Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
File:                     7DBDA87C561A11E79F98831DC4F9AE02.roa (raw, json)
Hash identifier:          SI+LLofCjizJ4ADDiYbKrAg1//cncoxs2Ga5Zj0MMu4=
Subject key identifier:   A2:24:05:48:F4:A7:54:74:20:BB:9A:DB:A8:E0:8A:2B:51:D1:7D:D7
Certificate issuer:       /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
Certificate serial:       22F7
Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
Signing time:             Thu 02 May 2024 16:33:31 +0000
ROA not before:           Thu 02 May 2024 16:33:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     18014
IP address blocks:        113.29.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 16:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8951 (0x22f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07
        Validity
            Not Before: May  2 16:33:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6633c05b-57d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:ff:fd:3d:94:4f:f8:ad:09:17:e2:89:10:
                    f4:da:51:b3:8d:44:b2:f2:ad:e0:dd:4b:89:9c:6c:
                    58:78:fc:af:a8:5c:3c:5c:3e:77:f1:90:14:a6:c3:
                    5c:53:7c:22:70:f6:50:b3:71:69:cd:3b:a1:99:cb:
                    0a:2d:7c:2d:cc:ba:f1:86:a0:ce:95:45:0a:26:54:
                    a5:d9:68:e1:85:b9:a7:ca:02:78:50:5f:dd:26:94:
                    d4:c3:06:d0:c6:5b:5a:ca:fc:5b:7c:8e:f5:83:e0:
                    60:97:47:8e:c6:c3:83:df:25:a2:70:c1:b4:9e:65:
                    d1:cb:36:2a:da:e1:dc:77:67:a8:19:6e:bc:e8:0d:
                    9d:1c:01:d3:6a:9e:32:b8:7b:32:11:36:c5:2f:59:
                    e3:b2:05:a1:22:93:6f:92:6b:e5:7d:6f:10:34:b2:
                    09:fb:db:97:9d:09:e9:ce:46:d1:45:37:de:9e:6b:
                    0f:1c:24:9b:a0:1c:07:2f:f0:d3:9e:10:f8:b2:16:
                    de:19:93:a0:ce:a3:7e:95:fb:69:7e:58:f2:af:71:
                    c0:41:e8:cb:8e:47:16:98:69:7e:78:03:45:37:fc:
                    c0:18:36:37:dc:39:19:da:cf:df:41:c8:0c:dc:3c:
                    36:ce:ac:eb:7b:cf:89:43:64:08:43:e2:fb:0b:10:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:05:48:F4:A7:54:74:20:BB:9A:DB:A8:E0:8A:2B:51:D1:7D:D7
            X509v3 Authority Key Identifier:
                keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/7DBDA87C561A11E79F98831DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.29.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:5e:c3:d0:93:96:57:f7:6e:df:da:06:f6:34:f3:0b:58:6f:
         13:a7:22:f3:f4:4b:3b:1b:1f:2e:d6:48:83:0c:b4:c8:9a:3e:
         ec:56:04:1c:54:58:10:6d:8d:34:df:4d:01:6b:62:22:35:93:
         3c:b4:22:1a:2e:3c:8b:c2:46:d8:96:f2:2d:cb:0b:bc:5a:b9:
         4d:b0:5c:88:e6:8d:a8:91:00:33:03:e4:a7:bf:cb:15:a0:fb:
         2a:77:fa:f3:6c:51:80:2c:c2:90:48:a1:78:3d:5e:7e:06:a0:
         f2:aa:a0:25:97:c9:78:cd:8b:20:3c:05:6e:79:94:5d:00:3d:
         ce:64:34:dc:c6:a7:40:12:6e:c0:17:04:dc:07:e2:af:ee:91:
         c0:99:b3:65:e8:63:56:6a:6c:fb:80:a6:9e:da:a4:76:4d:28:
         2c:29:d0:dc:ff:c3:c3:55:eb:f3:3c:6a:24:7b:cd:40:17:db:
         cb:19:09:5c:05:70:21:67:64:90:af:b3:77:50:0b:14:75:3b:
         68:f7:ce:dc:0e:fd:17:6f:37:84:b7:ab:72:52:0c:0d:ee:f3:
         ca:f9:6f:bd:7e:fb:3e:4d:dc:4a:7f:29:79:c1:34:f3:1f:9f:
         44:36:1c:4e:61:35:89:bb:be:f0:e9:76:89:50:0f:13:d6:29:
         cb:a4:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:06 2024 by rpki-client on console-fra.rpki-client.org