Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/DECE6146741911EEA071082BC4F9AE02.roa
File:                     DECE6146741911EEA071082BC4F9AE02.roa (raw, json)
Hash identifier:          xm2qJF4w/uUWCdChoCKYifakvhAh5TyoTOsQ/N/+Jow=
Subject key identifier:   70:AB:CC:D9:F2:3B:E2:F1:0F:42:FE:18:61:25:1D:D7:7D:47:73:2D
Certificate issuer:       /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial:       DE
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/DECE6146741911EEA071082BC4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:53:46 +0000
ROA not before:           Tue 30 Jul 2024 16:53:46 +0000
ROA not after:            Fri 29 Nov 2024 00:00:00 +0000
asID:                     133605
IP address blocks:        2401:2cc0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Aug 2024 22:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
        Validity
            Not Before: Jul 30 16:53:46 2024 GMT
            Not After : Nov 29 00:00:00 2024 GMT
        Subject: CN=66a91a99-81f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:6d:91:a5:50:ad:d5:57:d0:9a:9d:09:6f:
                    7a:aa:51:c2:83:5c:82:85:68:c4:03:01:08:4f:e0:
                    38:48:44:cc:69:02:39:b1:5f:3d:6c:bd:18:cf:3d:
                    00:22:5d:9c:ee:42:b6:c7:9c:36:65:7a:18:66:22:
                    12:52:69:8a:f3:3f:20:87:05:8d:7f:e0:3d:3d:e8:
                    ce:f7:a8:5f:34:f3:35:4a:9c:97:6b:de:0a:54:80:
                    45:6a:4f:a0:36:54:0e:b4:a4:23:16:4f:ef:39:51:
                    fe:65:7e:db:e4:56:ce:71:6b:ef:e8:15:3b:1d:75:
                    c4:19:bf:90:ea:98:99:c4:1b:fc:a4:9c:0b:63:d0:
                    11:56:7f:2d:51:8b:32:e6:72:59:d7:fa:5c:a5:f1:
                    b7:fe:39:49:c4:92:ea:7b:d5:1f:bb:03:33:73:f1:
                    b5:16:c0:e4:e8:06:c9:2e:06:89:2c:6f:00:d6:a3:
                    1b:c3:63:05:5f:0b:2b:b8:34:63:30:d9:9f:d0:da:
                    b4:21:c7:0c:4a:77:f0:dd:48:90:e9:9d:db:6e:67:
                    02:37:bc:21:52:17:82:ec:a5:ad:62:d5:23:5d:38:
                    0b:67:ea:4f:50:57:e7:47:be:4c:3a:61:b0:45:41:
                    97:c0:ad:f7:7f:87:25:75:09:69:11:47:90:6f:03:
                    16:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AB:CC:D9:F2:3B:E2:F1:0F:42:FE:18:61:25:1D:D7:7D:47:73:2D
            X509v3 Authority Key Identifier:
                keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/DECE6146741911EEA071082BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:eb:f3:aa:b0:e9:9a:c3:b8:4e:e8:a8:55:c1:ff:af:ca:53:
         0a:68:6b:20:d6:b1:96:ee:25:48:84:16:e5:13:b6:c5:84:df:
         2d:3e:a4:0c:58:a7:69:a2:21:dc:20:bb:17:17:2c:5b:0e:f6:
         34:50:8d:81:b9:c2:76:32:49:3e:b3:a4:bb:36:f4:dd:36:1f:
         42:c1:ed:ef:3e:73:53:2a:1b:c7:8d:5d:4a:a2:75:54:1f:33:
         f1:e9:05:90:cd:75:9f:b7:14:7c:a6:be:50:2d:fa:e9:ed:2b:
         33:fe:ee:c7:0a:37:b3:e9:e2:fe:55:3f:ac:26:29:4b:28:e9:
         35:5f:5d:a3:0b:3a:17:6e:a3:63:7d:1c:96:f9:e6:58:1d:ba:
         28:22:1a:b9:7c:f0:bf:17:eb:32:2c:51:8c:98:97:3d:4d:48:
         52:b6:6d:03:46:c7:0c:e2:44:bc:fb:67:6f:bc:8b:7e:dd:8c:
         a6:cb:6e:ca:09:09:aa:47:4b:a7:58:e6:99:91:0b:fc:d1:33:
         38:1d:2b:8a:90:d9:df:1a:fc:85:92:1e:8d:ad:11:0b:dc:6e:
         f4:08:f5:c6:3d:cc:26:a3:05:49:0e:ee:b0:83:57:f4:ea:e7:
         a4:c8:8c:2a:ea:26:2d:71:3f:48:67:a8:6c:54:ec:b5:b0:bc:
         54:0d:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:19:45 2024 by rpki-client on console-fra.rpki-client.org