Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/816B5C3685AE11EB82E3AB17C4F9AE02.roa
File:                     816B5C3685AE11EB82E3AB17C4F9AE02.roa (raw, json)
Hash identifier:          GP8lqrReYXIV3gUufw5Ei/fnvPj5Z7P+4RCKds9htH4=
Subject key identifier:   5D:2F:9A:7E:0F:D4:34:34:77:65:EA:0C:33:38:67:31:5B:FC:F1:39
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       352D
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/816B5C3685AE11EB82E3AB17C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 14:40:25 +0000
ROA not before:           Sat 02 Dec 2023 14:40:25 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141692
IP address blocks:        122.155.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13613 (0x352d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Dec  2 14:40:25 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b41d9-72bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:81:72:56:cb:e8:27:04:de:3e:d7:28:da:
                    2a:f2:0a:d1:56:a3:05:ba:e5:c6:64:0a:d9:cd:6b:
                    ee:a4:76:1b:3b:61:55:76:06:ea:a8:4d:57:aa:d9:
                    8d:30:a3:f0:ce:c3:b5:07:5c:e8:2e:7e:e7:3c:f1:
                    1e:a8:a4:bf:4e:b6:77:b9:61:19:f2:3b:1e:c1:29:
                    30:e0:cc:2c:bf:34:b5:21:26:ea:50:05:a2:b7:f7:
                    df:0a:10:76:8b:e0:1e:5d:9e:af:87:45:4d:eb:11:
                    d7:3b:d2:0e:f8:1b:4d:41:51:81:2e:94:30:ed:50:
                    51:5c:f2:80:7c:bf:ef:af:05:7d:f4:20:8d:06:ca:
                    43:11:66:43:8d:d0:38:f9:c3:7b:d1:27:ba:f9:2e:
                    9e:a7:69:fa:b7:39:06:f0:33:66:f6:49:56:58:aa:
                    a0:24:02:4e:e7:4d:6e:fc:b8:26:1e:ef:49:0e:d5:
                    65:15:87:0c:83:ec:f0:16:32:de:d6:b8:21:b3:80:
                    8f:c2:5e:57:4c:7c:63:ac:c2:8f:e4:81:91:8a:6c:
                    91:fd:0c:c9:2c:2d:d2:d9:1f:fe:51:e2:77:46:a1:
                    30:8a:50:6a:53:d4:88:67:d9:d9:94:5b:0e:f1:c9:
                    13:2f:95:0c:98:fe:a8:8c:52:53:9e:09:d8:f7:2e:
                    a9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:9A:7E:0F:D4:34:34:77:65:EA:0C:33:38:67:31:5B:FC:F1:39
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/816B5C3685AE11EB82E3AB17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:56:28:be:35:ab:3e:ec:41:11:5e:e0:55:92:9f:95:a5:5f:
         60:c0:c6:37:18:c3:d8:ba:ce:34:2d:49:24:8b:30:2f:8f:de:
         89:fb:e5:f6:ec:17:c4:a7:3f:35:87:eb:06:15:8c:61:a7:5e:
         3f:cd:35:1c:27:55:36:b7:77:14:d6:db:95:a4:cb:8b:24:c5:
         c0:89:c6:bf:68:41:ba:ad:ef:19:df:35:8c:be:88:07:d9:45:
         d3:90:26:08:cd:72:3b:ec:1a:09:19:c6:f9:8d:65:22:79:72:
         4a:c3:34:69:ed:61:0f:c3:f1:2c:52:0e:ee:82:c7:9f:01:9f:
         57:34:c9:90:f0:17:d8:11:a1:35:e3:8a:df:ad:6a:c6:4d:25:
         eb:19:4b:9d:82:fa:15:ba:45:e4:7d:48:2b:34:31:09:a0:80:
         de:0d:3d:14:8b:a7:f9:6f:8b:c7:d5:55:26:e5:58:f0:d5:1a:
         1e:c3:7f:86:8d:ab:62:db:c8:84:b6:39:06:1e:d1:5a:93:bb:
         1a:2a:90:f9:87:df:0e:03:7d:75:5c:8f:6d:ae:ed:03:e7:7f:
         6a:ef:a9:06:5f:43:3f:05:12:2f:34:c8:6a:a3:6d:ff:e8:60:
         54:2f:18:05:c7:ba:7f:38:33:23:86:cb:a1:67:d8:a5:bc:0f:
         44:9b:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 16:14:30 2024 by rpki-client on console-fra.rpki-client.org