Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
File:                     F0F8C7EC84A511EAB3356318C4F9AE02.roa (raw, json)
Hash identifier:          yjKp+Z+JHdUFwWJ1GmvDX2/3UYld6gze0dHyzKixjJo=
Subject key identifier:   EA:4E:90:1D:A3:B6:E5:B7:09:E2:D0:7C:AD:AA:6F:FD:F4:E0:99:C5
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       281C
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 16:03:00 +0000
ROA not before:           Thu 28 Dec 2023 16:03:00 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     140032
IP address blocks:        49.229.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10268 (0x281c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Dec 28 16:03:00 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=658d9c34-0418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:bd:e3:8c:4f:f3:1c:ab:96:08:5a:22:a0:
                    f3:af:b1:67:db:55:ac:52:d4:0c:1f:65:9c:b7:c5:
                    55:ba:29:e5:b8:f6:b2:11:20:11:6c:ae:4e:0e:bb:
                    f1:fe:33:05:c2:a0:c3:66:b9:ee:63:5e:d8:3c:aa:
                    f7:2a:1b:f1:36:db:4f:ea:9e:b6:df:89:27:af:83:
                    93:4e:ed:7f:82:bb:d3:48:b2:0a:2e:e0:0d:c8:88:
                    79:97:e2:90:e4:0d:1a:a8:14:ed:66:11:94:ca:e1:
                    ce:8a:14:9c:76:98:37:10:df:99:d4:a1:8d:cb:1b:
                    4b:d1:a3:dc:77:e5:ff:8a:b3:2f:fd:81:04:75:7e:
                    a4:75:d4:41:66:57:4e:d9:0a:41:78:c4:69:3e:70:
                    c3:96:66:72:47:55:28:97:18:cf:53:df:33:8e:aa:
                    37:d8:4f:9e:18:49:3f:39:36:d7:f5:35:68:2e:be:
                    39:30:25:0e:39:72:a8:f3:f2:94:ce:86:75:3b:d5:
                    87:ed:91:79:39:ea:dd:be:74:14:0e:c5:cf:46:19:
                    26:bb:3d:6a:12:58:c5:3a:fd:1f:68:a8:08:86:e7:
                    60:25:6f:ae:4c:f8:1b:99:15:b3:cc:54:52:ba:a0:
                    7a:f1:fb:be:e7:4e:b4:86:35:b0:af:3e:89:17:e8:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:90:1D:A3:B6:E5:B7:09:E2:D0:7C:AD:AA:6F:FD:F4:E0:99:C5
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F0F8C7EC84A511EAB3356318C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:9d:24:36:0f:93:13:b9:5e:94:63:c5:22:8f:6a:81:26:
         ec:d6:b3:c5:6b:aa:c4:0f:39:e7:02:39:ff:5a:f4:eb:64:a3:
         6a:5b:a1:95:28:7a:00:0c:1d:92:27:45:21:14:0b:14:11:da:
         80:ed:b4:c1:57:37:a2:8e:8f:99:59:6e:b5:ea:bf:73:9d:49:
         a0:1f:e0:37:33:86:1c:43:00:cf:73:60:d7:2b:02:bd:19:2c:
         d9:93:f6:9b:a8:ad:1a:16:2d:46:7a:f6:b0:4c:46:f8:82:8f:
         06:52:eb:35:ab:35:a3:9f:23:0e:ac:db:28:fc:43:5d:ee:34:
         4c:f3:cc:04:61:26:64:29:4d:bd:e1:e2:f3:26:51:be:dd:02:
         8a:14:9d:6a:d0:1c:69:8f:13:ba:0c:95:3a:66:35:2f:0e:b2:
         d7:f0:31:17:28:af:a8:ea:3a:45:73:e6:07:cf:26:3a:92:5d:
         0e:0b:18:58:1c:ef:a1:13:5c:2a:8d:81:94:94:69:24:db:06:
         e3:58:16:d5:3f:52:ad:9c:8a:66:6d:68:20:ea:fe:17:4e:b5:
         7c:df:77:ef:21:e6:78:0e:76:e5:73:a9:71:28:67:12:4b:19:
         c5:8a:74:8a:48:dd:3e:a5:23:d4:42:5d:d3:d9:15:86:ea:4a:
         6f:ee:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:57 2024 by rpki-client on console-fra.rpki-client.org