Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
File:                     7FC17C58A93711EEAD42EF0AC4F9AE02.roa (raw, json)
Hash identifier:          u8ukqZNe9PLxKJ7FR9jSUyywiMBSCZvKYXnr9ECDY4c=
Subject key identifier:   38:6C:29:96:B9:F5:29:EC:D5:59:9B:DC:E4:76:63:6A:43:4A:C2:A4
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       2C
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
Signing time:             Tue 05 Mar 2024 07:49:27 +0000
ROA not before:           Tue 05 Mar 2024 07:49:27 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45820
IP address blocks:        61.16.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 04:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Mar  5 07:49:27 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e6ce87-d682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:78:b8:62:70:d1:f3:4b:c7:46:d7:9c:9c:
                    02:dd:8d:e5:e8:e2:e2:38:42:ae:68:9a:96:58:b0:
                    bc:6d:b6:59:a8:5a:e8:f1:b0:d6:f1:dc:8e:66:d5:
                    07:a9:9b:df:8c:eb:42:4c:f1:d2:f5:8f:60:0d:b2:
                    a0:6c:6a:7c:e4:73:70:11:43:43:af:38:83:63:6d:
                    2b:e3:26:66:ea:e9:99:6a:0d:08:a1:01:0f:a3:bf:
                    95:60:0a:03:f1:4d:64:94:63:1a:69:23:39:65:09:
                    e6:fe:39:c3:22:d2:ae:dc:44:69:37:e4:dd:f6:48:
                    d1:8e:99:d3:c0:f5:16:d1:00:27:2b:97:b8:2b:98:
                    fe:19:50:73:a9:c3:27:8e:c7:5a:2c:c7:f6:1e:c9:
                    1f:3c:9f:c4:e6:72:eb:2f:67:7d:a8:4f:4f:a0:12:
                    2f:0b:3c:6e:38:b2:0e:5e:0e:88:51:15:e6:7c:a8:
                    22:96:5b:90:94:fb:7c:fa:47:67:37:62:07:45:fd:
                    07:1c:b4:47:d8:7a:f3:ca:f8:f9:40:ab:6c:fa:5a:
                    ef:2e:6c:cf:fe:87:82:f8:5e:71:7e:a9:36:4b:e8:
                    72:4b:b7:3e:fe:53:be:1d:e7:fb:43:5c:43:73:00:
                    1d:00:13:b0:9b:ef:f8:73:a1:e9:db:6b:b2:53:6e:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:29:96:B9:F5:29:EC:D5:59:9B:DC:E4:76:63:6A:43:4A:C2:A4
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/7FC17C58A93711EEAD42EF0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.16.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:3b:c3:2b:a6:49:11:6a:63:78:58:a6:f5:71:c9:98:88:
         bd:f6:24:99:c9:b9:6b:69:b8:fc:13:10:df:04:3c:64:bd:c0:
         f6:44:ab:ae:0e:20:0a:e1:10:4d:0e:1d:a0:99:51:97:80:2e:
         d0:fa:b0:40:f1:73:c0:20:51:19:98:6d:53:25:c9:20:ef:6d:
         a0:6d:b2:06:7b:d6:de:b4:21:77:13:55:ef:a2:e1:99:1e:43:
         47:5e:fb:80:f1:42:4d:05:9d:64:d2:4f:a1:cb:95:69:db:ec:
         93:8c:da:49:42:ca:6e:80:e4:03:1b:e4:57:19:4c:f9:c8:4d:
         77:40:a0:04:2c:56:3b:86:83:2e:52:82:4f:44:bf:6c:d0:fa:
         d1:07:4b:79:5a:73:ee:17:9e:1d:8b:84:6b:6f:74:cb:63:4e:
         21:2b:b5:72:d8:6b:35:cd:53:1a:c8:fd:3f:d9:0f:44:9a:fc:
         55:2c:23:04:ff:76:b0:99:ee:a8:39:81:12:83:6b:55:76:d9:
         a9:7d:a9:9b:77:f3:97:a9:19:98:6a:4b:80:52:27:56:31:a8:
         1d:70:15:b2:68:93:77:93:88:c7:62:94:e1:0e:be:d4:df:0f:
         39:0a:b7:55:b5:0a:db:1e:b1:9a:a8:56:ac:e1:e0:51:39:47:
         fd:55:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:15 2024 by rpki-client on console-ams.rpki-client.org