Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
File:                     6BD285BA971D11EE9333CE70C4F9AE02.roa (raw, json)
Hash identifier:          Qtm+4szSQdAgynHCTX77NVhRERzrbE+zoyUpXzir0eY=
Subject key identifier:   B5:31:BB:AD:6C:55:C7:92:DD:F6:AA:66:DB:9A:68:0F:23:0B:7B:F5
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       AB
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
Signing time:             Mon 07 Oct 2024 04:48:30 +0000
ROA not before:           Mon 07 Oct 2024 04:48:30 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151374
IP address blocks:        121.50.48.0/21 maxlen: 24
                          2400:ac00::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Oct  7 04:48:30 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6703681e-66d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:5f:e5:32:1d:0a:a6:6d:af:bd:4c:0e:08:
                    c6:7f:d5:d3:02:78:aa:62:31:05:f8:67:c1:df:81:
                    88:6c:56:c8:f8:8c:94:be:69:f2:48:72:99:28:33:
                    6f:4e:09:f1:10:10:cc:29:c0:13:55:4e:d6:d5:b6:
                    dd:78:dc:fa:c9:82:cb:c0:30:bb:fb:a2:33:ff:6f:
                    9b:c2:d0:c5:40:28:8b:fe:81:aa:65:91:b4:5b:50:
                    64:0b:1a:1c:12:64:36:6c:2d:5b:5b:28:66:44:d8:
                    95:e2:e3:5d:c4:ab:e3:33:76:5a:b7:bb:55:c0:f3:
                    dc:57:9a:bf:52:c4:cb:7d:08:7d:1c:18:cf:c1:18:
                    31:9d:99:89:d8:fd:65:93:44:d0:d2:62:da:94:fc:
                    f3:d2:eb:12:b1:dc:ac:e8:b8:d9:73:d1:ee:91:2b:
                    27:d4:38:fa:3d:28:3d:0e:4e:f7:f0:92:4b:1c:04:
                    5f:84:a5:5e:31:1e:75:5a:bf:c0:40:77:f7:14:04:
                    9f:25:0c:f6:6a:8a:90:2c:ff:52:7d:4a:8a:6c:7c:
                    4a:70:fa:43:9c:d3:c7:f9:a0:9a:43:4b:4d:8f:45:
                    5f:3c:c7:b3:b3:0e:93:d9:b2:b4:01:40:6d:e4:dc:
                    cb:17:4c:10:57:92:1d:03:36:f5:eb:2c:a0:69:a2:
                    6f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:31:BB:AD:6C:55:C7:92:DD:F6:AA:66:DB:9A:68:0F:23:0B:7B:F5
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.48.0/21
                IPv6:
                  2400:ac00::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:59:9f:ae:a4:a0:94:c1:7a:89:36:e0:02:46:7e:9f:2e:
         84:d8:53:28:03:79:50:d5:6e:6e:63:47:5b:ee:8f:29:47:84:
         e0:09:20:16:9f:da:d1:81:9c:3f:1d:d4:8c:56:68:d2:5b:70:
         fc:29:c9:44:a8:bd:52:c1:69:b2:24:7f:52:3b:cc:5b:62:b4:
         99:4e:8c:62:59:90:6f:09:a4:92:28:7a:b3:55:49:03:32:7e:
         4e:17:2d:36:ff:43:6e:6c:2b:20:cd:50:3f:67:b9:9c:2d:88:
         44:e4:12:44:d9:d3:ef:40:f2:e9:2c:21:8e:03:3c:f5:97:98:
         bb:74:63:d5:06:76:1d:75:16:e3:4e:8b:35:cb:41:3a:47:b4:
         9a:3a:14:a4:92:52:e9:f3:1c:d4:b6:2a:66:45:61:85:5e:42:
         1c:f6:be:b8:a2:14:bc:02:85:ed:6e:e9:b4:77:7a:37:15:ca:
         26:d2:c7:07:c5:bb:2d:73:67:63:56:87:d7:4d:3e:77:87:ba:
         c0:03:fc:f1:5f:bb:ef:81:ef:d4:83:88:41:45:29:7e:ff:76:
         86:d2:07:df:28:13:6f:ea:3e:0f:b2:37:73:0a:53:0e:64:31:
         de:56:a4:42:b2:75:af:73:9f:51:53:30:23:db:95:66:37:47:
         a3:84:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:07 2024 by rpki-client on console-ams.rpki-client.org