Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa
File:                     C92F5F8077A211EDAF94D63EC4F9AE02.roa (raw, json)
Hash identifier:          XEVDVSbkGW1XL4im1YgJ/xk7H57wudyi6662QWrqYro=
Subject key identifier:   45:09:FB:E1:82:FB:C5:27:F9:AB:CC:7A:3A:55:7E:12:C5:F5:60:58
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       339C
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa
Signing time:             Fri 16 Feb 2024 15:41:10 +0000
ROA not before:           Fri 16 Feb 2024 15:41:10 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     396982
IP address blocks:        45.113.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13212 (0x339c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Feb 16 15:41:10 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cf8216-62fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:5f:00:35:a1:41:5d:6f:c6:cf:a2:16:dc:
                    96:ea:9c:6c:4d:64:8a:c7:1f:87:9f:3d:30:34:9c:
                    c0:d2:94:e2:8c:cc:c1:ba:de:c5:38:d6:7d:a8:90:
                    17:64:1d:56:6c:43:7d:08:8e:e6:30:4b:75:82:3e:
                    17:ec:c9:65:42:05:ed:4a:16:bd:5a:97:48:88:6b:
                    17:20:05:92:06:a8:48:b2:fa:85:7d:da:05:c2:9b:
                    d6:f7:20:d4:4c:2f:6d:19:2b:60:86:ce:59:7d:d7:
                    94:5a:ba:a6:27:b8:84:fb:15:e7:d1:ae:53:54:22:
                    85:1e:6a:ac:5b:28:de:d9:f5:29:07:79:a1:c6:01:
                    c1:f5:ca:93:36:ff:eb:f5:fc:d7:01:5d:9e:84:37:
                    b6:6b:d4:4e:4a:47:35:ee:f1:a2:dc:82:11:d7:19:
                    f4:df:27:05:dd:9a:f3:a6:ae:44:7a:25:d2:7d:a9:
                    50:f1:33:a4:6c:97:04:34:3a:63:9a:79:c4:15:6a:
                    a0:b5:77:a0:e1:03:fc:2d:32:e3:ca:03:8b:a7:70:
                    73:65:a3:bf:64:cf:e3:ce:08:25:22:8f:4e:01:48:
                    2d:cf:fe:c5:eb:84:f6:c2:89:46:66:f1:5d:5c:c1:
                    73:7e:ca:0c:d4:55:25:03:ee:15:ae:2d:0e:a4:61:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:09:FB:E1:82:FB:C5:27:F9:AB:CC:7A:3A:55:7E:12:C5:F5:60:58
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:34:f3:23:97:26:8b:1c:a4:8b:d7:f8:f7:11:56:ee:d0:01:
         d8:5b:30:a5:46:da:4d:26:36:9e:08:8f:30:20:7f:a7:c0:ad:
         e8:bd:25:77:1f:8a:24:61:4a:c7:1c:d0:98:de:c5:7c:02:50:
         08:74:1d:12:00:c6:de:b3:cf:d1:99:e9:f7:31:47:32:f7:10:
         8c:af:e1:11:12:de:74:1c:09:7b:6e:ef:58:13:45:09:c2:b7:
         ad:f4:ac:52:cf:ad:b3:ca:29:06:1a:28:8f:ac:27:ee:c1:26:
         bc:02:b8:86:76:44:26:01:eb:c9:e0:c4:da:d7:2e:ad:f0:a8:
         cc:7d:eb:b7:b5:dc:cb:8e:4a:3c:8c:38:74:bd:3c:f8:23:48:
         29:eb:5b:95:de:6a:a8:9e:18:4b:fc:36:b2:46:9a:a6:79:33:
         0d:55:bf:89:c3:3d:8a:01:04:0b:d3:a8:fb:41:84:8a:ad:84:
         df:15:72:f6:7c:b1:7d:d9:3e:0a:42:7d:6a:fe:23:9b:e8:cd:
         50:80:58:fa:a1:db:de:60:e7:ba:33:db:12:24:4c:e1:75:92:
         24:56:7e:89:1f:fe:be:90:04:87:11:a9:26:2c:bf:ba:aa:2b:
         0e:2b:fa:f5:f3:f5:ae:aa:9b:db:ae:7e:b2:28:5f:d4:6d:c8:
         12:95:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:33:56 2024 by rpki-client on console-fra.rpki-client.org