Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
File:                     47854B9031DB11EEA02CF647C4F9AE02.roa (raw, json)
Hash identifier:          ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=
Subject key identifier:   D6:2D:8E:56:47:34:35:5F:BA:47:1D:73:80:A6:7F:C1:66:F5:F8:FD
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       F8
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
Signing time:             Sun 03 Nov 2024 03:37:07 +0000
ROA not before:           Sun 03 Nov 2024 03:37:07 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     149778
IP address blocks:        2405:4cc1:300::/40 maxlen: 40
                          2405:4cc1:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Nov  3 03:37:07 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6726efe3-0b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:03:00:cf:13:dd:bf:93:ef:27:8d:db:d8:
                    29:92:95:32:53:5f:20:5f:75:3a:aa:81:1c:a1:7f:
                    a1:0f:b2:08:43:b4:89:f0:67:5a:61:9c:6f:cf:e4:
                    3a:3e:0e:f5:9a:28:f5:37:80:45:52:2d:33:be:f3:
                    fb:13:2b:6d:0b:07:d9:23:b8:15:c4:e9:0f:44:e6:
                    ce:70:2b:89:3c:4c:17:73:61:9d:99:45:a4:41:2c:
                    cb:c8:ac:87:c1:0c:c1:ca:8c:79:74:3e:65:e0:57:
                    14:8f:1c:87:94:43:80:1b:7e:9f:0a:91:d6:35:8c:
                    90:53:3c:e2:ae:ea:53:89:ae:c3:98:f0:2d:3a:fc:
                    ac:a8:75:a4:45:31:3b:b5:5f:fe:9e:c9:ee:97:64:
                    54:89:f5:d1:56:7a:e4:04:77:8d:6a:2b:c0:96:33:
                    b4:b0:98:58:bd:66:b1:f1:bb:77:bd:53:85:1d:1d:
                    7a:d2:9f:7d:82:5f:33:ca:7c:ce:af:f0:d0:0c:9e:
                    c4:85:54:30:dd:0a:03:2c:2d:bc:f9:f4:d4:2e:3c:
                    d7:16:d2:86:8f:bb:73:6d:d9:c5:35:5e:67:fb:f6:
                    50:e6:12:1b:4c:14:56:51:ad:71:b0:29:56:e8:28:
                    77:4b:87:a1:1c:4a:2d:06:43:46:5f:bd:90:55:de:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2D:8E:56:47:34:35:5F:BA:47:1D:73:80:A6:7F:C1:66:F5:F8:FD
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/47854B9031DB11EEA02CF647C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4cc1:300::/40
                  2405:4cc1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:75:34:c1:36:49:48:6a:8a:a4:f4:ce:00:d9:40:e9:ab:
         d8:66:bb:9f:0c:1a:86:6e:09:8a:3f:56:97:dc:51:b0:70:8d:
         bf:e4:c2:2a:8e:0a:8c:bd:93:5f:a3:b2:0c:1c:25:c6:26:13:
         55:6e:cb:9f:97:22:2c:ae:19:ca:f1:e5:bf:0a:48:b9:36:14:
         bd:d7:7e:7f:78:b0:c3:1a:2d:44:3d:18:1d:04:f1:cb:6a:cb:
         31:38:1d:e1:4e:83:dc:6d:e8:95:2a:db:ab:79:7e:4a:f0:46:
         cd:e1:cf:2f:58:3b:d7:ac:0b:c8:32:13:4a:1e:cf:92:9e:d5:
         85:b3:6e:6e:b6:ae:8b:2e:74:42:1d:34:61:3a:00:7c:2a:d0:
         1a:17:f7:2c:db:6a:00:aa:47:2e:c6:19:74:a3:75:83:09:4b:
         9e:6e:e1:04:01:13:4e:85:e9:98:cb:eb:46:01:58:b4:8c:a9:
         10:78:cf:7c:5f:fd:9b:fa:53:9b:1b:5e:87:71:ff:6a:70:59:
         48:59:e2:9b:05:15:58:34:3d:ec:19:e0:2e:96:3a:59:a9:6f:
         54:7e:3a:4b:7c:1a:50:c1:4d:39:f7:5e:40:82:da:a0:25:06:
         bb:49:03:9e:4b:b4:7f:f9:e6:36:4a:34:bb:ec:d8:47:84:fa:
         32:38:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org