Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
File:                     424FB76E5B7811EB8259662FC4F9AE02.roa (raw, json)
Hash identifier:          EJI4ug1GxHVvqHvhL7mhbfrhtlrgIdYMjKZFuSdZ1RI=
Subject key identifier:   46:F7:C2:37:9A:E3:AA:E4:F4:3E:89:7B:B3:A5:21:BA:8E:BB:60:C6
Certificate issuer:       /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
Certificate serial:       0714
Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
Signing time:             Tue 24 Sep 2024 22:11:27 +0000
ROA not before:           Tue 24 Sep 2024 22:11:27 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     56089
IP address blocks:        202.0.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl
                          rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD
        Validity
            Not Before: Sep 24 22:11:27 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66f3390e-4673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:17:03:82:08:8a:c0:8a:ae:98:9b:76:f5:
                    9a:d8:97:1d:8c:e2:7d:c0:4e:cb:7d:3c:c9:6c:c7:
                    a7:9c:da:c1:85:4d:ad:e1:3c:d8:f9:d6:74:af:a3:
                    19:7d:76:d4:ba:08:52:fa:c4:ad:3e:55:3f:b0:c5:
                    f9:48:23:4a:d0:20:8e:8b:1b:e9:0a:ea:61:94:05:
                    d8:03:d1:9f:73:b1:c5:e0:18:6c:99:95:0c:3f:c5:
                    e3:fd:ea:c0:03:aa:21:28:ac:d3:2c:a0:24:11:60:
                    a8:10:e0:a8:1c:e7:ae:98:6d:9f:07:a2:4c:96:78:
                    cf:e8:5f:66:f8:26:4d:db:13:0e:b7:61:a8:4b:65:
                    ae:fc:e6:5e:40:55:1a:01:c9:ef:79:40:3d:fb:48:
                    e8:e0:fc:34:38:8d:9d:34:ea:55:f6:be:b6:92:a6:
                    6e:2a:3c:c5:07:30:c1:3d:7b:d5:e8:7e:5a:f4:14:
                    b4:4b:7b:84:7d:1b:28:00:28:ca:73:14:70:9e:70:
                    7b:1e:d6:af:63:61:f9:a2:92:de:2a:36:b6:c2:fb:
                    73:e3:55:ab:d4:13:fc:79:6f:fb:c0:8e:8b:72:56:
                    4f:9c:87:22:00:70:eb:d5:12:25:a5:5d:a1:96:0b:
                    e6:9e:1c:80:a4:e0:1f:e7:f4:7b:98:d2:c1:93:8c:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:C2:37:9A:E3:AA:E4:F4:3E:89:7B:B3:A5:21:BA:8E:BB:60:C6
            X509v3 Authority Key Identifier:
                keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/424FB76E5B7811EB8259662FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:95:91:be:b2:d1:4c:6e:8c:38:68:b6:15:09:26:f0:18:
         f9:6e:fa:96:ea:67:73:f8:e3:11:ba:42:1e:96:54:34:73:fd:
         5c:2e:27:fe:0f:fa:14:fe:f8:34:06:c5:60:2c:a7:65:48:5e:
         50:3c:ef:bb:6b:92:a1:05:6b:5c:6f:1c:3a:e6:75:cd:68:16:
         b4:f1:7d:b3:3c:71:be:b7:37:94:a6:6c:8c:10:4d:26:84:3c:
         c3:16:d0:55:cb:6e:f4:36:aa:98:d3:ad:ec:66:db:e3:9d:4a:
         d7:9a:df:08:1e:aa:d1:60:55:3f:65:78:61:a5:d4:70:0b:4d:
         e7:2b:ca:84:4f:69:c8:ab:f8:19:fd:36:db:bf:7d:29:eb:81:
         51:ce:0f:08:90:34:f7:1b:c6:a3:11:9b:d8:5d:f3:82:c7:e6:
         24:e7:10:79:c9:2a:80:7c:e7:b5:2d:1f:82:ef:34:ee:1c:fd:
         4c:e5:46:9c:80:06:89:fe:9f:ac:96:ae:5e:a0:7e:8e:fe:ac:
         1c:06:97:74:6d:17:6a:59:b1:83:f3:3c:e4:29:9a:cf:6e:9e:
         22:36:e7:38:d1:ca:15:4a:66:73:74:fd:36:65:d5:4d:40:f1:
         14:e4:17:e6:44:94:a1:2f:7e:5a:ed:c3:ef:ec:b3:bd:90:10:
         62:ff:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org