Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
File:                     264A19E27A3D11E99D212E62C4F9AE02.roa (raw, json)
Hash identifier:          7bZz6cCgHTC9658y3NzIZERen9rMtVW0xNd6+sDCh7A=
Subject key identifier:   70:46:00:19:EE:90:AB:4F:DD:50:36:2A:DB:A3:7F:21:8C:01:91:90
Certificate issuer:       /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial:       3431
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 16:21:17 +0000
ROA not before:           Sun 02 Jun 2024 16:21:17 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     132313
IP address blocks:        43.245.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
                          rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13361 (0x3431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
        Validity
            Not Before: Jun  2 16:21:17 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=665c9bfd-f479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:5a:f2:d1:78:98:6d:e8:be:68:c2:40:86:
                    8f:45:db:6a:00:e3:f2:1f:db:5b:8c:5a:76:e9:a5:
                    30:d8:13:41:ea:34:14:aa:9e:c8:9b:03:e5:56:ef:
                    00:df:c1:ea:30:15:83:ff:cc:7a:ee:24:0e:ea:f3:
                    f9:83:e3:be:e3:ab:70:3b:e6:26:30:b6:61:53:d5:
                    62:19:0b:4f:91:e9:d7:f8:4c:42:22:6f:c1:b1:7d:
                    19:b1:db:90:4c:6a:e2:d1:4b:d3:bd:6a:1f:1c:00:
                    86:49:e1:81:14:bd:38:ee:b4:5e:3f:61:a6:ea:84:
                    19:56:37:9a:46:2e:f1:ed:51:8b:aa:96:c9:96:4f:
                    1e:a6:dc:12:75:01:73:c1:ad:46:d0:e6:ca:fd:90:
                    5d:ea:06:99:23:1a:f7:46:51:df:a8:7b:ec:62:8e:
                    cf:66:46:95:9d:d0:fd:2b:a0:ee:28:33:c9:0f:a6:
                    87:14:6b:86:00:84:29:f8:72:cc:28:71:81:a1:af:
                    2e:6c:4d:2b:d1:15:a9:72:45:11:06:30:ef:7a:f5:
                    81:0c:a0:2b:58:25:db:e4:a1:83:57:4a:87:37:65:
                    d7:2e:b2:fc:2e:fe:26:7d:62:bd:a9:39:39:c1:b5:
                    75:4f:34:3a:27:9c:6b:60:70:98:33:0b:5b:bd:48:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:00:19:EE:90:AB:4F:DD:50:36:2A:DB:A3:7F:21:8C:01:91:90
            X509v3 Authority Key Identifier:
                keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/264A19E27A3D11E99D212E62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:30:fe:55:05:7e:6e:7d:c6:a5:0f:0e:6f:aa:16:f2:53:90:
         27:24:46:8d:e5:fd:f6:1a:b5:cf:4e:f8:b2:14:db:db:72:34:
         c1:fa:4c:b8:b5:74:a2:19:7f:17:d5:50:d8:78:5f:47:14:15:
         2c:ca:93:69:3c:75:2b:c6:1e:dc:ee:8a:d7:e3:bd:07:95:ac:
         14:d8:f2:fc:14:95:68:81:98:f4:c9:94:bf:a6:b9:36:83:ac:
         36:6d:39:3c:d5:9d:61:4b:62:8f:68:ad:5e:77:a6:92:25:ea:
         05:49:6e:59:16:f6:b3:f2:fe:52:98:00:dc:f6:35:0c:6e:57:
         ee:c1:73:e7:3f:a9:d4:73:ec:c9:33:bf:f9:15:17:f5:4d:ef:
         c7:aa:b1:4a:56:2c:8b:e5:9f:55:23:51:81:95:94:39:39:e8:
         6d:80:52:38:cf:6b:e5:3e:91:f6:9f:d1:d6:02:32:c0:47:d0:
         42:4f:9b:c5:fd:97:71:2f:25:1a:ef:4d:73:ef:48:0c:c6:a7:
         e5:27:e6:8e:41:54:96:50:0e:ea:9f:ba:8a:f3:0e:f1:a9:00:
         aa:92:dc:59:be:05:c7:72:83:cc:33:5a:45:5e:d2:fa:67:5f:
         4c:e7:c1:7e:f0:bb:db:93:a4:3c:77:f0:9e:0d:5c:25:e3:ea:
         6f:8f:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:05 2024 by rpki-client on console-ams.rpki-client.org