Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
File:                     4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa (raw, json)
Hash identifier:          6rJ29r7V7x2kdEaobkC8UyArL50UhY9DBVuE2HNSOQE=
Subject key identifier:   02:36:91:6E:83:24:04:4B:45:23:EA:57:EC:85:79:22:67:16:E3:C0
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1B15
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
Signing time:             Tue 02 Apr 2024 16:54:17 +0000
ROA not before:           Tue 02 Apr 2024 16:54:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149535
IP address blocks:        45.125.152.0/24 maxlen: 24
                          45.248.16.0/24 maxlen: 24
                          45.248.17.0/24 maxlen: 24
                          45.248.18.0/24 maxlen: 24
                          45.248.19.0/24 maxlen: 24
                          157.119.176.0/24 maxlen: 24
                          157.119.178.0/24 maxlen: 24
                          183.87.185.0/24 maxlen: 24
                          183.87.209.0/24 maxlen: 24
                          183.87.210.0/24 maxlen: 24
                          183.87.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6933 (0x1b15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Apr  2 16:54:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=660c3839-afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b8:ef:00:5d:c5:02:20:81:68:cb:f3:9f:ba:
                    8f:be:e4:ed:1e:67:1c:be:44:8d:5c:f8:38:12:4c:
                    11:82:7a:6a:c0:37:77:3d:63:86:e8:b5:99:58:94:
                    15:9c:7c:6d:3c:8c:05:99:b7:7a:82:a3:da:38:26:
                    4f:a6:26:97:98:21:63:76:f6:02:90:28:7a:d7:3b:
                    72:35:d8:08:c0:eb:83:ac:60:4b:0f:92:58:98:b4:
                    7a:ae:2d:08:61:5e:c9:c8:8c:a4:fb:a5:f6:6a:5b:
                    9d:c3:1d:23:ff:51:4a:f8:63:6e:d2:21:9e:20:e1:
                    34:5e:e1:4d:ad:eb:1e:a5:67:b1:59:31:34:8d:b9:
                    ca:32:30:a0:16:50:f5:b1:8a:2f:b8:0e:a5:56:d7:
                    ee:4d:3c:82:e2:9d:b4:a2:4b:7a:14:7f:a0:ca:bc:
                    f7:71:6c:4b:d5:8c:05:ad:ce:e7:fb:fd:d1:b5:d7:
                    21:9f:54:d2:b1:37:75:6a:69:18:f2:b5:90:b0:3a:
                    d5:7b:12:9f:b7:1c:9d:7d:d9:a7:6c:33:9c:16:b9:
                    ad:89:c6:e5:e8:92:52:c2:6e:db:22:a1:2b:e6:dd:
                    92:95:1e:91:a2:7a:ed:27:51:90:4c:bc:7e:bd:a6:
                    ee:c9:ff:2c:45:f1:73:92:63:50:f7:cd:73:aa:7b:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:91:6E:83:24:04:4B:45:23:EA:57:EC:85:79:22:67:16:E3:C0
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/4881E5C6EB5D11EEB3F3EC2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.152.0/24
                  45.248.16.0/22
                  157.119.176.0/24
                  157.119.178.0/24
                  183.87.185.0/24
                  183.87.209.0-183.87.211.255

    Signature Algorithm: sha256WithRSAEncryption
         cd:29:b9:a6:9b:48:44:53:5a:c7:82:20:fc:16:b9:4d:91:8c:
         05:3c:d3:2f:ef:45:82:88:b8:1b:32:f0:1d:8c:97:ec:89:fc:
         a7:95:f4:27:79:7e:c5:a8:62:52:f4:6b:4c:f1:5c:b9:22:08:
         e9:91:a6:d1:16:29:11:59:69:05:41:c5:1b:ed:a6:51:e0:0a:
         d8:3a:41:7e:eb:01:54:00:bc:00:29:dc:80:8b:4e:7c:d0:87:
         d9:9c:6c:34:93:e7:74:92:31:06:2c:78:cc:d2:1d:b0:fe:bf:
         e3:a7:4c:e6:ea:4a:cf:ab:aa:6c:8a:33:2e:41:09:20:9a:e2:
         b2:93:00:56:b1:3b:c3:45:d9:bf:1b:70:c4:f2:8b:b2:67:f9:
         b3:66:f5:80:82:39:95:f7:de:b8:f6:dd:3d:5e:08:8d:be:9f:
         d4:27:dd:09:77:4c:8d:02:dd:1b:15:df:56:f1:48:ab:52:fc:
         b3:22:5a:e9:f4:6d:37:90:3a:9c:0a:62:ab:9e:9d:dd:ec:70:
         99:53:e9:e0:d1:82:5d:d5:1e:60:6b:0c:c7:e8:2c:22:04:bd:
         60:32:ac:d4:9d:04:52:77:2e:e1:15:3e:ae:c0:1e:94:8e:ff:
         ef:3b:69:87:70:45:90:0a:86:eb:58:a0:3c:62:68:ec:85:f3:
         cf:e8:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:07 2024 by rpki-client on console-ams.rpki-client.org