Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
File:                     C2A2E774EEC311EE8832C93AC4F9AE02.roa (raw, json)
Hash identifier:          s6P4CG/Z0X/yIq3+GVwhH8LKJhuD7YhzpQtQWWAe748=
Subject key identifier:   70:B2:FE:B1:D6:31:45:2F:D4:80:4C:30:0F:39:6E:6E:6E:E7:76:0C
Certificate issuer:       /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
Certificate serial:       02
Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
Signing time:             Sat 30 Mar 2024 18:31:45 +0000
ROA not before:           Sat 30 Mar 2024 18:31:45 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152131
IP address blocks:        210.79.145.0/24 maxlen: 24
                          2001:df3:36c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl
                          rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3
        Validity
            Not Before: Mar 30 18:31:45 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66085a90-32cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:f6:ae:f4:a6:94:dc:06:07:3d:8c:a9:4e:
                    a1:70:41:e5:fc:16:6b:01:79:44:bf:89:d3:98:1e:
                    da:08:97:6b:46:a8:84:4d:eb:bd:00:d0:09:21:36:
                    44:fd:0b:d2:0c:35:64:43:f2:3b:5e:28:81:a1:b9:
                    c7:ba:57:0c:f3:45:6e:65:27:af:1a:18:a8:f5:7a:
                    70:d8:8a:69:82:d7:34:87:ef:0d:b5:6e:b7:c7:70:
                    00:ec:91:6d:0d:38:e0:3f:15:39:66:63:97:4b:38:
                    99:7f:fe:83:d8:3f:11:29:82:7c:de:52:d0:a2:5e:
                    cc:51:a7:bd:52:6e:d4:00:ed:94:1d:f8:e5:88:be:
                    d2:3d:3d:62:6c:3c:d2:fc:46:32:a7:7b:d7:1d:73:
                    34:87:2b:19:95:0f:fe:e9:45:23:e0:35:98:ee:d5:
                    20:12:82:14:68:40:f8:33:e4:a7:e1:0c:7b:5b:62:
                    5a:f2:41:42:f4:f7:fb:71:74:8b:4c:cb:26:3e:19:
                    bb:60:e2:ed:0d:14:e8:c7:62:2b:ab:6f:00:22:06:
                    d9:7a:da:ac:63:2a:eb:eb:25:1d:c7:e0:03:82:18:
                    8e:14:67:ea:bf:13:ed:b5:8f:32:6f:1c:2d:60:0f:
                    21:22:91:c4:35:d9:26:65:a8:04:c6:6e:5c:a5:80:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B2:FE:B1:D6:31:45:2F:D4:80:4C:30:0F:39:6E:6E:6E:E7:76:0C
            X509v3 Authority Key Identifier:
                keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/C2A2E774EEC311EE8832C93AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.145.0/24
                IPv6:
                  2001:df3:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:c3:cd:43:4f:8a:4a:2f:b5:2d:9f:42:ba:79:a5:63:c8:
         de:8f:69:fa:2f:f1:1e:44:82:80:4f:2c:e0:cb:11:0c:f8:99:
         32:4e:d6:67:c8:12:54:1f:df:7d:49:28:36:cd:52:d3:04:58:
         a3:e5:54:4a:92:a6:98:dc:57:7d:a7:05:44:f7:d3:42:98:fa:
         3e:1a:34:1e:0c:fa:63:8c:ba:ff:6f:0c:93:b8:af:38:09:62:
         34:2f:99:ab:07:49:97:3a:00:77:84:0e:59:66:72:6e:8d:03:
         0d:ec:4e:25:74:3a:a3:f6:b5:5b:45:2a:c4:3d:4e:7c:ad:89:
         c7:9a:7a:39:5f:de:3b:26:45:08:16:18:18:47:e1:80:58:d5:
         3e:48:41:7e:8d:7a:c7:93:a9:77:99:f7:f1:27:ea:f1:ff:b2:
         24:fd:81:ec:51:4f:a1:b4:e8:bb:81:de:bb:8c:f3:de:39:f0:
         ea:ed:35:9c:b6:5d:b3:44:cd:18:f1:22:bc:32:cc:94:c5:97:
         95:7e:c5:1f:cf:c6:98:61:3d:fa:48:b0:b8:ef:1e:cd:c7:1d:
         8c:b6:7c:4d:dc:ae:1d:16:98:fc:ee:47:b2:a3:df:d2:a3:d9:
         8d:d4:c3:b8:b3:2b:e7:aa:ca:a8:bf:05:f2:90:5b:d7:99:6d:
         28:7f:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org