Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa
File:                     A716CA94954611EC9B320352C4F9AE02.roa (raw, json)
Hash identifier:          yGZXLSerRpm90Yyxw95Zu4C3ZsLldwZ4vNYM7yjrqLo=
Subject key identifier:   F9:3A:ED:32:E6:E6:8D:F8:2F:D8:B8:BC:B3:49:A3:63:E7:8B:58:85
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       0631
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa
Signing time:             Sat 31 Aug 2024 00:32:47 +0000
ROA not before:           Sat 31 Aug 2024 00:32:47 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     17762
IP address blocks:        14.96.1.0/24 maxlen: 24
                          14.96.2.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Aug 31 00:32:47 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d264ae-56a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:fd:e6:2d:c5:c1:e4:3f:00:52:3c:df:f0:
                    4e:14:54:94:c3:a5:cb:79:cb:cc:8c:7f:1b:73:db:
                    d5:f0:8b:82:8c:69:2b:f7:0e:92:34:a9:96:9a:32:
                    c8:7b:ac:64:ad:4c:4e:7c:72:08:c4:c2:05:00:55:
                    91:0d:6c:2d:4c:cb:c7:e5:d3:af:a3:04:48:3f:8d:
                    94:41:3a:03:24:74:aa:cc:08:0b:b4:2c:c6:f9:c6:
                    d3:6f:5e:dc:54:f3:12:72:26:1a:60:0d:5c:2f:65:
                    08:2c:c9:be:e7:70:e5:47:7e:fc:d9:19:7d:75:a2:
                    b6:27:05:68:68:77:fd:05:c3:be:10:a8:b1:cb:9b:
                    a2:34:c9:c2:87:57:8a:de:24:bf:8b:18:58:21:9d:
                    79:55:20:30:c9:15:e9:f0:80:93:79:dc:85:ad:92:
                    13:c9:4d:e9:12:ac:d4:b2:11:45:f0:74:75:71:a3:
                    66:ac:6e:d9:e0:09:62:5d:91:b5:97:e1:e3:2f:c4:
                    03:ee:a9:ce:43:35:3a:ba:03:bd:e8:32:42:09:19:
                    58:db:de:59:94:b6:39:97:9c:c6:8c:5f:48:bd:f3:
                    6e:07:c5:5e:17:a1:08:72:4d:6e:f0:73:25:5d:9f:
                    bb:ca:88:f7:6a:69:69:74:e4:e5:df:4d:68:dc:a8:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:ED:32:E6:E6:8D:F8:2F:D8:B8:BC:B3:49:A3:63:E7:8B:58:85
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/A716CA94954611EC9B320352C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.96.1.0-14.96.3.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:b1:5c:73:e7:c4:69:bb:ba:68:b6:de:36:2f:13:60:6c:
         c6:59:97:08:cd:1a:83:40:14:49:27:b0:1a:7d:5c:0a:16:b2:
         fc:71:3d:33:96:79:81:7f:d2:4a:36:9d:52:29:a6:2a:d6:ab:
         54:c4:82:65:e7:95:12:aa:89:7f:16:33:5e:fe:91:9e:7e:dc:
         0a:f1:5a:75:96:c2:d7:cd:4c:53:84:ad:4e:99:b6:ff:78:80:
         dd:68:08:0c:33:06:e7:53:cd:0a:c7:9e:da:f1:f8:e4:16:67:
         62:f2:99:38:17:1e:0b:79:c0:08:ee:19:d9:41:b1:d8:a5:8c:
         6c:bb:c2:1d:0d:ee:c9:5a:4a:1e:1d:06:50:7e:29:1e:f0:62:
         13:79:03:63:7c:73:4f:5b:85:34:80:49:44:83:ab:80:a3:5a:
         9b:f1:b8:bb:10:26:dc:15:6a:87:ac:d7:29:a5:78:c4:fb:ca:
         df:00:a2:b4:0e:32:c9:04:d5:28:22:c5:99:f1:f2:05:cf:0c:
         fc:59:b7:a4:25:92:af:26:00:d6:bd:1f:f7:de:45:de:55:01:
         d4:ce:cd:46:67:5c:75:12:be:38:a2:ec:66:93:c3:a0:3d:b0:
         1f:98:cf:9a:09:e6:0d:e2:f9:99:3b:17:db:0d:3f:5a:4c:7a:
         73:64:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:48 2024 by rpki-client on console-fra.rpki-client.org