Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
File:                     B0DF9618599B11ED99A5B776C4F9AE02.roa (raw, json)
Hash identifier:          pTEiu18qDzSVb2/rNCXmrUIkXiajyei95hW43UZ5kCc=
Subject key identifier:   A1:6F:35:CB:17:0F:A7:73:AE:4E:90:7A:00:9D:44:82:AC:58:7F:50
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       0144
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 04:55:29 +0000
ROA not before:           Thu 01 Feb 2024 04:55:29 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     134428
IP address blocks:        115.42.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 03:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Feb  1 04:55:29 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bb2441-d77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:a2:42:e7:0d:f8:d6:2f:3f:58:21:91:ad:
                    69:c8:95:56:27:de:de:64:9d:2e:7e:14:c6:7c:ba:
                    76:9f:88:3f:6f:98:43:df:21:5b:49:2f:9f:bc:33:
                    bb:e5:3a:1c:05:66:c4:38:95:19:93:dc:89:0a:9f:
                    7c:57:e5:3f:4e:85:88:19:13:01:80:c9:7c:25:fb:
                    9a:ba:6d:51:7f:5d:3b:7f:57:62:cc:1c:df:33:66:
                    a6:47:0b:34:83:04:7e:40:c7:dd:ee:9e:20:e9:22:
                    07:eb:0b:68:55:34:20:09:08:d0:b6:bb:86:38:e6:
                    18:13:34:02:38:cd:e0:41:30:54:3b:ce:00:3f:cc:
                    ef:6f:93:3d:51:26:1e:e7:5a:44:8b:ad:c8:35:5a:
                    cd:c2:58:e5:17:81:58:55:08:df:4f:1a:49:e1:7e:
                    52:ce:13:9a:62:f8:97:ed:af:2f:97:63:eb:20:ee:
                    3e:71:8e:5c:68:12:ce:79:5f:9d:3f:b8:09:fc:18:
                    0f:11:a8:e8:dd:e2:1b:68:9d:0b:21:45:d4:ec:26:
                    31:5d:46:be:4a:20:32:51:a6:31:55:53:2b:6e:56:
                    3a:c6:0d:cd:14:ab:bf:5e:b6:2e:b2:75:25:59:bd:
                    a5:fd:d2:1e:b0:c4:11:bf:1b:54:40:04:f4:e8:4a:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6F:35:CB:17:0F:A7:73:AE:4E:90:7A:00:9D:44:82:AC:58:7F:50
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/B0DF9618599B11ED99A5B776C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:81:34:2b:3d:d6:cb:bf:03:62:a7:97:39:b0:25:d6:f2:21:
         86:65:82:f9:d3:7a:73:41:3c:8c:96:4b:db:ca:91:d9:f0:1a:
         2d:dc:f4:40:0f:08:05:44:6c:4d:29:71:c4:3c:5f:b2:28:c1:
         66:2c:50:0f:6f:82:e2:bd:3d:bf:a6:40:85:ad:ee:17:b3:0e:
         b9:06:fc:74:58:46:0c:75:bf:0c:26:2c:66:65:44:24:2a:f8:
         34:60:6d:fd:98:6d:e6:a6:a9:59:92:fd:6c:23:e0:44:f5:ea:
         03:a2:ab:21:f5:77:f2:68:e7:d7:44:67:85:ac:71:16:3a:7e:
         da:ca:73:d3:b8:f9:86:3e:de:35:ea:25:bf:e5:9a:5d:aa:ce:
         43:c5:4d:b5:10:8c:c8:a8:92:c9:79:19:76:13:00:88:f4:ea:
         1d:92:c8:63:89:aa:bf:b6:59:78:6c:41:14:0f:71:f3:ca:9e:
         6d:df:55:d4:1e:e4:4e:f9:91:83:6b:ea:ff:55:8a:e5:1d:1e:
         99:21:34:53:fe:11:55:6e:d9:4b:8f:c5:51:ad:34:1c:e3:65:
         43:8c:d6:75:49:da:ce:4e:be:b3:53:05:2e:0f:30:f8:7c:6c:
         67:e8:14:1f:8d:ec:62:26:98:c9:07:15:46:e8:2e:2b:82:ef:
         be:02:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:21:02 2024 by rpki-client on console-ams.rpki-client.org