Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/A769D0DEB0CA11E59BE6876FC4F9AE02.roa
File:                     A769D0DEB0CA11E59BE6876FC4F9AE02.roa (raw, json)
Hash identifier:          K7JApbq9zwKTpcFwmr6e5jJ6jGolL8ttohijFBKpay4=
Subject key identifier:   BD:42:BF:DF:82:D6:3E:F2:75:2D:24:00:A9:53:DC:A9:FF:6C:76:C4
Certificate issuer:       /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial:       33DD
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/A769D0DEB0CA11E59BE6876FC4F9AE02.roa
Signing time:             Tue 31 Oct 2023 14:40:27 +0000
ROA not before:           Tue 31 Oct 2023 14:40:27 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     133083
IP address blocks:        118.179.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
                          rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 14:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13277 (0x33dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
        Validity
            Not Before: Oct 31 14:40:27 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654111da-a848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:0e:02:03:1b:50:86:64:40:75:26:2a:a3:
                    14:e1:d9:ad:a3:85:2b:bc:01:0d:78:6d:73:fd:5c:
                    13:c7:f8:f8:7a:b8:5d:0d:42:ac:03:e9:ad:6e:eb:
                    45:22:7c:ff:c2:17:99:66:50:1b:6d:fe:f3:5e:b9:
                    da:66:5b:ee:50:6f:6d:06:a4:16:aa:c5:ab:1d:49:
                    b5:e3:04:dd:6e:33:0a:46:0e:96:1a:bc:d6:33:a4:
                    5b:ce:ac:ee:ce:7b:bf:4b:ff:f4:f5:40:f5:d9:f9:
                    da:cd:10:d2:43:54:21:f6:9e:84:21:d2:9e:15:51:
                    08:72:83:8d:99:8e:56:1a:0b:f6:da:90:0e:77:36:
                    e1:53:a0:7e:95:2b:a0:82:7c:36:28:55:3a:bd:ab:
                    56:da:03:6a:87:60:eb:20:ac:ea:2b:c7:fa:1e:e0:
                    f2:76:5c:ee:f3:68:ea:84:f4:4c:1a:79:73:69:4a:
                    c5:81:db:3a:69:cc:07:95:60:54:ae:be:85:9f:71:
                    e9:1e:19:2d:74:d2:5c:2e:c9:12:5a:f4:bb:50:04:
                    11:25:49:c8:21:96:ae:ec:e5:10:7b:24:4e:29:94:
                    d5:45:0a:0b:37:69:e1:d9:a5:b6:ae:35:81:11:e2:
                    14:50:b0:f5:1b:59:24:35:a6:18:99:d7:14:05:93:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:42:BF:DF:82:D6:3E:F2:75:2D:24:00:A9:53:DC:A9:FF:6C:76:C4
            X509v3 Authority Key Identifier:
                keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/A769D0DEB0CA11E59BE6876FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:e2:bb:24:b8:b6:8a:85:bd:39:d4:b3:5e:e8:c2:b5:18:ee:
         40:6c:55:7a:64:c5:a5:19:c2:b7:6b:2d:db:60:60:42:33:93:
         28:02:4e:48:b3:5c:cd:1f:73:ce:38:60:4a:3e:dc:dc:9d:51:
         28:c6:87:03:7c:e4:a4:5f:b0:d2:8b:c4:45:ec:6d:a0:16:d8:
         74:ee:62:d3:11:d3:3c:35:d0:1e:7b:72:83:6c:1d:64:42:4a:
         2c:4a:ad:a1:b6:d5:2d:93:2e:f0:4a:2f:86:ec:f3:f4:c4:a2:
         b1:71:86:e9:55:67:d5:f6:0b:5f:eb:e5:be:1e:9c:45:81:a2:
         19:b8:5e:11:7e:3e:c1:11:aa:98:af:88:5f:53:f0:f1:21:30:
         1d:b3:11:b3:c8:18:46:5d:4d:60:55:e0:bb:bd:55:b6:02:a9:
         5c:9f:05:e3:c7:64:c9:24:8f:78:52:da:e2:66:09:7a:bf:4f:
         38:f4:7f:51:de:88:97:91:0b:bf:f4:68:2d:ae:c1:36:7d:4c:
         ce:c0:2c:80:1e:70:97:57:65:51:6f:39:42:18:90:fc:9b:8f:
         1e:0b:1a:04:41:ea:99:2c:fa:5c:2a:28:f9:60:e0:b7:3e:67:
         fb:f5:94:64:4b:e3:0a:92:bd:48:6e:54:d1:3c:89:8a:5a:98:
         f0:a1:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 15:43:21 2024 by rpki-client on console-fra.rpki-client.org