Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/1FC8419E4B6F11EF98BA6B27C4F9AE02.roa
File:                     1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (raw, json)
Hash identifier:          5Bhb6kl3vdn8fYxxshtaRagRNNeIbPt2YFCw1ehb0QI=
Subject key identifier:   79:2E:96:4B:6B:6F:27:4A:5F:9E:E5:C8:4D:FB:49:DD:32:DB:EA:49
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       049A
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/1FC8419E4B6F11EF98BA6B27C4F9AE02.roa
Signing time:             Fri 26 Jul 2024 16:50:12 +0000
ROA not before:           Fri 26 Jul 2024 16:50:12 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     33011
IP address blocks:        2402:f2c0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Jul 26 16:50:12 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66a3d3c4-3dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:9d:14:fe:2c:e2:ca:00:42:51:44:67:43:
                    ea:4f:59:6d:c4:5e:ab:e6:d0:02:c3:85:3b:33:f7:
                    0e:c0:a7:99:94:f9:bd:b8:bc:75:f3:48:63:81:9f:
                    25:3c:db:ca:8b:0b:46:41:61:30:2f:79:6b:7f:94:
                    d1:10:4a:25:27:6b:80:a3:3a:9d:73:a2:af:36:cd:
                    3e:b3:fb:99:3a:d7:52:1d:0d:d3:bc:31:1d:bd:f8:
                    60:b0:1b:94:a2:9f:ee:f2:92:53:ab:57:12:c7:bc:
                    bf:54:ff:85:80:7d:3e:1d:97:04:82:ab:8f:f4:e4:
                    00:15:a8:08:8f:29:92:39:ad:ca:f8:14:cc:63:22:
                    f3:03:35:5c:a0:de:09:5e:4a:31:45:ac:05:fb:47:
                    4c:3c:a2:2b:dd:a3:d1:3e:62:72:b2:41:71:13:4f:
                    8e:10:fc:f5:c9:4b:a0:f3:0d:35:e9:68:34:4f:7e:
                    08:e1:f2:3d:25:a5:e5:2e:98:7a:fa:5d:40:f8:60:
                    b7:1c:81:56:b6:15:ac:98:48:09:b3:e4:6d:a3:6f:
                    34:96:38:06:43:42:65:d6:87:f6:37:64:0b:08:5d:
                    1d:85:6c:d8:9e:1e:bb:b8:2a:97:09:35:4e:59:63:
                    2d:fd:fb:a1:a1:e6:a1:00:25:12:98:d1:2e:8e:b6:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:96:4B:6B:6F:27:4A:5F:9E:E5:C8:4D:FB:49:DD:32:DB:EA:49
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/1FC8419E4B6F11EF98BA6B27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:b6:5b:c6:84:d6:5c:5d:0c:3a:02:91:ee:81:20:2f:05:16:
         a3:ba:a8:cf:d8:52:68:08:07:73:25:f7:a4:7a:ae:f0:1a:68:
         37:99:97:a6:0f:2d:8c:06:58:56:56:81:53:ec:5a:24:f2:ca:
         5f:46:15:e7:e3:62:5d:ae:ea:4d:7a:40:06:06:65:07:f7:c8:
         3b:29:a6:c4:61:3e:2a:0b:c5:f2:60:0a:82:fb:e4:bf:a5:96:
         6b:2c:97:ae:88:7f:0e:96:77:92:a4:72:56:2f:1a:11:72:8a:
         1f:37:8e:39:8b:16:2e:60:af:18:dc:17:6e:ad:a7:11:8a:96:
         2f:ad:5b:14:96:53:d8:3b:fc:ff:30:1e:73:7c:10:1b:0a:84:
         fd:02:7f:3b:95:53:ef:61:e1:22:8d:74:73:e1:c5:6d:a6:2b:
         36:40:28:76:7a:02:ba:dc:7c:eb:ff:cf:36:4a:f1:3e:a8:18:
         dc:07:9c:a5:f4:96:20:92:d3:e2:58:35:42:53:64:d1:6f:74:
         ab:d2:d4:46:8d:ec:60:bc:20:78:c1:16:31:e1:a6:73:7b:6a:
         78:a9:82:45:92:1a:0f:3a:16:da:e9:90:3d:c3:5d:6c:b4:ab:
         61:5c:0e:95:34:0e:70:4d:94:e5:67:cb:21:01:0e:d2:7f:dc:
         ac:9a:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org