Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4999305414DF11EEAB46A86DC4F9AE02.roa
File:                     4999305414DF11EEAB46A86DC4F9AE02.roa (raw, json)
Hash identifier:          1ZwfcibXXD78qIDpt5glI/3vJDHrAKkJdTFVoYFKI0A=
Subject key identifier:   0E:AE:1D:BB:2A:5A:6F:25:D8:2A:75:3F:53:80:E2:33:9C:E0:BA:81
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1D00
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4999305414DF11EEAB46A86DC4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:33:35 +0000
ROA not before:           Thu 28 Dec 2023 16:33:35 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     173
IP address blocks:        163.138.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7424 (0x1d00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Dec 28 16:33:35 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658da35e-eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:67:c5:6a:50:82:56:a6:24:7b:0c:bd:e3:
                    a4:ff:4e:36:ce:05:9e:8e:68:f3:36:cc:b5:c0:9f:
                    e5:07:7c:20:59:b4:4e:c5:96:dc:6c:1f:91:b2:ce:
                    ac:63:94:03:03:7a:a9:bc:d9:a2:a6:07:6d:1d:20:
                    a1:81:84:5a:19:8b:02:7e:18:2a:5a:68:08:0e:7d:
                    06:e7:6e:fc:40:25:6c:83:91:62:26:54:2e:2a:45:
                    bc:c9:3e:fc:cf:d2:6b:e0:2b:8d:ba:9e:3e:55:26:
                    12:32:0a:ce:c3:95:3b:59:70:95:56:0d:48:32:1a:
                    76:c1:c8:ad:e8:fa:77:3e:d1:fe:21:b4:a6:b1:33:
                    6d:c8:83:97:e4:14:86:60:61:64:b1:61:82:a7:c7:
                    5d:81:b3:47:97:5f:a6:34:61:2d:c8:9e:aa:f6:cf:
                    d1:60:9a:4e:79:e4:eb:33:21:e3:a0:bb:73:2e:34:
                    3f:94:b1:8e:f1:be:f4:97:a5:0d:4b:b9:1b:46:94:
                    c0:85:5a:c6:2d:64:d8:07:22:82:5a:64:6e:6b:78:
                    4c:43:aa:8e:08:a4:44:9d:8c:cb:05:f7:1a:b4:ec:
                    7f:7e:cd:09:1d:39:2b:91:f3:48:48:4b:8e:32:50:
                    db:bd:e1:5a:1c:bd:30:eb:44:f0:39:8d:5a:14:36:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AE:1D:BB:2A:5A:6F:25:D8:2A:75:3F:53:80:E2:33:9C:E0:BA:81
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/4999305414DF11EEAB46A86DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.138.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:84:27:e3:4b:ef:bc:8b:51:4a:74:5c:36:af:63:48:d9:f1:
         59:ce:7b:11:92:f6:a8:17:12:dd:9f:a7:64:67:bb:a8:b4:48:
         35:98:04:93:80:d9:d7:d4:6a:94:66:1b:d5:4e:d2:4f:68:d6:
         4b:15:7a:f2:56:5b:62:e9:c7:a3:1c:11:c2:bf:f2:b9:56:5a:
         73:ea:c2:83:c7:c0:c7:8a:2d:ac:86:c0:93:27:be:98:10:c1:
         f2:d0:af:9e:04:5a:e9:4f:ae:e2:57:cc:5a:74:cf:3c:bb:6f:
         33:f1:e4:9d:c7:32:69:b2:f1:a3:cf:e0:14:7a:22:43:03:e7:
         ce:e0:ac:b3:28:98:55:44:68:03:c5:09:76:7b:75:fa:96:aa:
         f6:eb:7d:c3:43:eb:21:fd:5c:ef:3d:83:54:f0:a7:11:74:24:
         e7:ca:32:13:8d:b8:85:c3:fe:1b:81:b9:c2:dc:d1:9f:24:4f:
         b8:0a:e2:31:40:6b:bb:b9:9e:86:7b:1b:ad:18:cc:88:f6:7b:
         1b:94:ff:1d:49:a8:f3:ff:09:3d:a3:ff:16:aa:31:af:66:93:
         7a:ff:12:68:d5:0a:83:6a:69:09:55:75:67:7c:bb:36:b1:6c:
         07:dd:16:2c:40:5a:ef:79:27:fc:df:e1:f3:22:b9:5d:ea:b6:
         24:7b:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org