Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/1667FF9C5DF611EF919BDB31C4F9AE02.roa
File:                     1667FF9C5DF611EF919BDB31C4F9AE02.roa (raw, json)
Hash identifier:          fo6rQUcXbnI8NE4rYd/pMMgxfYxJbyDcHENy4xKaHcs=
Subject key identifier:   66:26:40:76:1F:C8:CC:2A:C7:D3:00:B6:88:EC:73:60:C5:F9:7D:EE
Certificate issuer:       /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial:       0B47
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/1667FF9C5DF611EF919BDB31C4F9AE02.roa
Signing time:             Mon 19 Aug 2024 06:41:39 +0000
ROA not before:           Mon 19 Aug 2024 06:41:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149419
IP address blocks:        45.117.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
                          rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
        Validity
            Not Before: Aug 19 06:41:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66c2e923-8693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:a9:3c:24:bb:2c:ea:49:77:b1:d2:a0:6c:
                    b5:32:d0:01:f4:a1:0a:f8:8f:96:c4:e1:2f:ee:f2:
                    86:6c:a6:ec:18:66:69:ba:82:4c:f0:33:4c:c2:3f:
                    5f:be:c2:3e:fb:ee:a0:10:95:be:27:ef:5b:1e:93:
                    cd:a3:58:77:7a:16:b2:88:f8:91:c0:5e:c4:b8:c9:
                    27:6e:58:08:12:9c:28:92:16:84:b8:27:5d:0e:e7:
                    57:7d:34:c5:38:60:eb:a3:c4:b4:fe:a1:6a:8e:55:
                    cd:e9:e5:54:09:17:bb:d3:a1:e5:49:0c:23:06:41:
                    a2:90:a8:7b:8f:b4:69:30:59:65:6a:ac:d6:a0:83:
                    16:d8:8a:7e:97:37:e7:c8:dd:10:0d:55:ba:7e:1d:
                    f2:67:55:b4:79:f3:f4:02:c1:69:41:c9:84:03:8c:
                    94:a1:fb:c3:36:0a:48:50:12:e2:82:98:88:df:02:
                    21:5f:58:22:92:d2:14:6a:22:29:b6:a4:1c:42:fd:
                    67:59:4a:13:4c:31:e1:88:eb:82:05:51:23:18:b1:
                    a8:25:f5:cb:74:00:b9:60:f9:7f:f7:64:03:c9:05:
                    97:bf:ad:65:d1:0c:a1:50:68:af:a1:ca:ed:e3:6d:
                    0f:ea:ff:49:28:23:10:ba:6c:6e:83:bb:b9:5c:77:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:26:40:76:1F:C8:CC:2A:C7:D3:00:B6:88:EC:73:60:C5:F9:7D:EE
            X509v3 Authority Key Identifier:
                keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/1667FF9C5DF611EF919BDB31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:21:b5:f0:25:62:7e:b2:3b:f1:0a:fe:54:c4:e9:e8:e0:
         87:d4:25:9b:1a:73:e3:03:6b:b8:79:d9:2a:3d:5b:0a:54:d2:
         0d:46:04:5d:a2:2b:58:39:02:3b:32:d4:0c:d4:45:8e:3e:a1:
         c4:f5:53:5d:be:68:c0:df:10:69:5e:81:cf:ae:ed:db:45:de:
         b4:b8:35:4a:8a:fc:92:b1:cd:32:f4:b4:5a:b9:c9:62:58:03:
         14:2e:21:c5:a8:a8:d6:0c:e2:9a:1d:0b:27:9f:bf:54:2b:86:
         e4:4d:ff:a9:77:5f:23:04:b8:46:6e:0d:22:68:53:f2:61:7b:
         19:28:87:33:73:c8:2f:c8:8a:e0:a8:c5:da:ff:53:e3:bf:de:
         9e:bd:4b:27:68:7e:f6:83:60:a1:5e:64:e5:1f:7e:5e:83:e9:
         d7:2b:06:22:59:08:ea:79:9d:5a:c4:ef:91:61:e4:35:c0:85:
         ca:2d:f8:48:5d:da:f4:03:d4:3b:d5:8a:c9:eb:bc:77:b2:95:
         0a:79:4c:dc:2d:bc:58:27:87:7d:3f:cd:7a:7d:80:50:15:cf:
         36:4f:b6:ee:79:69:29:f9:98:31:ba:e9:26:b1:67:47:ca:d8:
         1a:6b:1d:e4:46:79:ca:f2:d9:7c:b6:fe:8c:67:8b:7e:60:df:
         bd:94:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org