2:fc:7a:
                    36:69:56:d6:2e:1b:dc:5b:f1:ad:72:1f:32:b7:f5:
                    1d:f8:ed:90:42:00:ce:ab:d5:41:e1:5e:20:dd:d8:
                    2c:c2:89:bc:fd:6c:51:1d:57:e8:ae:1b:a2:b5:57:
                    3b:17:e4:c1:da:36:91:1e:76:c9:c0:16:de:35:ae:
                    29:e9:49:62:f2:47:07:4e:6d:8c:d8:ab:91:91:98:
                    e7:3f:68:11:35:94:e5:74:73:09:a7:0f:39:21:12:
                    c5:51:b4:bc:f4:4a:21:b2:b7:d9:8c:89:40:2e:96:
                    df:3d:51:dc:b2:01:e9:2a:4d:a3:14:60:2b:27:d0:
                    c5:d0:7e:a5:70:df:c4:fc:35:1b:4b:5d:31:bc:f1:
                    24:12:44:b8:0b:89:46:53:20:de:18:4b:42:20:f3:
                    d7:30:2a:b7:8a:91:96:fd:04:63:97:75:27:df:4c:
                    e8:e4:af:9b:f9:d2:35:a9:98:ca:ae:86:0c:52:7c:
                    0d:9e:2b:01:a9:2b:43:a2:c7:cb:68:82:67:9f:48:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BC:5E:54:6B:46:23:84:A8:B9:05:AB:43:40:7A:E3:8D:FC:AB:D4
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/C4E57D9EE55A11ED98D38780C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.168.0/24
                  203.56.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:d8:fb:cf:05:5c:46:5d:79:c5:8c:a2:f8:55:19:dc:75:
         fa:d5:11:d8:cf:c2:22:2a:0c:29:0c:a0:73:61:32:68:bf:0c:
         33:25:80:b9:34:cb:88:33:81:67:90:53:9d:93:e9:79:cb:a1:
         bc:67:22:27:df:23:a5:b2:06:70:85:59:ad:13:6e:c6:bb:b1:
         dd:a9:ef:f3:40:6d:c9:6b:7c:33:de:5a:59:2f:98:74:02:96:
         43:24:b5:07:51:19:9e:60:43:cc:32:b9:b5:d7:7c:23:2d:0e:
         54:88:c2:7b:70:65:9f:dd:21:5e:0b:2b:c0:d3:15:34:6e:7d:
         c3:eb:73:b0:a4:ae:62:01:ed:3b:6b:3d:0f:93:05:e2:cf:ac:
         02:bd:75:d2:ac:9f:18:c9:61:4e:d0:6f:e2:65:55:dd:7d:69:
         85:c3:e3:14:a7:01:6d:df:28:54:e5:4e:fb:3a:50:87:7f:7a:
         50:c7:77:74:d2:8e:48:a7:80:03:83:30:a1:df:6d:e1:d3:86:
         af:87:84:16:18:ee:db:32:58:81:4c:11:ea:f3:65:ff:0b:6e:
         2c:8a:59:ff:81:ca:0e:73:4f:93:a0:9b:84:bb:8f:72:d5:9e:
         5d:b1:d3:b7:02:b6:1a:5b:03:8c:fd:22:9c:d6:cf:de:a3:c2:
         5c:fd:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org