Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/75215386652A11EF8B5EB953C4F9AE02.roa
File:                     75215386652A11EF8B5EB953C4F9AE02.roa (raw, json)
Hash identifier:          VsF6mP7a/GSIQ7I2UEu/NtkZYfH3IqoObHXoyPSC370=
Subject key identifier:   3C:63:04:12:36:11:C3:4D:2A:E2:9E:9A:AC:8C:37:51:AD:7E:2A:50
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3648
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/75215386652A11EF8B5EB953C4F9AE02.roa
Signing time:             Mon 02 Dec 2024 14:30:42 +0000
ROA not before:           Mon 02 Dec 2024 14:30:42 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     45806
IP address blocks:        61.7.193.0/24 maxlen: 24
                          122.155.68.0/24 maxlen: 24
                          122.155.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13896 (0x3648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475
        Validity
            Not Before: Dec  2 14:30:42 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674dc492-8329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:48:de:24:d8:59:f0:37:ee:2f:6d:59:d9:64:
                    48:07:90:35:e6:68:9b:9d:23:f7:20:36:07:80:93:
                    0e:b9:e6:76:6d:44:17:d0:e4:7c:9e:78:ae:37:49:
                    ef:7c:9b:33:4a:b8:f1:02:05:df:b0:90:6d:93:46:
                    84:99:f0:76:84:fa:f5:aa:28:91:52:82:27:55:65:
                    47:17:79:3b:4f:40:03:f5:c8:3f:dd:67:36:20:ec:
                    9f:78:3b:a9:15:75:74:bc:35:72:e7:ce:e0:86:83:
                    c2:c3:a7:1c:b0:1c:c1:30:0b:9f:2f:d8:41:d3:c4:
                    5a:d1:ad:7d:1d:b8:bb:f3:35:d7:8b:87:99:c6:7a:
                    7d:c6:8c:56:6f:de:3d:0e:37:2f:23:d6:56:51:19:
                    04:39:6d:d7:ce:7d:b0:77:18:45:93:99:8b:35:45:
                    fc:d0:8f:59:d9:25:57:b7:47:d9:e7:60:2f:bb:e9:
                    e1:8f:9f:21:93:53:a1:96:4e:fa:4c:1a:57:e3:97:
                    bd:f4:0a:cd:d9:ea:3c:1d:31:1c:8c:91:1a:f6:59:
                    f1:ab:c9:52:66:f4:62:c1:1f:b0:c9:2f:23:c3:bf:
                    ce:15:1c:80:11:d6:46:c2:60:21:4f:63:97:8d:a6:
                    a3:91:5d:74:b2:e1:19:d3:e0:51:e1:eb:51:b5:fb:
                    c8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:04:12:36:11:C3:4D:2A:E2:9E:9A:AC:8C:37:51:AD:7E:2A:50
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/75215386652A11EF8B5EB953C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.193.0/24
                  122.155.68.0/24
                  122.155.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:72:8f:59:07:9b:d8:b8:53:02:61:c7:e7:6b:e6:45:71:fa:
         5a:41:06:d7:a8:5c:b2:b7:14:ca:24:7e:48:62:dd:d3:b2:92:
         7e:bd:4a:a5:8b:7c:cc:14:8a:c3:7a:e6:41:0a:13:57:e3:39:
         c1:8f:39:df:c8:2e:a7:0f:f1:b8:06:f5:7b:7c:89:94:d0:45:
         f1:74:71:f0:be:9e:99:5f:68:28:5d:e5:a7:4e:89:1b:f7:be:
         27:93:69:30:2c:ff:72:69:32:ba:e4:9a:bd:d9:c3:59:e6:c9:
         cc:69:19:40:13:cf:4c:5f:6c:88:a5:48:a5:06:30:d8:6a:5e:
         c6:12:37:5d:a0:b2:56:a6:6d:4e:4d:d6:37:05:25:1e:c7:2b:
         16:ef:5d:f2:f0:a1:86:b5:27:4d:a9:3d:e0:a0:98:b6:76:89:
         10:e3:12:68:24:2c:40:67:45:f5:67:1a:48:9a:2d:8f:01:34:
         f1:f6:80:7c:0c:7c:54:2a:ff:62:a6:3f:d6:fd:ad:b9:35:02:
         4e:d9:e5:54:b0:42:6c:06:aa:c1:8d:9c:45:b0:05:41:59:a3:
         ba:79:af:74:3a:51:3f:2d:39:18:a8:ea:98:ea:c9:74:9e:7d:
         1d:5f:12:4a:42:23:68:a4:07:0b:13:db:b7:8e:31:e9:1f:78:
         ca:d5:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:44 2025 by rpki-client