Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
File:                     A7AD52CE961811EDB002DB30C4F9AE02.roa (raw, json)
Hash identifier:          xjLVvucx6vcVI0+/P6AL7ptJJFqY1vehjG2K8ApiOdc=
Subject key identifier:   CC:D5:0A:06:73:39:D9:28:50:54:CA:9F:3B:57:15:76:E3:DC:8C:E7
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3538
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 14:40:34 +0000
ROA not before:           Sat 02 Dec 2023 14:40:34 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     4652
IP address blocks:        122.155.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 14:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Dec  2 14:40:34 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=656b41e2-1f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:a2:79:f8:f3:8b:e3:76:a0:2e:e9:3c:7c:
                    3d:f3:77:fb:fd:0d:b0:29:c2:75:c6:c8:20:65:e7:
                    f7:31:02:3d:b1:b9:2d:d4:cf:f8:b2:6e:5c:8e:e7:
                    fc:e8:12:07:f4:27:b5:99:f4:d5:55:38:41:09:14:
                    94:8f:2b:85:5f:fb:a6:ee:35:d2:72:46:68:c2:e7:
                    60:e8:5f:c5:7e:f2:d7:e9:a3:32:4e:a9:28:bd:a5:
                    19:b9:40:d3:56:e7:d7:28:38:ea:40:ef:39:cb:95:
                    32:0c:1d:8a:15:e5:25:b6:aa:61:86:c6:5d:0f:21:
                    6a:ba:a9:e4:ef:9d:6a:f3:db:e6:f2:c9:42:f4:7e:
                    50:e4:50:5c:82:8e:8a:2a:a6:48:88:8e:88:be:5f:
                    ff:97:3c:50:e8:5a:6c:33:6b:a8:02:ba:51:ba:9f:
                    5c:cf:4a:70:18:4a:46:f5:0a:ab:e5:f8:54:d9:d4:
                    7c:7c:c0:b1:8c:98:14:79:41:e8:2c:68:da:dd:a0:
                    e3:03:6e:5f:af:0c:32:7d:c0:d8:00:ea:0c:2c:88:
                    2f:ce:09:d3:80:79:dd:1b:2a:03:7c:e1:4c:f4:84:
                    e8:d7:bf:c2:41:f4:3a:15:93:0c:b5:86:1b:65:7d:
                    50:93:30:3a:28:59:9f:f5:11:c7:e3:7d:e3:6a:98:
                    b3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D5:0A:06:73:39:D9:28:50:54:CA:9F:3B:57:15:76:E3:DC:8C:E7
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/A7AD52CE961811EDB002DB30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.155.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:a9:4c:9a:51:4e:ac:fc:a6:45:06:47:95:72:c6:ed:04:
         ab:b2:eb:04:9f:04:f4:6b:f2:5d:10:fb:1c:1e:b1:08:7c:07:
         59:84:1c:5f:63:66:77:38:c8:53:5d:48:e6:99:f6:f6:fd:1d:
         e7:5a:27:da:ca:0f:ca:25:78:67:33:1d:93:c3:a1:88:e4:1f:
         1b:5b:b8:29:c5:1e:4a:25:04:58:5d:e9:b4:e2:e7:a2:1b:da:
         a3:52:e1:ae:b7:eb:95:ad:cf:80:82:85:47:ef:3f:a7:1d:47:
         09:5e:66:6a:30:ad:51:f1:5b:cb:ac:27:b9:08:a5:fe:b1:f4:
         96:4e:c9:d9:9a:bb:33:68:a4:c3:cd:bb:66:d8:d7:33:6d:4b:
         f1:84:13:a7:48:74:0a:fe:a4:13:91:67:fc:41:f6:9d:5e:56:
         d6:3e:6c:e5:2a:be:ef:a0:72:6e:ae:18:6f:b4:58:fb:28:73:
         dc:65:da:5e:c5:ab:35:19:5e:09:66:84:88:80:8e:d4:8a:15:
         56:bd:3d:80:f2:fa:04:2b:fc:95:68:89:3c:cf:26:06:96:21:
         7d:81:97:6a:cb:a0:71:f0:e3:e4:95:ff:33:57:fe:fa:cf:5f:
         bb:17:b0:47:9a:8b:f7:3b:7d:64:37:7a:d7:a6:05:8f:b6:e4:
         c9:e6:23:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org