Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/678847C6535F11EE9BC85F83C4F9AE02.roa
File:                     678847C6535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          Vs5JYwOpofezkqiiF2qwHaO1ji2DOr491xFoDKani80=
Subject key identifier:   5D:24:2A:BE:88:59:35:D9:91:14:4A:2F:45:8A:FA:51:9C:10:C4:0C
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0C16
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/678847C6535F11EE9BC85F83C4F9AE02.roa
Signing time:             Wed 06 Nov 2024 19:08:50 +0000
ROA not before:           Wed 06 Nov 2024 19:08:50 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     4202202256
IP address blocks:        202.75.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  6 19:08:50 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=672bbec2-f9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:49:49:93:7d:da:36:d7:59:19:b4:19:02:
                    bd:95:83:95:64:a8:f0:9e:fe:19:97:56:df:a1:1d:
                    a4:7d:07:91:35:9d:db:de:90:58:9c:87:c7:3c:67:
                    1c:53:2f:52:0f:75:52:ef:69:eb:2d:c2:4e:3e:83:
                    c8:72:70:f7:5c:81:0d:1a:fa:e3:5b:de:87:c7:bc:
                    24:1e:ff:a1:17:2a:8e:d4:59:a8:06:aa:01:e5:ff:
                    7d:00:92:7f:d0:f5:50:08:03:76:d3:e6:f3:db:88:
                    b7:38:ea:dd:53:76:53:1e:5c:f8:a7:18:14:28:27:
                    30:e1:5b:4a:11:20:62:fe:8c:3c:76:80:e8:f6:ff:
                    ff:3c:c4:a2:ed:60:b8:4b:ba:84:f6:f1:f8:c6:f5:
                    c8:89:c0:a4:e3:46:cc:64:aa:70:95:46:29:15:17:
                    e4:fc:1c:b0:11:d5:18:74:30:df:ad:62:5e:4f:5c:
                    3a:81:e3:5b:1a:c0:2a:92:ea:82:0c:2f:78:25:92:
                    2f:15:83:29:db:f0:0c:4e:99:9a:09:f8:04:ee:53:
                    d6:bd:cb:95:c2:98:c8:0d:60:a0:55:6c:25:35:d7:
                    bf:3d:16:fb:97:25:48:c7:2f:dc:76:76:ec:55:16:
                    0e:4b:d9:99:89:f0:21:70:6f:6f:50:a3:23:cd:74:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:24:2A:BE:88:59:35:D9:91:14:4A:2F:45:8A:FA:51:9C:10:C4:0C
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/678847C6535F11EE9BC85F83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:74:0a:07:a4:17:77:d4:41:1c:d7:1e:63:63:47:b5:61:62:
         df:fe:d3:d7:47:5d:52:53:6d:88:40:b1:1b:e6:a0:9e:81:c9:
         8c:7b:e0:e3:04:e0:38:49:e5:69:49:49:de:bd:89:6e:a1:38:
         c8:d6:89:2d:39:45:22:85:1a:71:bc:4e:69:5c:67:b4:8b:b4:
         78:d2:5a:02:cc:b2:49:7e:4b:07:b6:66:5d:3e:8f:57:92:e2:
         57:78:9a:76:83:af:f3:21:49:d3:d6:95:57:61:d8:2f:62:f6:
         73:36:54:6e:22:2d:91:33:32:ce:09:a2:29:c2:05:95:8d:fe:
         ca:c6:b1:12:ba:0f:de:0a:05:57:9b:15:a1:8c:4f:99:6a:8c:
         2b:ae:ab:21:9c:3e:fd:08:f2:f2:3f:e6:62:f8:62:14:ea:61:
         1f:93:29:c8:60:51:76:72:86:91:62:fe:e2:f1:d2:af:e4:e8:
         c3:47:95:89:e3:2d:0b:93:77:5b:8b:79:b7:65:09:63:6e:78:
         c8:e1:70:b3:40:dd:34:a6:b7:6f:0a:82:a5:5b:73:97:7b:e7:
         e5:b2:38:78:11:1a:ef:91:79:ce:48:40:5f:a6:44:e3:aa:21:
         00:44:24:48:05:39:d4:48:4e:5f:fc:e9:ef:f8:91:0d:5e:2e:
         bb:5b:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org