Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/37E946F4902C11EA898EFD7FC4F9AE02.roa
File:                     37E946F4902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          k5hwToFGF2YVUVlYfpHmB3V0k3Woizg0namGJUOkl9g=
Subject key identifier:   D3:CB:AE:4C:93:E9:3B:FC:16:1F:15:6E:91:A0:4A:52:8D:94:50:D1
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       363C
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/37E946F4902C11EA898EFD7FC4F9AE02.roa
Signing time:             Mon 02 Dec 2024 14:30:32 +0000
ROA not before:           Mon 02 Dec 2024 14:30:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     140572
IP address blocks:        110.78.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13884 (0x363c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475
        Validity
            Not Before: Dec  2 14:30:32 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674dc487-c013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:7d:30:95:fe:18:e5:55:28:2e:e9:70:aa:
                    ce:ef:35:92:74:00:e7:75:90:ed:ab:8c:b1:68:be:
                    4a:7d:7b:73:08:9f:6b:37:e6:b4:db:96:0f:56:34:
                    ac:f4:5f:f0:f8:3b:38:0b:5c:30:b6:ec:57:e1:26:
                    e1:39:b2:8c:ca:2b:61:2f:10:c1:a6:08:e2:8b:79:
                    74:df:76:4f:08:53:0f:dd:cf:9e:1a:44:6e:8a:27:
                    a3:88:bf:f5:0f:3f:51:25:56:76:91:c4:35:26:64:
                    2f:b9:a0:45:5a:e4:d7:11:59:0f:c8:1e:1d:81:af:
                    7a:f6:27:36:1e:4f:bb:66:a9:52:c9:6c:eb:b0:56:
                    4a:f3:be:0c:07:06:cd:42:11:92:63:1c:5b:b4:14:
                    6a:99:1c:f0:ca:06:4d:b4:ff:9c:8a:1d:4f:9a:91:
                    f5:48:17:b8:6f:80:92:50:66:8e:f8:3d:64:49:3f:
                    e3:a6:b5:47:92:4e:49:22:58:f6:64:f5:6f:ea:90:
                    2e:f4:4f:c1:57:e3:c6:ad:e1:41:0e:25:6b:a8:54:
                    8c:ea:b6:82:ad:06:ac:d5:35:28:99:79:a9:05:18:
                    e4:d2:66:b2:1a:ea:08:ff:26:e0:93:4a:c2:c8:48:
                    80:a8:39:8c:b3:d2:df:7e:19:f3:03:ed:23:b4:a8:
                    9d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:AE:4C:93:E9:3B:FC:16:1F:15:6E:91:A0:4A:52:8D:94:50:D1
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/37E946F4902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.78.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:cb:54:ed:b9:ce:13:07:fe:c9:1e:35:46:6d:13:1c:5e:
         81:77:33:00:fa:df:92:7f:ab:de:71:08:d6:ce:23:ff:3a:80:
         e8:15:e4:4c:66:27:f4:ae:0a:86:1d:b7:19:b5:1f:84:9b:b6:
         7b:9d:57:9b:b0:41:0a:c4:56:16:80:4d:71:f8:27:97:97:09:
         e5:87:9e:02:56:61:af:89:c4:96:ba:2c:c0:5a:a9:d5:30:a5:
         35:c2:f5:24:4b:bc:32:b4:c3:a3:9c:f8:e6:0d:1c:32:f7:ec:
         cc:ec:70:e2:1d:78:a9:be:18:08:9e:e2:c8:30:dd:c3:cf:c2:
         cc:8b:f1:7e:b3:07:26:88:cd:8d:a1:73:3d:95:11:20:dc:bd:
         cb:c0:f2:aa:6f:3b:90:a1:22:d9:d0:82:9b:10:ea:03:ac:1b:
         4e:3d:6c:6a:80:b5:e3:85:22:69:4d:b8:a8:de:d8:aa:67:b4:
         26:2f:88:ab:a1:50:cd:6b:ea:44:3b:14:dd:d0:31:37:6f:0f:
         15:49:4d:fb:c3:cd:07:d4:70:15:70:73:16:b2:00:1e:7a:0a:
         f7:cf:26:70:e4:76:eb:22:02:d4:34:40:c1:a2:2b:05:c6:f1:
         80:17:bc:96:04:6e:a8:aa:ee:5e:bc:32:b6:33:d8:57:5b:a1:
         1d:7d:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:37 2025 by rpki-client