Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa
File:                     B87A46B4FEA211EDB9013076C4F9AE02.roa (raw, json)
Hash identifier:          r8r/ffLXsiK1EC74sEY12yC3C4pjczV8wBvO+XEJa4Y=
Subject key identifier:   8B:54:C5:77:11:53:33:63:13:FA:96:E0:80:FA:78:82:0B:79:BE:BB
Certificate issuer:       /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial:       0492
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa
Signing time:             Wed 25 Oct 2023 00:32:49 +0000
ROA not before:           Wed 25 Oct 2023 00:32:49 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     134441
IP address blocks:        45.125.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
                          rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
        Validity
            Not Before: Oct 25 00:32:49 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65386231-2335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:33:da:64:27:57:8f:56:b5:58:04:e0:87:
                    80:e6:8b:21:81:fd:4f:02:42:20:54:10:04:20:08:
                    ac:4f:22:71:0d:3a:78:dc:c9:c4:10:b4:68:54:af:
                    fb:18:5c:09:8b:6a:f7:39:ab:3c:3d:d7:30:56:49:
                    69:f8:ba:aa:7e:db:e0:59:7f:20:4e:2e:41:2d:c4:
                    b1:71:5f:91:ce:c3:5c:5f:52:a4:65:12:d1:e4:f9:
                    ee:41:84:ce:50:88:cc:99:35:7c:68:dd:a7:9a:6d:
                    de:d5:4d:ed:f7:39:f6:a1:dd:9c:26:de:35:0e:46:
                    dd:83:ca:50:89:57:11:35:0e:39:aa:a5:40:83:c8:
                    03:4d:95:aa:e2:46:b3:be:26:98:82:f6:80:5e:a6:
                    10:dc:05:5c:e6:0d:b8:77:20:e0:2e:f8:fa:30:2a:
                    97:28:9f:d0:9c:be:45:6e:8d:fa:6b:bd:82:90:2c:
                    37:69:68:33:8a:c4:72:b5:8e:8b:2d:7a:ec:af:e2:
                    7a:40:37:8f:55:b9:c3:03:4f:f6:ff:b9:b4:e4:01:
                    a5:ac:d5:5e:0e:bf:61:1c:96:fd:55:46:29:00:1b:
                    44:f6:ba:83:ff:d4:0e:99:65:14:6e:90:12:c2:1e:
                    cb:b3:62:30:6a:61:58:fc:5d:ef:92:39:90:a9:ca:
                    a6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:C5:77:11:53:33:63:13:FA:96:E0:80:FA:78:82:0B:79:BE:BB
            X509v3 Authority Key Identifier:
                keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:e3:6a:cd:84:55:d5:b3:8b:6e:91:31:db:71:40:ca:f9:
         f6:62:aa:b6:68:87:2b:81:c7:19:69:99:c6:84:a6:66:fe:8a:
         9b:7b:3c:61:32:04:42:fb:fa:2d:0b:0c:ba:7b:6d:0c:f5:8e:
         7c:60:ce:42:54:93:96:eb:3c:3d:a3:ab:a9:b9:cd:50:f8:6f:
         2d:d8:28:2d:ad:4f:7a:0f:17:8e:96:53:16:6d:89:ba:36:b4:
         4e:33:09:a4:2d:88:76:7a:ba:35:1e:a9:94:42:da:4c:e7:02:
         d4:39:81:83:ff:49:26:49:65:5a:36:4e:d2:88:17:ef:a7:41:
         14:6e:f6:96:1e:90:46:7b:e3:03:df:2f:b5:4d:74:71:4a:bb:
         a8:5f:de:bc:d9:79:1f:06:17:31:dd:ec:cb:2e:01:fe:a1:83:
         9b:46:b1:84:f6:af:12:b7:ac:cc:9d:f7:f1:d0:be:fe:1b:f9:
         d3:1e:42:d7:d3:6b:bc:42:f8:3f:65:1f:89:ab:01:60:15:cc:
         67:8b:b9:74:48:7c:8a:a4:48:bb:85:a6:dc:21:66:6f:6d:91:
         6b:f3:13:c2:d0:69:56:da:e0:4a:87:61:e0:58:f6:ab:03:6a:
         80:fc:10:fc:ed:68:bc:4e:3c:65:55:ba:6f:ec:de:8d:b1:43:
         30:f2:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org