Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/BD55046A86A711EFAAEE7030C4F9AE02.roa
File:                     BD55046A86A711EFAAEE7030C4F9AE02.roa (raw, json)
Hash identifier:          YZRf5ygqs6yZScbkx1VpIvx3DqExks4rVOBFuDw10NM=
Subject key identifier:   8D:44:69:56:C9:C5:C1:1A:A3:8F:D7:ED:23:83:9E:0F:A8:35:EE:DB
Certificate issuer:       /CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
Certificate serial:       02
Authority key identifier: 8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/BD55046A86A711EFAAEE7030C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 01:34:07 +0000
ROA not before:           Thu 10 Oct 2024 01:34:07 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     133605
IP address blocks:        2401:2cc0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02/serialNumber=8DC9CF26F9D4FDDC11145D33C3BD07962D627BB8
        Validity
            Not Before: Oct 10 01:34:07 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=67072f0e-a5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:aa:e8:3a:29:00:fb:aa:24:09:c9:82:e3:
                    fe:fc:f8:e9:61:68:06:fc:37:d6:11:bd:01:98:df:
                    c1:a0:6d:c9:22:21:88:11:3f:8b:48:bb:fa:66:f5:
                    34:44:7d:5f:97:1e:0d:11:b1:85:32:d1:a5:1a:96:
                    77:71:d2:fd:21:f5:20:b7:6e:6f:fd:48:aa:c0:1e:
                    da:9e:55:9d:55:91:c0:dd:2e:29:1c:6b:8d:ee:a3:
                    08:11:d2:ee:58:9b:f6:f0:dd:0b:e8:ad:a9:e7:8b:
                    6f:fd:14:45:4a:c4:fd:62:cc:9b:c3:7d:6b:54:a4:
                    5f:03:5e:6f:e3:e6:c0:0a:e8:0f:8e:f2:3d:27:e4:
                    d8:74:ee:8a:73:cc:e8:06:23:01:b9:39:96:57:bb:
                    e5:1e:2b:c8:87:8d:47:df:ab:b7:a7:e4:dd:c2:12:
                    a4:fe:b9:84:34:7f:1c:a7:4d:34:18:2f:31:88:83:
                    c8:c4:a5:8c:a5:8f:55:39:e1:88:b3:d5:21:52:c8:
                    c3:ef:76:1b:34:26:41:11:80:d4:98:de:5d:74:0a:
                    0d:3f:35:40:e7:07:7d:54:4c:20:cb:ea:78:8f:c9:
                    1f:73:bb:1a:05:92:de:6b:71:e1:30:9f:b3:9c:8a:
                    1e:e6:7e:7c:e6:8c:8e:68:54:f5:de:17:bd:18:bd:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:44:69:56:C9:C5:C1:1A:A3:8F:D7:ED:23:83:9E:0F:A8:35:EE:DB
            X509v3 Authority Key Identifier:
                keyid:8D:C9:CF:26:F9:D4:FD:DC:11:14:5D:33:C3:BD:07:96:2D:62:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/jcnPJvnU_dwRFF0zw70Hli1ie7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcnPJvnU_dwRFF0zw70Hli1ie7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/BD55046A86A711EFAAEE7030C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:59:70:51:5e:2f:55:e8:e1:50:06:46:91:d7:d6:47:f2:
         bb:c0:4a:21:3d:8c:1c:ca:54:0b:4d:ac:5c:5e:34:22:08:84:
         46:2f:71:8b:b3:06:95:fe:93:0b:30:25:f7:5e:c0:64:98:f2:
         0d:94:6d:82:c3:f7:26:47:8c:12:eb:22:68:8a:c0:de:86:8a:
         85:fb:20:94:87:af:51:f4:09:9f:ea:61:93:49:2b:09:3a:a1:
         26:c0:a6:e7:9e:a2:f3:31:97:13:14:bc:75:62:d6:d3:0c:72:
         41:cb:b0:d8:b4:0b:e0:05:0d:1a:50:40:74:ea:94:c3:45:18:
         b5:29:d3:27:11:4f:00:1e:91:1e:6f:9d:3f:14:81:8d:eb:29:
         08:44:b3:62:04:1b:ee:2d:4d:e1:fa:d9:e4:47:0b:c4:08:3b:
         7e:c2:3f:49:fa:c6:0a:9b:29:44:3b:38:eb:14:c3:83:68:78:
         f2:d8:b9:e2:18:d7:73:7e:01:19:8f:82:fd:ed:65:ec:22:8c:
         3f:30:34:b5:95:a8:04:ba:94:29:00:96:90:2c:24:b2:ae:fd:
         12:c5:3e:a0:34:72:48:02:c0:29:df:f3:9c:de:45:1b:f9:21:
         65:50:a5:c0:a6:04:ab:c6:95:2f:8f:fe:80:27:cb:f7:c6:06:
         cd:9c:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org