Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
File:                     D44C47FE91D311EBBE8C7D54C4F9AE02.roa (raw, json)
Hash identifier:          c2XK07fkTtqrWcB4fZ5IJUYP88fXxA7EytLu8uCG7Fk=
Subject key identifier:   65:31:54:E9:29:84:55:74:0C:BA:94:04:12:72:8C:D4:7F:43:EC:4D
Certificate issuer:       /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
Certificate serial:       0586
Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
Signing time:             Wed 05 Jun 2024 01:05:10 +0000
ROA not before:           Wed 05 Jun 2024 01:05:10 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58666
IP address blocks:        202.12.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl
                          rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE
        Validity
            Not Before: Jun  5 01:05:10 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665fb9c6-55e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:04:48:08:b5:59:29:4a:82:ae:83:9f:72:
                    ee:7b:2f:54:d4:29:6e:0a:95:5d:c4:3b:62:62:f2:
                    bc:f2:6b:65:78:1e:d9:2e:4d:89:06:2a:c9:e4:ac:
                    91:87:f5:b2:10:63:17:63:be:3a:52:80:a5:f1:b2:
                    5f:06:be:3c:c2:fb:ba:53:d9:b1:a1:d7:cb:e7:8c:
                    4e:4a:d6:91:d1:8d:a4:3f:3b:3e:f4:aa:7e:77:13:
                    9e:73:be:08:18:67:1e:da:72:6e:d2:ce:d9:d8:39:
                    bb:ff:08:20:20:39:cd:81:74:6d:b7:74:de:e4:4b:
                    f4:15:dc:c2:5b:c7:96:71:5d:c7:85:b9:df:24:e2:
                    80:43:ed:61:ed:a5:9f:e4:8c:27:d5:73:14:0b:80:
                    91:a5:44:88:2c:ff:78:82:62:b2:a9:9b:6a:0f:cc:
                    dd:fd:c9:48:77:af:7f:08:cc:e6:cd:b2:90:ac:e6:
                    6b:54:b8:5e:92:a6:e3:e8:04:d8:f9:99:af:9a:57:
                    d4:92:dc:b9:7b:df:62:93:e3:0a:e2:fc:21:60:35:
                    82:b3:77:22:56:48:9e:a4:8e:3f:8d:45:0e:e9:4f:
                    a1:66:65:e4:3b:3f:ad:08:ba:e1:3c:4d:3d:86:64:
                    9c:5e:6f:a3:b5:fa:67:b6:4b:e3:49:34:26:30:23:
                    3e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:54:E9:29:84:55:74:0C:BA:94:04:12:72:8C:D4:7F:43:EC:4D
            X509v3 Authority Key Identifier:
                keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/D44C47FE91D311EBBE8C7D54C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:23:52:58:85:79:ae:df:a3:6d:16:03:8f:58:a3:9f:d9:
         df:4d:54:9f:8f:5e:72:b1:c2:c9:31:e4:ee:d5:c5:f7:fc:59:
         65:3a:c6:fa:aa:80:bf:c1:62:06:ad:ce:ac:ba:24:96:ed:68:
         f9:87:0e:2c:ca:d7:ed:79:b5:f8:87:a2:53:e5:7d:f8:78:08:
         54:76:fc:5c:ee:7e:65:e3:3e:cb:5b:fe:35:48:5a:a0:2d:d7:
         27:d9:b1:e6:18:66:8c:2e:60:60:8c:fd:5d:9e:37:42:f6:8e:
         b5:22:2c:88:a5:de:b8:08:f7:7c:b0:0d:9f:24:27:dd:2e:07:
         1c:ec:45:53:a1:2e:f7:4e:3e:5f:a7:73:67:26:8a:56:9c:5b:
         30:bc:db:4b:36:64:62:59:40:8b:78:12:c9:0f:30:e8:be:a6:
         d4:64:22:60:ba:da:23:cf:86:5e:8b:22:27:e5:c8:51:c0:ef:
         21:b8:40:81:63:59:25:26:ec:d3:d6:77:93:cb:e9:f2:78:b2:
         ba:3d:0a:f9:e8:a0:44:20:b7:9d:47:df:64:45:81:0c:73:64:
         57:35:2a:3f:b6:69:2b:7e:55:7a:8c:5f:b7:81:56:27:bc:be:
         0f:3a:92:a8:50:7f:2b:cc:19:f9:03:2b:7b:36:66:35:df:31:
         15:50:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org