Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/5A32E8DAE79111EE972FC923C4F9AE02.roa
File:                     5A32E8DAE79111EE972FC923C4F9AE02.roa (raw, json)
Hash identifier:          aFMYkYBw2EhyeI2pqMsreJuK3qV39ueiDtvXsuPF2Sc=
Subject key identifier:   EB:51:CA:9F:2D:43:7A:6A:26:0E:27:E8:9E:F8:BC:D0:E8:1C:AE:48
Certificate issuer:       /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial:       02
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/5A32E8DAE79111EE972FC923C4F9AE02.roa
Signing time:             Thu 21 Mar 2024 14:43:16 +0000
ROA not before:           Thu 21 Mar 2024 14:43:16 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     152459
IP address blocks:        2401:7d60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
        Validity
            Not Before: Mar 21 14:43:16 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65fc4784-21b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:55:98:9b:3d:11:4c:11:d4:13:52:18:35:
                    2a:00:b7:93:3b:fe:df:94:4d:97:89:42:4e:e7:f3:
                    23:a9:74:b5:c1:87:70:6c:48:10:4f:e5:8d:f6:d7:
                    4a:38:96:62:be:b0:d2:37:45:b5:84:75:e7:f9:20:
                    c1:27:ad:c1:91:e5:0c:74:15:40:85:23:1f:84:00:
                    47:af:57:f9:81:3d:f1:8e:d5:0c:86:f9:3c:93:0c:
                    c6:b0:56:55:81:25:7a:c1:80:76:d3:a3:91:08:12:
                    96:1c:0d:20:2d:5d:a7:e7:4d:63:82:7d:79:ef:9f:
                    33:3f:44:34:04:45:30:cf:23:70:f4:34:cd:7d:93:
                    f2:3d:87:1d:9d:32:6d:1c:23:a2:ed:b0:14:66:f0:
                    73:19:ea:d3:54:77:b9:f9:dd:d9:65:3f:86:1a:17:
                    a1:81:d9:8c:5b:32:1b:b7:d0:ff:c7:19:20:aa:ff:
                    19:e7:7d:de:ad:9c:f1:02:29:63:cd:51:09:b6:37:
                    d9:d9:d1:29:b1:a9:0f:83:93:32:73:73:41:43:c2:
                    11:ea:bc:47:dc:35:00:f8:74:10:55:fd:5d:8c:76:
                    f6:58:b8:c9:21:2b:e2:64:44:16:78:b3:1e:4d:07:
                    a9:43:4c:3c:b7:bc:d0:8b:8b:71:ab:a4:f8:9d:c7:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:CA:9F:2D:43:7A:6A:26:0E:27:E8:9E:F8:BC:D0:E8:1C:AE:48
            X509v3 Authority Key Identifier:
                keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/5A32E8DAE79111EE972FC923C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:fa:86:a7:eb:5c:36:07:fa:42:de:c2:69:74:5d:06:c9:
         2f:f0:da:ec:41:2f:bc:da:b6:00:f7:a2:e5:9a:17:9f:87:5d:
         42:55:b2:b9:26:b0:bd:6a:21:e7:ab:f7:ce:3b:96:61:08:0c:
         b5:57:9d:02:7b:48:5d:b4:ce:0c:bb:14:6f:d7:4d:d0:26:ef:
         68:93:4e:ed:a4:cb:88:3b:51:66:f4:88:15:24:19:7d:71:60:
         4e:25:8f:8f:06:bb:3e:04:a1:1c:ed:52:fe:27:6f:12:be:24:
         da:29:93:d9:72:7b:bf:58:cc:61:16:43:06:7e:8a:48:13:6b:
         58:0d:0d:7f:b5:5a:3d:14:a6:8b:34:76:10:d5:c1:cb:08:fa:
         0a:97:f1:45:84:cd:e3:2f:75:67:01:74:fd:9c:50:ad:7e:92:
         79:f3:0d:8e:8b:af:41:5b:26:b3:db:22:96:a6:6d:27:05:2c:
         8d:6e:86:b7:04:eb:00:49:13:e4:57:cb:aa:46:fd:72:f7:90:
         6c:cb:b6:ca:da:41:03:13:fe:7f:de:77:46:ea:f1:1c:fd:a6:
         7d:65:b5:0e:2a:0e:d9:ce:0a:62:f4:d3:5b:24:14:96:8d:40:
         1f:31:f6:00:ae:94:f0:2d:49:cd:ae:4c:1c:2e:56:c9:cc:77:
         63:93:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org