Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
File:                     7EE26732EB2411EEBDA7715FC4F9AE02.roa (raw, json)
Hash identifier:          DjCqZN1tBdP+HULyLlJhGVCEJSR0OTVFw/qqfHdzKdU=
Subject key identifier:   24:EE:FA:53:24:4A:86:BB:A5:22:6B:E5:F8:38:5F:07:F6:D5:EC:96
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       2F
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
Signing time:             Tue 26 Mar 2024 03:54:07 +0000
ROA not before:           Tue 26 Mar 2024 03:54:07 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140344
IP address blocks:        157.10.54.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Mar 26 03:54:07 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=660246df-614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0d:0e:84:47:e5:bc:09:2f:b1:f7:05:04:a2:
                    31:93:eb:f1:ef:af:1d:4c:69:9e:e2:a6:2a:83:c9:
                    6c:ab:af:bb:b1:8e:34:29:62:15:44:3a:e1:97:69:
                    08:56:c1:21:b0:77:d3:d5:0c:b4:3c:6c:1b:2f:8b:
                    cb:96:6c:63:7b:6e:f4:19:27:0b:a4:1b:bf:a2:29:
                    e6:ab:e2:5a:dc:97:bf:36:a1:aa:7f:55:50:09:41:
                    ed:0f:6f:a1:cb:52:3c:fc:0b:7b:b2:15:b7:3a:37:
                    67:f9:fb:d4:71:7b:00:af:bb:32:2c:91:8b:63:38:
                    7c:cd:c5:67:96:35:3b:5b:f7:33:a2:84:5a:9c:cb:
                    7c:83:cc:2c:34:81:7f:85:65:40:e6:95:1f:eb:9e:
                    60:b3:4d:56:1d:31:b4:c4:85:dd:57:12:e7:c3:b3:
                    53:3d:a6:2e:5c:7b:f1:94:07:73:29:0e:89:67:3e:
                    1e:70:46:f8:7c:c8:c0:fa:b4:f4:3a:19:1a:4e:4b:
                    bf:ca:e2:4e:a3:6d:5c:2f:f2:a9:6b:da:ad:04:7d:
                    9f:de:81:f3:fb:12:08:1b:e5:f4:56:46:aa:de:b7:
                    54:94:3f:2c:27:99:ea:85:a3:d5:bd:8e:66:9a:9e:
                    86:48:2c:9d:a8:b3:6e:43:f6:25:9e:39:10:71:21:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EE:FA:53:24:4A:86:BB:A5:22:6B:E5:F8:38:5F:07:F6:D5:EC:96
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/7EE26732EB2411EEBDA7715FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:80:56:e3:4e:38:95:fa:d5:22:8d:a5:e0:77:a3:cd:dc:99:
         ec:59:4d:31:1b:6a:32:a1:d1:10:d6:f4:4e:2e:63:22:33:b0:
         83:1c:0f:4a:de:fb:80:1d:1b:90:4d:19:d4:23:93:b1:98:4e:
         1e:96:51:64:54:f7:47:3d:60:57:2a:0e:fa:66:f9:9c:53:c5:
         9a:5a:ae:aa:6e:e9:08:f7:11:5d:86:71:6f:dc:d1:e1:74:76:
         f4:c1:1b:a9:18:c7:57:56:01:33:91:3b:a1:06:f9:c8:3c:87:
         08:a6:0c:63:34:dc:5a:f2:70:ae:e3:fc:80:25:44:f2:5f:b4:
         f2:a4:91:5f:13:7a:a3:2d:c0:8d:6a:f4:6b:e0:96:cd:79:8a:
         d8:cb:5d:18:15:1c:f4:15:24:7c:7f:04:65:29:0b:d9:63:82:
         4a:47:09:55:e6:7b:a9:c7:98:b9:1d:bd:34:27:9a:2b:a6:52:
         f1:0f:ea:e0:ae:6c:d0:c6:b0:e6:ea:e0:80:51:e6:7a:8f:63:
         76:da:7f:63:10:48:14:37:25:6a:ce:9d:52:42:ee:43:e1:17:
         c6:a3:22:d2:55:81:c3:d7:98:05:cd:9c:fb:56:a8:01:6b:2f:
         db:3b:d1:99:19:55:db:c8:3b:74:d0:11:8c:c1:38:37:25:5d:
         06:58:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:20 2024 by rpki-client on console-ams.rpki-client.org