Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
File:                     20519AFE346111EFB91EA738C4F9AE02.roa (raw, json)
Hash identifier:          aygeQkP1fHUp6GkG7Gr3GPYW0xo6LhPZYhejgYQHNPs=
Subject key identifier:   93:1B:A5:7B:CB:1C:F2:81:ED:B1:14:C9:DC:1A:FE:AD:41:79:0B:EA
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       038E
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 08:42:03 +0000
ROA not before:           Thu 27 Jun 2024 08:42:03 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     134972
IP address blocks:        2400:8a20:161::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Jun 27 08:42:03 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=667d25db-77e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:e9:8a:25:85:0e:dd:a3:d2:25:bf:f9:67:
                    81:6f:ce:30:ce:80:e4:b9:3d:ba:ad:6f:c2:a7:9f:
                    f5:47:52:98:6c:45:e3:32:af:f9:d1:1e:a4:b4:a0:
                    c2:69:72:fd:b8:b1:73:e1:2e:dd:eb:99:ac:dc:9a:
                    e7:94:17:c7:cf:f7:9f:1a:24:b8:84:b2:4d:b0:04:
                    82:90:b7:2d:7a:63:c5:cd:34:0b:cd:06:42:75:f0:
                    76:01:bc:2b:d1:56:d6:f7:e1:68:34:21:4e:bb:e1:
                    87:9d:ff:67:1b:58:80:db:5b:bd:80:94:ac:2e:3d:
                    31:47:a4:bc:90:88:79:91:7f:0a:b8:30:96:f4:c1:
                    d2:a5:a4:4a:35:57:1a:cf:f9:6c:e3:a3:f7:7f:7a:
                    77:ba:26:7e:1e:8a:9b:46:97:bd:75:0c:52:ab:a3:
                    aa:e7:08:f9:16:7a:4c:c4:b1:4e:44:11:2f:ac:04:
                    cb:a8:fa:d7:12:b4:0f:02:da:93:26:6f:50:7e:a5:
                    49:4f:30:10:3f:5f:0c:af:dd:29:09:0f:df:a8:ac:
                    b4:dc:97:0d:57:29:5b:f7:99:9a:f6:8a:f3:44:8a:
                    c5:3a:2f:b3:1a:b4:f9:0d:10:92:04:8b:a8:7f:2e:
                    d2:2c:44:c2:ab:30:e5:4a:fa:d0:7d:e9:11:39:a3:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1B:A5:7B:CB:1C:F2:81:ED:B1:14:C9:DC:1A:FE:AD:41:79:0B:EA
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/20519AFE346111EFB91EA738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8a20:161::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:14:7d:1d:59:9d:49:da:91:77:74:1b:4d:20:1c:a2:20:e6:
         1f:01:e8:3b:cb:f4:f7:ba:35:01:e9:d2:ba:10:3e:cf:69:a0:
         7e:dc:d9:f5:09:9f:74:93:ac:03:3a:53:7a:f1:79:a9:77:69:
         5a:a9:0e:ab:b3:c7:28:c8:36:0d:9b:9b:53:86:14:d5:38:70:
         ce:3c:c4:c3:aa:3c:5d:66:bb:7b:53:93:85:5d:1d:22:07:5d:
         cd:cb:09:10:40:ba:3d:9a:21:bf:84:f3:6f:a3:0b:d5:fd:3a:
         fc:b5:59:e3:50:53:7f:06:56:84:d1:49:19:9c:90:c5:d9:cf:
         63:f9:d8:a3:bf:34:9e:a4:ce:62:38:58:16:65:1d:dd:ed:20:
         46:23:fc:65:95:e1:89:32:28:ca:10:31:69:ab:da:29:78:ba:
         71:2e:6f:76:50:6d:ef:8f:53:8e:b1:c7:dc:0c:b3:7c:ae:fc:
         e1:a4:04:0f:b6:a5:34:4a:8a:c9:7b:ad:91:38:68:82:81:9a:
         37:08:fd:f5:6e:e9:da:53:de:f0:55:3a:c9:12:bc:c7:11:67:
         58:4f:e8:a1:05:92:96:ef:f8:c5:2d:38:bc:25:b7:e4:10:18:
         ae:a1:71:37:fb:46:2b:d4:9d:c9:ea:e2:93:59:3a:d8:43:66:
         1e:71:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:31:52 2024 by rpki-client on console-fra.rpki-client.org