Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
File:                     E3C4A4EE777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          L5hcVKih/+nBko6kW7js31KvZiJs+q86I/1/tFKfyVk=
Subject key identifier:   0B:82:3E:90:AD:63:A4:49:DA:F4:35:7A:9F:70:CA:09:55:54:4D:C9
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       08
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 18:33:54 +0000
ROA not before:           Fri 20 Sep 2024 18:33:54 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     63997
IP address blocks:        45.254.38.0/24 maxlen: 24
                          2405:a280:33::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Sep 20 18:33:54 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66edc012-d84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:4a:b9:5d:2b:19:2c:f6:ee:3e:0d:93:d3:
                    39:04:8a:eb:f6:68:e3:7b:95:72:05:b7:5d:09:a1:
                    2a:51:87:52:bd:07:de:48:48:36:20:b3:95:6a:33:
                    21:8a:53:5c:f6:04:3d:ac:a6:3d:be:b0:8e:90:f8:
                    48:42:ea:cf:36:86:10:12:dd:3b:00:bf:3b:31:ad:
                    3e:4c:d1:cc:20:32:a2:03:8c:d5:48:41:a8:fb:de:
                    46:ca:69:b3:8e:87:8c:7d:3b:97:7d:82:90:cb:ea:
                    27:10:78:e8:4d:37:a6:e8:2b:54:b2:dc:7f:ba:7c:
                    02:d2:7e:23:01:35:5b:a1:c4:85:3c:20:34:e2:8a:
                    ea:cb:a4:04:e4:aa:e8:28:a1:3a:6d:af:ff:ab:ce:
                    7c:0f:d7:cf:90:21:aa:3f:b9:a1:6e:2a:c0:89:83:
                    37:59:00:38:30:e4:5c:d9:64:12:13:0d:90:ac:03:
                    fa:87:40:c8:38:e3:79:2c:95:79:76:88:95:3f:ff:
                    9d:72:42:b0:a1:fe:3b:d3:ee:77:30:c3:b8:79:67:
                    00:2b:8d:96:0c:59:ee:fd:26:52:47:7b:d1:6d:e7:
                    0d:cc:e1:d2:86:2b:69:a4:1b:5d:3e:43:11:dc:de:
                    d0:89:f2:d6:e9:3d:75:26:16:67:b2:39:ff:ed:f4:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:3E:90:AD:63:A4:49:DA:F4:35:7A:9F:70:CA:09:55:54:4D:C9
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.38.0/24
                IPv6:
                  2405:a280:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:5c:00:ab:c1:4a:03:42:3a:7d:1f:62:f8:9d:b9:39:10:
         09:c2:55:b7:c7:2c:3b:bf:f9:61:31:65:bb:05:0a:ae:51:8c:
         bf:54:df:01:ff:bd:0a:b4:88:62:a4:bf:9c:0e:29:1c:9c:6c:
         ee:6b:47:b6:0f:21:c3:c2:88:70:18:b3:08:fb:70:42:c6:12:
         bf:82:b4:70:bb:f5:b9:29:66:25:12:a0:a9:c9:73:f5:2b:93:
         2a:50:54:f8:3c:32:13:5f:ec:88:f9:f4:bd:8a:9b:72:78:84:
         03:05:87:70:f6:23:64:fd:b5:2d:46:c3:de:e7:fd:92:22:0c:
         3d:3a:61:29:ac:cc:fe:62:55:56:d0:4d:59:3a:c4:10:0c:09:
         74:96:18:4e:3f:e7:b4:4e:e3:39:7b:ec:fe:5e:05:9c:e3:3a:
         ab:d7:a7:6b:96:f3:64:b9:fa:4c:d4:e8:d9:f2:ef:e9:a2:c0:
         d4:48:37:93:d2:aa:5c:7e:f3:8b:b5:a3:01:71:0e:2e:b7:0f:
         99:3e:ea:4b:1d:71:a7:54:f3:4e:11:0f:e8:88:dc:65:50:20:
         4b:44:5c:e6:06:17:66:05:81:c0:74:1f:af:c0:72:38:69:c8:
         5f:81:49:25:01:a3:ff:34:d6:a1:c1:46:52:9e:7e:64:19:07:
         ed:d1:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org