Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
File:                     FFFC26F0A51C11EC8394365BC4F9AE02.roa (raw, json)
Hash identifier:          lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=
Subject key identifier:   81:2A:36:73:6F:4B:BD:F1:FD:16:3B:61:04:3A:E9:84:25:BF:EE:40
Certificate issuer:       /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
Certificate serial:       030E
Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
Signing time:             Tue 01 Oct 2024 01:44:46 +0000
ROA not before:           Tue 01 Oct 2024 01:44:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     38182
IP address blocks:        45.126.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl
                          rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 00:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F
        Validity
            Not Before: Oct  1 01:44:46 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fb540d-ebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:a0:83:8c:ff:57:9f:00:b6:90:2c:62:ad:
                    3b:a9:80:33:81:4a:c3:87:60:8f:3f:ec:50:fd:57:
                    d8:45:10:63:d7:25:66:29:35:bd:57:2b:d8:b9:2e:
                    39:75:d7:31:45:51:c4:73:a2:e6:3e:4d:92:65:94:
                    ef:3b:5b:f4:30:3e:2e:6c:37:c7:04:f9:45:b5:24:
                    77:10:be:ad:2f:cb:a1:8c:37:2e:39:af:af:91:7c:
                    4c:2b:a4:1a:28:fc:67:15:3e:f7:bb:05:85:ab:96:
                    9d:dd:22:21:28:32:53:7d:50:59:f4:04:a0:7a:3d:
                    ae:b0:a0:93:68:4c:8e:51:d5:6b:9c:a2:71:49:1e:
                    79:8d:fb:f4:21:4d:3d:19:2e:c6:05:25:4a:2c:2e:
                    fa:b9:92:5f:f7:04:23:50:e0:9e:7c:c6:3c:c8:0f:
                    62:d1:4f:ae:23:b4:c3:91:ad:3e:a6:d2:70:0e:4e:
                    4a:9b:84:0c:45:2a:98:14:6a:8c:18:d7:49:c7:9b:
                    a0:b6:fc:d7:b3:02:6b:34:e9:f0:c2:61:83:42:8b:
                    3c:d5:66:ad:0b:b8:50:23:93:e3:59:05:db:93:06:
                    3c:72:4c:9a:dd:5d:29:94:ef:10:5c:2f:ef:85:bb:
                    58:4a:2f:58:07:7d:e9:e5:4e:12:f3:49:a8:04:49:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2A:36:73:6F:4B:BD:F1:FD:16:3B:61:04:3A:E9:84:25:BF:EE:40
            X509v3 Authority Key Identifier:
                keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:65:f7:8e:22:49:57:a5:b6:0a:99:93:42:83:e6:a4:da:
         0a:02:82:85:1a:89:c0:fe:f9:53:8b:51:8e:f1:b8:6a:57:3e:
         2f:ac:e2:66:51:4f:94:8b:0d:20:62:51:b2:5c:d4:26:22:46:
         f3:cf:d3:fb:ba:cd:3a:db:da:e7:03:a6:60:d0:f8:65:ed:e1:
         1e:7a:6d:bb:7b:d5:30:7c:e3:d9:0b:32:d2:a2:93:08:cc:48:
         29:5e:c6:c2:19:d6:fe:a9:f6:51:d8:d3:e6:f4:4e:76:a4:d5:
         dd:7b:6c:43:96:0a:91:74:9d:41:90:18:bc:40:b9:19:0f:41:
         90:18:13:9b:f6:01:f5:e1:b8:bc:de:46:dc:e3:33:1c:07:3a:
         14:e6:27:88:db:54:0a:52:7b:4e:be:05:bd:93:f6:ee:7e:6b:
         5b:88:c5:c8:02:13:56:8d:12:25:5e:e0:99:f5:dc:a9:b1:e9:
         fe:6c:6a:a3:d3:a7:c1:d6:15:a7:4f:76:bf:65:00:82:59:81:
         2b:42:e0:ec:f0:6d:da:b7:8f:b2:40:9a:b3:cd:8d:f3:4e:10:
         f3:e7:5a:25:07:e7:cd:bd:d7:59:88:7a:2b:df:22:2b:0a:49:
         29:a5:2d:08:ac:11:4c:99:e4:08:94:73:27:39:fc:81:a0:4b:
         74:56:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org