Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
File:                     34AB2020902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          PaXTXpKBx9czLyVK9oTxpyG5GB4Ul44qFB3bGHyXRlg=
Subject key identifier:   C2:43:24:F1:47:30:2F:08:EB:DF:F9:77:1D:01:E9:5A:CD:0D:01:B1
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3525
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
Signing time:             Sat 02 Dec 2023 14:40:18 +0000
ROA not before:           Sat 02 Dec 2023 14:40:18 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     133888
IP address blocks:        122.154.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13605 (0x3525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Dec  2 14:40:18 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b41d2-31cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:54:d1:8a:7f:be:97:e3:49:67:5a:59:95:
                    2f:c9:84:5c:ed:39:48:89:99:3b:f6:d7:04:12:69:
                    bc:15:cb:fb:4f:2a:af:f8:df:a9:3b:2f:8c:a8:d8:
                    a1:da:af:68:91:60:48:09:fc:ad:1a:4e:0d:5d:5f:
                    65:b9:cf:8f:a1:90:36:b5:40:d8:f2:83:76:b8:3a:
                    88:f0:01:d5:9d:20:4f:85:11:7c:66:81:f1:08:e6:
                    72:ec:35:f3:74:6f:c7:b6:1d:c3:d2:ba:dd:10:05:
                    1c:ef:ed:8a:7a:79:38:85:94:0e:0b:2b:32:0f:c7:
                    83:e1:36:2a:12:b2:d3:34:af:ef:d6:01:28:18:f6:
                    9d:cd:c7:15:0c:ec:da:ef:15:54:1c:1b:91:c1:f9:
                    58:cc:17:2b:34:9a:8e:80:77:07:0a:9b:ce:1f:99:
                    7d:f7:a6:2d:76:25:4f:8d:b3:7b:e9:16:c0:8e:e6:
                    cc:11:06:7b:fb:95:8a:8a:29:54:64:ee:bb:6f:14:
                    d9:4c:83:96:f7:69:99:22:72:04:0c:ee:7f:8f:9a:
                    48:85:ad:ea:77:75:48:b4:e7:af:ec:55:ff:c2:85:
                    e2:49:1c:83:42:eb:b5:74:48:d6:77:98:22:eb:2c:
                    bd:42:a8:3e:11:3f:35:a4:90:f7:49:2b:01:77:45:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:24:F1:47:30:2F:08:EB:DF:F9:77:1D:01:E9:5A:CD:0D:01:B1
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:96:c1:46:de:3c:f8:e1:30:1c:2f:02:ae:5c:ad:6b:49:
         24:91:5e:bb:d3:9b:63:de:c9:ef:0e:94:f3:7c:7c:14:53:58:
         37:b4:c8:4a:c7:ef:b5:d1:25:be:3c:e4:1b:2a:08:34:75:dc:
         ce:d1:ad:a3:a7:6a:f1:a0:29:73:d0:78:49:78:3b:2c:93:22:
         44:44:22:60:3a:a4:cf:bc:41:9e:50:67:73:06:8c:f1:c5:a6:
         1f:c3:08:1a:35:a1:f7:9c:b3:92:ba:e2:7d:62:c6:45:d9:3b:
         be:26:44:b4:dd:4b:f1:7b:37:4b:06:5f:d5:47:5e:26:cf:a0:
         a7:29:88:f9:a7:27:1a:a5:07:df:88:3f:5a:a9:aa:c3:e5:f6:
         47:5f:eb:cb:ff:70:20:b8:2f:4a:f9:29:da:72:14:0d:bf:17:
         d3:b0:8c:33:ff:51:bf:10:cb:a8:a3:be:8a:90:34:50:67:d0:
         40:63:c0:e9:fe:8b:32:e0:45:11:e2:f0:91:2f:00:38:23:aa:
         ce:31:f2:cd:72:ff:c5:1f:3e:31:fc:2b:11:09:98:ef:06:6f:
         d8:36:56:0c:a5:73:0e:fb:4d:d7:7a:54:91:b6:11:ca:91:17:
         74:ad:bd:44:c3:28:a9:5a:eb:1b:6d:d2:56:1d:31:54:bb:cc:
         49:e0:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:23 2024 by rpki-client on console-fra.rpki-client.org