Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa
File:                     D359E238716B11ED9F349A49C4F9AE02.roa (raw, json)
Hash identifier:          cCtIEM0HBTy24WARxsJCpIZbbxiDWPMzfNXWUKKoGow=
Subject key identifier:   DA:F1:F6:39:86:AB:E3:D4:3D:5D:A6:0C:82:7D:7C:59:70:FF:0E:2C
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       040F
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 01:53:56 +0000
ROA not before:           Sat 09 Dec 2023 01:53:56 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     64520
IP address blocks:        118.185.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 02:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Dec  9 01:53:56 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6573c8b3-254b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:1b:59:1f:78:eb:a9:03:cd:aa:f8:5b:95:
                    66:f0:6e:bb:a6:f4:1b:4a:2d:dc:a8:31:c8:35:1f:
                    87:35:6c:5b:76:a7:61:7f:40:10:b9:aa:47:4b:90:
                    47:50:60:ce:f4:b7:22:0f:e9:89:0f:a1:a8:80:04:
                    e5:25:d5:b6:89:93:25:c7:11:3e:cc:9e:31:9c:34:
                    ad:ca:59:10:34:49:db:0f:aa:8b:ed:43:c2:3e:7c:
                    20:25:db:55:b4:f2:8f:51:d8:f7:25:94:66:8d:f3:
                    82:e0:dc:ec:db:d6:88:51:e8:0e:3c:05:03:79:d3:
                    21:76:66:1b:b3:65:53:46:7b:da:84:60:2c:02:6b:
                    66:13:a8:b1:5d:f8:eb:81:b9:ae:76:e5:91:41:90:
                    8b:99:0a:00:2e:f4:d9:6c:63:f3:ce:c1:f8:11:08:
                    44:bd:7e:31:e6:7d:ae:1f:6c:41:e1:0c:b7:0b:22:
                    49:2b:03:10:1b:ba:58:12:9b:22:89:29:29:4a:e8:
                    92:d9:71:89:b8:0f:f6:a0:b9:28:7f:4d:5e:60:56:
                    e3:63:10:9c:c3:0c:15:13:34:d4:30:63:29:07:79:
                    46:ba:dd:2d:34:79:83:59:0f:22:79:fb:45:6b:4f:
                    d7:e6:a2:dd:d4:55:e9:7e:7e:24:7f:d0:05:74:89:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:F6:39:86:AB:E3:D4:3D:5D:A6:0C:82:7D:7C:59:70:FF:0E:2C
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.185.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:3d:bc:fb:51:89:cd:81:0c:e4:74:ea:38:fb:0d:c6:c6:
         73:56:d4:62:df:b4:80:f7:87:9d:67:80:1d:ba:5e:66:92:d5:
         e6:f1:8a:aa:d5:63:54:69:31:df:7f:e3:07:b8:db:1f:06:b6:
         08:40:75:40:d3:dd:71:f7:ad:c0:13:41:3a:e7:8d:67:3a:16:
         6e:e3:36:18:7a:a5:30:69:17:61:11:ec:35:70:9a:90:be:e7:
         d8:c5:e4:9d:af:12:5b:18:87:7b:6a:dd:ae:0b:ce:bf:f0:32:
         de:f9:9d:b9:36:b0:8f:58:f9:63:ea:a5:e4:80:ca:f5:66:73:
         d6:15:63:18:49:7c:df:7f:ec:0d:ec:71:41:96:e4:c3:de:7b:
         44:01:2f:e1:56:60:5b:8d:80:ec:7f:f5:69:c2:2c:c8:30:a4:
         61:6d:f2:31:c0:d3:2c:c3:38:dd:b2:e2:61:4a:5f:1e:4f:86:
         7e:dc:78:cf:bd:c6:ce:17:c1:09:26:72:ad:be:2b:12:26:a0:
         46:50:3b:d3:b1:11:91:4a:c1:94:c1:be:b5:5d:4c:c5:d6:34:
         c1:7e:cc:d8:c7:ef:50:ad:0c:45:d5:cd:b2:91:51:2a:93:9b:
         3b:df:ab:6d:6a:a2:ec:65:0b:ed:c0:c7:3b:5b:8c:73:a8:60:
         0f:40:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:27:10 2024 by rpki-client on console-ams.rpki-client.org