Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa
File:                     7DCC2C42721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          EAWWPMvIx1la822dRIY3F3QPw/Rfhno/EQhiCMx4s2Q=
Subject key identifier:   44:85:87:52:35:23:93:3D:51:04:9C:69:1E:73:64:59:CA:7D:9D:F2
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       4B
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 21:59:48 +0000
ROA not before:           Fri 13 Sep 2024 21:59:48 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139753
IP address blocks:        202.29.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Sep 13 21:59:48 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66e4b5d3-0b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1f:68:20:9c:b8:72:6a:2d:9b:1b:f4:6a:0f:
                    6f:8c:ba:4b:c1:c8:86:6e:9b:0a:75:8a:e2:b9:f4:
                    52:94:10:3d:8e:2e:0f:87:9f:8a:ec:c3:7a:77:64:
                    a9:9d:25:a8:1a:7a:e6:50:0f:04:bb:5f:33:31:a3:
                    30:35:0c:68:74:33:d8:7c:f3:64:65:2f:49:aa:a3:
                    45:26:fa:3f:9c:54:e3:01:bf:31:6d:33:f3:af:55:
                    da:69:73:a7:85:91:14:74:13:8c:0b:90:a6:71:46:
                    b3:47:0e:16:4b:f3:28:ee:f0:9a:60:da:1d:02:5e:
                    d3:ee:66:b3:59:63:f8:de:22:56:6f:ee:e4:6f:be:
                    a9:8b:ad:40:c2:c4:2b:1e:95:12:d8:5f:f1:12:ae:
                    75:ac:a7:24:34:9f:e9:db:27:eb:40:04:f7:be:32:
                    9d:57:aa:5a:8e:fb:cc:33:e7:51:0a:3a:35:50:3d:
                    bd:4b:6b:95:8b:21:e4:00:81:86:fa:43:bb:d2:44:
                    91:2e:ae:49:52:db:68:8f:aa:f8:86:ce:43:33:9a:
                    a2:67:8d:47:cb:fd:57:b9:7a:b4:e3:cd:19:58:6f:
                    8b:bf:53:fc:50:b3:c4:92:b1:90:56:f6:00:37:cc:
                    11:52:c8:f9:87:41:da:6c:4e:c2:43:7d:9c:03:82:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:87:52:35:23:93:3D:51:04:9C:69:1E:73:64:59:CA:7D:9D:F2
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/7DCC2C42721B11EF81654E68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.29.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:40:fb:ee:c0:e9:b8:38:de:48:69:5f:16:45:8d:32:d4:53:
         fd:a8:f8:6e:97:60:b3:9d:19:cd:ec:ce:8a:8b:cd:45:21:da:
         35:1b:81:f7:a6:75:52:34:dd:8f:fa:2c:80:4d:b8:88:49:9b:
         d3:1c:ae:83:91:94:13:8e:ba:89:ba:e4:b6:51:9f:63:07:0c:
         5b:8b:08:02:99:67:42:64:26:46:17:1c:55:16:82:53:30:9b:
         f1:f5:2e:30:3a:59:d1:e8:b6:09:d3:5c:a7:20:3c:00:b3:a3:
         11:0b:0c:f8:74:df:a6:3e:9b:c3:cf:2f:16:ec:ab:0e:5a:d8:
         2c:57:b2:19:b4:c3:d4:b3:2b:f0:f8:85:50:fb:e0:99:e6:ff:
         71:72:a8:0c:f6:51:9f:8c:65:37:26:8e:f9:27:0e:54:3f:ec:
         cf:20:2b:43:c0:82:97:81:82:9f:7c:df:bd:f2:75:a1:80:a6:
         f6:64:60:79:03:51:55:d4:03:5d:b0:50:14:76:58:3a:c8:f3:
         3c:9a:73:b2:55:bc:2b:d3:d0:f5:f8:26:28:c1:53:dc:a3:7a:
         fa:08:4f:13:ba:8e:5c:dc:20:4a:5f:ca:36:78:9f:97:22:ea:
         db:29:60:5e:88:2d:f6:1d:8f:71:2c:80:53:2e:ea:f2:96:5a:
         a5:2c:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org