Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
File:                     1F5CD892C35111EE9D744F36C4F9AE02.roa (raw, json)
Hash identifier:          jIXmhGTsHnOLM/8Oki3QEi8c2FlMLFZ5ltRb0SYd+ig=
Subject key identifier:   95:5F:32:F6:2A:B2:FB:92:BC:2D:07:46:AB:51:6F:5A:80:3A:DE:2D
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       3438
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 14:50:20 +0000
ROA not before:           Tue 30 Jul 2024 14:50:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     7485
IP address blocks:        210.246.198.0/24 maxlen: 24
                          210.246.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13368 (0x3438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 30 14:50:20 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a8fdac-cae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:2f:62:e9:a3:60:d2:b9:72:18:58:c2:42:
                    90:f4:8c:a9:d9:cf:60:88:fb:e9:42:ee:64:b2:8d:
                    14:36:69:91:70:75:e5:de:87:e6:99:09:d5:fc:0e:
                    06:77:1c:57:f6:9d:48:26:9d:62:d0:53:cb:77:70:
                    ae:e6:2e:b9:41:2b:b1:26:17:eb:8e:0e:0a:ca:bc:
                    da:1a:19:63:bb:6d:06:7b:74:37:fe:1a:f2:7a:bb:
                    a9:6d:34:54:bd:df:44:07:95:4b:b4:80:fd:32:c6:
                    ad:9a:0c:8c:0c:bd:44:bb:f7:48:ab:19:67:48:73:
                    7f:c8:e2:b5:1b:74:e5:01:98:2b:4a:03:dc:6d:14:
                    6c:80:13:c4:a9:09:34:f9:d4:6f:8a:50:9d:e4:30:
                    0f:5e:78:09:0f:e4:ae:ac:8e:7a:4d:36:cb:0c:68:
                    1f:b8:05:8f:33:ea:c5:15:0e:fc:52:5a:b8:06:a6:
                    9f:8b:e1:82:30:cd:3e:1b:f7:a8:ff:43:2e:7f:50:
                    35:0d:cd:7a:5e:bb:96:15:8a:5f:a8:21:33:86:69:
                    55:14:a8:04:65:ad:ab:ff:71:a5:f9:9d:ab:8c:2c:
                    27:c5:aa:c9:98:ce:5d:e0:0f:14:e0:44:2f:ae:a4:
                    f4:d2:eb:85:bd:d1:10:d4:7e:7b:a1:b4:b6:22:65:
                    a9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:32:F6:2A:B2:FB:92:BC:2D:07:46:AB:51:6F:5A:80:3A:DE:2D
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1F5CD892C35111EE9D744F36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:2e:6a:98:75:aa:bb:06:3a:2c:10:9b:12:21:6a:4a:ac:
         f9:9d:b9:61:13:40:01:30:5d:ec:53:4d:ff:81:ae:f5:a9:26:
         da:ae:6a:59:2b:ce:6a:1b:3a:34:73:8d:f5:41:05:3a:84:1d:
         3b:0c:10:5a:1c:6f:33:c5:7b:c7:cf:ec:73:30:6a:a2:a1:fb:
         c6:26:99:70:5e:02:c5:73:2b:2d:5a:ae:f0:f3:a7:82:63:eb:
         78:c2:09:dc:76:26:32:ef:35:56:c7:de:bb:21:2c:ea:76:9b:
         f3:d6:fd:29:f2:c8:19:36:94:77:4f:09:61:19:0f:28:d0:48:
         c6:0a:9d:29:21:c7:0c:b2:64:38:3c:cd:0c:3c:13:b7:01:b0:
         06:d9:75:46:6b:df:03:c6:4f:5b:fb:27:7c:d2:33:bf:fc:db:
         52:7b:81:72:a3:13:86:77:a0:c3:ba:06:4b:6d:b8:97:6e:db:
         36:f0:e7:5b:0c:a4:54:5e:f9:75:ed:c1:88:be:b2:f0:51:8a:
         07:15:d6:ce:07:d9:ce:85:b1:0e:69:95:e9:3f:97:80:f4:dc:
         d6:27:74:6e:82:47:1f:8c:0f:9b:32:b4:55:fa:0b:80:b2:1c:
         d2:10:76:db:44:b4:76:56:b9:3b:35:6a:7d:88:86:6d:82:42:
         a4:01:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org