Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa
File:                     0A9DA996655311EF8D61E41CC4F9AE02.roa (raw, json)
Hash identifier:          LJgcF5ukT6mBdzEM26be8zREGTvnZs0KmOcJarcZEy0=
Subject key identifier:   3C:1F:58:E2:17:C6:41:F2:AA:19:0B:9C:ED:5E:F9:A7:37:0A:09:1B
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       01FD
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa
Signing time:             Wed 28 Aug 2024 15:34:41 +0000
ROA not before:           Wed 28 Aug 2024 15:34:41 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135341
IP address blocks:        45.117.62.0/23 maxlen: 23
                          45.117.62.0/24 maxlen: 24
                          45.117.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Aug 28 15:34:41 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66cf4390-b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:50:8b:eb:f0:8e:47:3a:19:a2:b2:7d:77:
                    53:7e:34:47:3e:e3:ea:b2:e6:79:25:f8:85:79:c8:
                    e3:5b:52:de:97:ca:ac:6e:89:48:ce:96:56:4a:99:
                    7d:4b:68:55:a7:79:04:72:e9:49:a1:13:c6:17:c5:
                    5b:f7:dd:11:52:26:01:ce:4a:07:4a:9c:be:56:d2:
                    af:12:04:ed:5c:d0:c1:3c:01:96:e0:47:0e:23:d1:
                    e5:9f:43:ac:3b:27:5c:f0:c7:e3:7f:6d:86:97:b6:
                    13:e1:52:b5:01:8c:65:68:f2:50:d9:f1:ab:86:96:
                    70:41:79:93:3e:ab:a6:5b:f6:ac:cc:7b:e4:e9:6c:
                    75:4d:a4:1e:75:39:62:fa:55:fd:6c:7b:23:f3:49:
                    bb:d3:de:a1:cf:d5:67:fe:f9:5b:20:8e:b2:a3:b0:
                    00:3d:57:bf:03:4e:46:ae:76:49:92:ed:cb:a0:ff:
                    6d:61:86:37:96:84:7a:d3:eb:7c:45:43:1b:d7:5f:
                    29:5c:f4:e8:bd:99:eb:38:fd:5a:eb:91:ab:9b:4a:
                    41:65:e4:b4:22:bc:3d:03:07:36:8b:53:88:c5:96:
                    d5:ae:23:fa:c2:b7:a2:fc:53:97:6e:76:68:a6:d5:
                    45:a8:9c:5f:5b:55:8e:f0:1e:c8:83:8d:30:cc:a8:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:58:E2:17:C6:41:F2:AA:19:0B:9C:ED:5E:F9:A7:37:0A:09:1B
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/0A9DA996655311EF8D61E41CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:19:67:87:1d:7d:77:b2:59:d4:05:6f:5a:7a:20:4a:d6:31:
         0d:1d:ed:90:13:4a:62:a7:bd:e0:96:6d:55:b3:c5:08:c3:66:
         fe:f9:71:8a:02:99:00:cc:ff:7b:b6:c5:a5:b2:1a:92:6b:be:
         b6:e7:27:98:b9:89:72:30:1f:35:cc:ca:84:24:ac:54:5c:94:
         8b:c7:75:25:c1:06:aa:f4:9d:a6:cf:6d:6f:d3:b8:57:48:24:
         a4:77:04:be:d7:c5:7a:f4:51:f7:94:ae:0d:6d:ac:fc:f5:9a:
         1b:6e:81:7f:09:52:5a:ff:8e:ac:f7:de:be:98:f4:aa:00:81:
         fb:79:ab:34:cc:f7:07:69:f0:c7:d9:5d:b3:9c:10:21:7e:d2:
         c0:30:c4:70:4d:6d:f0:a2:6a:42:8d:64:bf:e3:d0:8e:39:65:
         b1:9c:96:10:eb:10:e6:16:0e:8f:d1:f7:8b:f7:34:e4:32:9e:
         2e:84:7e:64:b3:ee:04:f5:68:0b:6a:94:d8:f9:59:89:26:ca:
         e2:88:0e:16:17:43:2a:e7:41:5c:31:70:49:d0:c3:e1:bb:23:
         2c:d1:cf:52:f2:4d:dd:5f:e7:b0:6f:31:88:3e:d0:a0:73:f4:
         22:f6:d6:d4:8f:2e:aa:2c:a8:17:d4:c7:a8:00:6f:40:52:3a:
         4a:20:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org