Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
File:                     7B44296E33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          VBFrb7hmUOgI2LuDUX5a6ibtYNZDHswnzaDArlyUmUg=
Subject key identifier:   AF:40:38:9F:22:AD:1C:48:FF:02:02:2D:18:02:C0:E7:27:57:1B:02
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       0697
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
Signing time:             Tue 02 Jul 2024 23:11:46 +0000
ROA not before:           Tue 02 Jul 2024 23:11:46 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17675
IP address blocks:        149.234.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 23:11:46 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66848932-63c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:a8:b2:e4:38:46:a3:01:8b:02:9f:56:66:
                    b4:83:72:81:1a:79:20:56:bd:12:68:47:26:67:d2:
                    ce:70:fa:b4:bb:8d:3c:76:13:36:3d:ea:9f:95:97:
                    cb:58:60:9d:5e:8c:ea:2b:72:90:8a:cb:45:61:3e:
                    72:99:ac:38:0a:fd:3f:90:97:77:bc:93:0e:6b:47:
                    29:5e:21:eb:06:43:8f:c9:0e:31:70:8c:4f:b5:d6:
                    df:aa:02:d9:c0:e5:92:89:5f:64:37:d4:4c:b7:97:
                    fb:b9:86:da:eb:64:2c:5e:eb:5c:58:bb:5a:77:86:
                    6a:19:aa:f6:43:dd:04:ed:b3:17:ee:74:88:fe:67:
                    90:06:de:76:1d:00:fc:84:75:f0:b3:30:9d:cb:f1:
                    e9:6c:20:7b:b0:7c:1a:24:2f:7b:59:fc:58:94:77:
                    ff:8c:2f:89:fd:e3:4e:41:6c:1a:8e:23:d6:e9:f9:
                    b0:51:14:a9:7c:97:37:ce:79:04:c2:b8:c9:92:00:
                    c8:a1:32:17:d9:a3:db:f1:10:5b:cd:55:e5:11:4e:
                    0a:81:6a:4e:14:0f:89:63:95:31:87:ea:9c:03:f8:
                    cb:13:c8:72:8b:ce:5a:3f:42:c5:ab:95:30:fa:b8:
                    02:99:44:20:5b:94:d8:3f:ae:28:e6:5b:6c:72:f4:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:38:9F:22:AD:1C:48:FF:02:02:2D:18:02:C0:E7:27:57:1B:02
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7B44296E33A611EB8B013530C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:79:cf:1c:89:17:7d:bf:a8:3b:6d:e7:69:0e:97:fc:0a:
         fb:57:3d:02:4f:80:6b:bb:33:40:f9:14:74:0f:f2:db:dc:b8:
         57:db:c4:16:15:5a:0c:69:52:55:6b:e7:da:f6:ae:fa:93:ca:
         65:a1:20:9c:39:4c:f3:86:fb:6d:4b:de:87:d9:35:5e:aa:51:
         3a:5e:24:ee:dd:f6:cf:52:08:70:ec:33:38:c1:c4:e8:82:c9:
         99:08:e6:dd:2d:ab:34:32:a1:ad:ab:97:8e:80:56:36:c1:21:
         7d:7b:40:6f:a1:3e:0e:87:37:e3:af:d3:a3:b5:06:aa:c2:66:
         af:d8:3c:a3:cb:b1:0f:50:30:8c:fd:85:85:99:f2:a9:82:79:
         dc:dd:bd:8d:97:25:7c:6e:09:9f:fd:21:42:f8:66:b9:70:ff:
         05:ac:a3:87:63:b6:18:5e:7b:d6:9a:f4:78:b0:fc:c7:3d:95:
         4e:67:63:ae:99:69:20:ac:2b:8c:b5:d1:62:c2:fb:92:59:7b:
         12:3f:63:36:36:f5:df:7d:b1:60:5b:bf:d5:6b:38:4c:61:a4:
         61:df:8c:f1:c5:7a:72:16:db:db:11:d2:d2:f1:7d:0d:5b:d4:
         87:61:bb:d0:9d:f5:41:ac:05:d0:80:cb:ff:14:bb:15:c1:34:
         99:b6:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:55:48 2024 by rpki-client on console-ams.rpki-client.org