Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
File:                     C2E32E34466B11EE988B243DC4F9AE02.roa (raw, json)
Hash identifier:          ATnpQbMAdtf7EHZF16qCy3h60N8FuS/9+ZIqFWtImrM=
Subject key identifier:   6F:C4:34:43:E9:3F:42:35:14:EA:28:EA:8F:47:86:9F:32:BD:B3:D1
Certificate issuer:       /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial:       096D
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
Signing time:             Wed 14 Feb 2024 20:58:45 +0000
ROA not before:           Wed 14 Feb 2024 20:58:45 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149419
IP address blocks:        123.108.92.0/24 maxlen: 24
                          123.108.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
                          rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413 (0x96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
        Validity
            Not Before: Feb 14 20:58:45 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65cd2984-399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:bc:5a:25:7c:ea:cf:2e:ed:87:18:34:c7:
                    cd:6e:df:c9:4d:75:68:40:2d:ba:60:2d:1c:32:14:
                    fc:9d:11:19:d3:00:dc:67:9d:21:7b:e3:01:4f:0c:
                    88:d8:d1:97:06:fc:14:95:7a:ae:2b:6f:62:1f:d0:
                    ce:ba:c9:08:90:21:9c:43:11:de:68:77:e7:99:25:
                    a2:85:4e:c5:09:5f:d5:4c:8f:b2:e0:09:e9:67:d6:
                    ac:87:d5:1c:be:98:98:f7:3f:b5:bb:1d:45:6b:e2:
                    1e:03:8e:a5:0f:e8:f6:5c:54:99:22:ac:99:47:6e:
                    93:b1:17:ce:08:ee:24:d4:5c:cf:2c:e8:e9:df:8f:
                    2f:79:a8:5b:93:5b:3f:d9:7d:6d:74:34:7a:e4:82:
                    4a:96:2a:27:fd:92:77:45:f8:5a:28:e5:4a:54:41:
                    10:cb:9f:f1:3d:b1:ee:0b:99:a2:98:a0:6e:14:b2:
                    fe:84:9d:d4:99:fa:55:7b:2e:b4:74:fa:64:df:40:
                    c6:d3:da:54:5f:92:60:41:32:c5:bd:57:71:33:1b:
                    d8:62:61:60:5e:98:12:64:42:35:ff:2a:bc:bf:39:
                    4d:ad:ca:f9:44:04:1f:1d:f4:13:8e:40:0e:a3:21:
                    4a:d1:a1:40:09:ee:02:44:49:93:a9:60:6d:94:73:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C4:34:43:E9:3F:42:35:14:EA:28:EA:8F:47:86:9F:32:BD:B3:D1
            X509v3 Authority Key Identifier:
                keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/C2E32E34466B11EE988B243DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:72:cc:a8:53:7a:76:b9:5d:6b:27:ac:27:98:95:85:d8:a0:
         81:a0:98:7d:1b:43:3c:06:e3:eb:3f:fc:52:93:28:5f:9c:f7:
         19:fc:f8:6a:36:54:cd:63:3b:71:66:18:2d:b6:83:81:f5:f5:
         ae:4c:3c:cc:c5:5f:c0:89:69:8e:64:6f:97:aa:d2:50:17:0f:
         fa:b4:d1:59:9d:94:d7:3d:80:74:c1:65:8f:0f:5d:c2:4b:f9:
         cb:e9:65:29:ae:a2:c9:75:ac:19:80:6f:73:90:92:47:b9:04:
         92:91:85:76:c8:77:ff:32:92:31:d3:e6:8e:5c:04:ad:a6:33:
         ed:6f:b6:47:12:c9:79:75:04:eb:e2:31:38:21:8a:2a:cb:69:
         37:46:f0:27:b6:9e:22:35:6e:b7:eb:6d:aa:78:b9:4b:08:4f:
         7d:55:7b:99:67:d7:1e:06:a8:f4:42:f2:84:c5:31:6a:8d:c3:
         73:f4:b7:7a:78:57:22:63:ab:b0:5d:d8:c1:cc:12:d1:79:cb:
         7b:77:2d:6f:00:48:dc:eb:f6:00:42:68:10:26:b3:cb:03:fd:
         19:3c:65:59:51:f6:28:35:c6:e9:92:8d:8a:65:f5:3f:b6:cf:
         bf:68:00:4a:d7:f0:35:ef:08:6e:be:59:97:62:21:4a:7c:47:
         02:cf:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:23 2024 by rpki-client on console-ams.rpki-client.org