Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/36BB144C902C11EA898EFD7FC4F9AE02.roa
File:                     36BB144C902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          EEdiqlF5LyBURSlyGDjt41p0t+kkRfIEuBc7ozomb5o=
Subject key identifier:   B7:40:9E:67:1D:ED:84:00:34:67:88:72:C7:C3:41:F0:3C:FF:0F:55
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3529
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/36BB144C902C11EA898EFD7FC4F9AE02.roa
Signing time:             Sat 02 Dec 2023 14:40:22 +0000
ROA not before:           Sat 02 Dec 2023 14:40:22 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     136035
IP address blocks:        122.155.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13609 (0x3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Dec  2 14:40:22 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b41d5-6caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:a6:8f:aa:b7:f9:40:31:2c:44:52:ee:21:
                    f1:f4:39:dd:0e:c4:79:89:ca:79:55:02:69:7b:51:
                    cf:e2:1b:d6:e9:3e:24:3b:93:af:d1:2e:7f:e8:03:
                    7e:ab:cb:d0:c8:86:cf:61:af:37:e6:48:11:57:16:
                    44:76:84:08:6d:6a:ea:24:cc:7c:da:1d:29:cf:ef:
                    59:2f:48:ae:7c:68:98:aa:de:de:9e:c9:d2:d9:29:
                    e9:a5:aa:0e:81:03:0d:89:91:2c:03:64:d7:c7:dd:
                    ae:ef:e7:c5:47:13:65:52:14:68:a3:86:1e:39:81:
                    c7:07:c7:4b:d0:25:28:dc:33:9f:51:b1:10:e7:3c:
                    c3:68:b2:e1:8d:1c:7e:94:1d:5a:53:f4:8e:01:d6:
                    2e:a7:9c:81:ef:2a:75:97:70:83:de:e7:c6:ab:95:
                    8f:ae:e0:7e:c7:b1:06:c6:65:f2:46:bc:63:c1:65:
                    80:53:e0:a3:06:9b:1f:3d:f3:73:6c:67:d0:ef:42:
                    f2:50:99:78:44:85:1b:fe:72:72:69:f6:4d:b6:75:
                    3e:cf:71:93:14:71:18:44:9f:52:ce:32:23:e5:3e:
                    ca:ed:4e:08:4a:05:a6:ee:5d:a3:a4:d8:6e:3c:88:
                    dd:30:dd:54:45:1e:b8:13:76:0b:94:8f:3b:bd:ab:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:9E:67:1D:ED:84:00:34:67:88:72:C7:C3:41:F0:3C:FF:0F:55
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/36BB144C902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:b5:fb:29:fe:d3:b8:92:8a:4f:d5:f7:0d:87:b1:4f:ed:fc:
         26:aa:17:54:9e:4a:89:c0:f0:49:75:00:43:df:00:6b:b7:52:
         d8:c6:65:8e:39:3f:c5:46:4b:6c:4b:48:db:9f:e9:9a:73:0f:
         d8:72:a0:f8:0a:b7:b0:2b:77:28:1c:77:3c:f8:45:d0:30:f0:
         91:62:c9:79:ae:2f:18:20:5f:15:54:60:14:f4:21:2a:cc:50:
         83:cb:84:cd:c4:dd:99:23:29:ec:36:09:15:80:5d:e1:58:75:
         b4:cf:85:cc:09:db:36:fb:e6:72:ec:71:9f:58:54:04:f8:81:
         96:b0:3d:81:2f:a6:5e:7b:d3:7d:90:38:ae:f0:08:ae:57:61:
         b7:34:b8:44:bb:4f:f6:6d:2c:34:50:5b:68:6f:6e:c4:b8:5f:
         c8:de:01:cf:a4:87:99:96:ee:e1:32:20:49:6a:8f:66:de:47:
         0c:e3:48:bb:72:14:e1:90:6c:7c:43:33:ab:c2:17:87:8a:3a:
         b3:aa:5b:26:45:60:de:cf:4c:4b:65:8a:73:15:29:0a:03:c9:
         5f:f3:6d:bb:4e:6e:22:bf:b6:83:ff:25:7f:a6:dd:68:7d:7a:
         f7:0c:68:d3:c0:da:04:11:18:37:88:55:53:80:d8:40:0b:15:
         53:3d:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org