Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/A3F7EA248C3811EEB3B35061C4F9AE02.roa
File:                     A3F7EA248C3811EEB3B35061C4F9AE02.roa (raw, json)
Hash identifier:          0XTdav9TVDkyjgzAJ3nve2FCy4YqzyvU1miDJoxWVJI=
Subject key identifier:   76:F3:91:B5:B9:36:C5:22:68:93:76:FD:97:EE:FF:2D:5C:B5:EC:9A
Certificate issuer:       /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Certificate serial:       06
Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/A3F7EA248C3811EEB3B35061C4F9AE02.roa
Signing time:             Sun 26 Nov 2023 08:48:59 +0000
ROA not before:           Sun 26 Nov 2023 08:48:59 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152114
IP address blocks:        180.94.24.0/23 maxlen: 23
                          180.94.24.0/24 maxlen: 24
                          180.94.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
                          rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
        Validity
            Not Before: Nov 26 08:48:59 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6563067b-656d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:b2:21:cf:7f:03:ec:52:e5:9e:ed:48:d6:
                    77:67:18:a1:5f:59:b3:7a:4a:d7:ac:e1:0c:c5:81:
                    2b:38:60:f8:42:50:03:04:b9:e4:8c:32:b8:ef:26:
                    2b:c4:9c:49:98:9a:f9:1f:a8:dd:2b:ca:3a:b4:a2:
                    6e:18:25:a5:a1:ce:80:5d:e2:1c:0d:78:da:6b:47:
                    95:e6:66:bf:46:3b:b6:93:b1:b5:71:11:fd:2d:55:
                    e7:cd:0e:15:d0:c2:ad:bc:84:14:85:97:0a:50:2b:
                    cd:12:23:40:c5:64:b4:29:28:22:cf:bb:6a:73:23:
                    6c:d8:44:83:67:2f:b2:88:da:d9:db:6a:a3:e3:16:
                    71:fc:55:cc:1e:54:6a:f6:10:5a:c9:d2:c2:f2:46:
                    be:b2:8d:fa:5e:2d:eb:70:2c:41:e1:75:14:ab:a2:
                    be:9d:15:88:b2:eb:a8:a4:f0:b9:0f:eb:6b:78:cd:
                    44:02:38:a4:39:46:54:62:d0:a6:1c:2d:f0:1f:c7:
                    a9:79:37:bb:0d:a9:73:ea:da:74:89:6e:c9:b2:e4:
                    a2:06:bc:26:87:e0:28:13:e0:50:c9:63:f2:a6:56:
                    22:c0:de:fe:4a:4b:9e:4b:9a:f9:8c:32:da:ca:c9:
                    a4:f0:f0:cc:86:fa:c8:f8:e8:77:4c:16:59:41:a3:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:91:B5:B9:36:C5:22:68:93:76:FD:97:EE:FF:2D:5C:B5:EC:9A
            X509v3 Authority Key Identifier:
                keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/A3F7EA248C3811EEB3B35061C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:93:61:8b:df:5c:8c:e1:61:7c:c6:c1:31:6e:6c:f1:86:
         f2:5a:9f:a9:91:2b:89:3e:28:83:68:76:ac:ef:8b:11:95:0c:
         b3:2c:c7:87:44:7d:f1:bf:73:c0:37:48:ad:49:2b:81:0d:60:
         8d:68:57:ca:eb:2f:9c:1a:9a:4d:e2:e3:60:dd:51:67:4d:b4:
         0c:f2:70:de:6f:34:1b:47:cb:3d:52:a9:35:b8:35:d2:e6:18:
         eb:ca:cf:ea:54:c1:08:e2:d2:83:5f:dc:36:84:b5:5c:e5:5f:
         62:54:56:1f:b7:ac:fb:d8:8c:63:48:aa:e3:7b:2d:7f:32:0a:
         07:e6:f8:04:cb:61:f3:87:63:5f:82:fe:29:4f:3f:41:66:8a:
         32:01:52:99:fc:67:82:e5:84:b6:9d:52:58:a2:16:2f:d1:a1:
         fa:42:e1:3a:49:dc:0b:b4:0e:1e:fa:f4:f0:dc:dc:8b:a8:5f:
         58:e0:de:8c:40:dd:f1:1d:1a:14:ec:6c:33:a1:4b:96:03:59:
         e3:a9:1e:eb:a8:e6:ca:ee:28:03:62:98:cb:45:3e:e1:6b:59:
         54:63:e4:df:ee:fd:b0:47:20:a5:5b:33:1d:62:6f:1f:e8:22:
         57:d2:4e:21:ea:e0:bc:ae:a4:ac:e2:74:b1:1c:a7:e6:61:96:
         5d:64:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org