Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/67060F128B9F11EA97BB8046C4F9AE02.roa
File:                     67060F128B9F11EA97BB8046C4F9AE02.roa (raw, json)
Hash identifier:          BT3CHYNvTTOU0gvsA7uRhKP5bTXucEk4bef2nc7ZJw4=
Subject key identifier:   AA:30:6E:4A:B0:C1:E9:02:BA:1D:45:DC:6E:F8:82:D8:FB:5A:01:B9
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       179F
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/67060F128B9F11EA97BB8046C4F9AE02.roa
Signing time:             Tue 20 Feb 2024 17:55:37 +0000
ROA not before:           Tue 20 Feb 2024 17:55:37 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45615
IP address blocks:        175.45.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6047 (0x179f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:55:37 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d4e799-745b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:bc:47:d1:26:5f:47:7e:e8:4b:3b:33:ac:
                    af:72:bf:18:94:f6:c7:0b:00:36:02:50:2f:8e:da:
                    24:70:4c:59:df:1c:ce:65:07:49:25:a8:a5:51:15:
                    23:ab:66:2a:7c:60:6e:2b:6c:7b:b0:b2:aa:b6:54:
                    69:cf:64:da:74:c0:20:0e:48:eb:41:df:d2:ad:cd:
                    c4:c8:e1:17:f0:e1:b3:6e:0c:e0:b7:02:c9:da:c7:
                    2b:59:f2:4d:71:3e:ad:d2:d4:cc:2a:90:09:1f:f7:
                    c4:cf:d8:13:5b:d2:b5:0b:4a:66:9c:9a:e2:e7:c0:
                    15:f5:5e:dd:01:58:b4:98:b5:91:f1:2e:66:a9:59:
                    ea:53:cf:82:c9:44:6c:d9:52:36:68:5d:ea:27:55:
                    fc:fe:14:17:81:b9:b2:e9:f3:2d:59:b9:d0:4d:08:
                    d0:9d:33:e6:8e:c5:a5:a2:f5:82:c4:c4:ce:b9:ad:
                    ee:f4:57:c3:b8:36:58:b2:eb:ae:29:b1:d5:a8:04:
                    9e:53:9f:58:3f:c8:d8:dd:c6:20:f1:32:ae:98:57:
                    fb:0d:ae:1e:01:5f:1c:2e:ed:c9:c4:ec:98:0d:be:
                    fe:07:9a:ab:9a:af:ed:e7:20:dc:d9:ec:f7:0d:c4:
                    3a:3a:6d:03:f5:4d:0b:d7:48:ee:70:c0:0c:3b:91:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:6E:4A:B0:C1:E9:02:BA:1D:45:DC:6E:F8:82:D8:FB:5A:01:B9
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/67060F128B9F11EA97BB8046C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:59:02:32:6c:8b:62:49:fa:55:06:7e:6d:38:d0:b3:13:c5:
         83:a3:12:7a:94:59:73:d2:32:a9:82:7a:2f:9f:c1:5b:af:ab:
         f7:84:ab:27:61:b0:ae:a0:88:65:9f:06:43:5b:6c:64:5b:9c:
         46:8e:6b:88:8e:ec:7d:16:2f:21:e6:87:b4:ea:e8:31:6c:04:
         32:ea:30:53:d6:87:2d:68:6f:67:66:7f:98:03:f2:45:67:76:
         51:67:07:ab:b1:01:1c:3f:bb:9f:6b:3d:b2:ae:24:2e:7d:e1:
         96:20:6d:61:9c:e4:06:12:b5:d2:5d:07:a3:1b:79:55:6d:4d:
         a3:5a:62:5a:36:b9:91:7c:c8:ae:df:4a:ea:39:ad:eb:ec:2b:
         4a:8d:27:bb:d3:ca:3b:52:3b:c7:d4:5e:3c:9f:d9:1f:12:7f:
         57:10:d6:66:7e:1d:dc:35:d9:cd:68:f5:e0:a6:6a:4f:dc:e8:
         2c:d9:3d:bd:c6:2f:f3:04:2c:9d:1f:0e:66:04:1f:1c:d3:f2:
         00:c0:14:79:54:58:24:af:a2:6e:2a:55:e3:16:89:b5:ef:22:
         99:61:29:21:34:40:12:fd:0f:0f:54:76:73:d9:e8:cb:bc:4f:
         f0:cb:3c:f5:62:03:8d:e9:b3:6b:ae:f1:ac:f6:9a:d5:79:7a:
         46:7c:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org