Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
File:                     FC34967C6C8611EFBF35D221C4F9AE02.roa (raw, json)
Hash identifier:          G1lTUu7s0Hz0OetsmalfJRrMuspiHo7DXFGeTObrtUM=
Subject key identifier:   C8:38:CA:9B:E1:FC:1A:3B:CE:EE:5F:B5:33:F4:AE:CC:7E:E0:51:F5
Certificate issuer:       /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
Certificate serial:       AA
Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
Signing time:             Fri 06 Sep 2024 19:34:08 +0000
ROA not before:           Fri 06 Sep 2024 19:34:08 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     45691
IP address blocks:        202.47.187.0/24 maxlen: 24
                          2001:df3:25c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl
                          rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 03:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7
        Validity
            Not Before: Sep  6 19:34:08 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66db5930-393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:01:9f:75:cc:dc:95:ad:0d:97:6e:8a:4c:ce:
                    0e:2a:2d:a3:30:cd:b0:75:67:bd:20:c1:20:11:ad:
                    a7:c7:dc:0a:aa:ea:ef:00:c7:d6:c1:2b:5a:0d:cc:
                    1a:53:8e:86:9a:c4:f9:a5:a9:40:7e:69:05:5e:d8:
                    ae:e4:6b:e3:34:ee:3c:78:fa:87:b1:bf:39:a1:37:
                    2a:22:b6:8f:c9:f8:04:ed:d8:ea:38:9a:9f:01:5d:
                    76:54:11:07:c1:de:3f:ba:b6:e2:95:49:c2:ad:e9:
                    e2:f8:59:60:59:b9:63:e0:49:2f:26:44:ad:de:8c:
                    ac:8b:f6:82:90:b6:8e:c3:2d:52:db:38:7c:ae:e1:
                    63:8d:ec:6b:41:08:2a:66:53:88:9f:04:a3:d1:8d:
                    09:57:b4:6d:b6:5f:7a:25:ff:9a:62:90:4d:36:64:
                    2c:3c:ee:a5:70:3f:1a:e5:91:33:4d:c2:03:45:dc:
                    5f:f8:c2:97:a7:4c:e5:80:95:31:09:f0:d5:7c:38:
                    9c:7a:4d:de:b7:c9:08:2c:d6:94:9f:7c:cd:f3:f7:
                    02:d9:98:1f:a6:f6:0c:c9:48:a1:10:9e:7a:d4:5c:
                    2d:8c:39:89:30:de:fc:d8:4d:f0:96:c1:7a:18:4e:
                    be:67:9e:ea:95:f6:c8:0c:3e:0e:69:ed:34:8a:2e:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:CA:9B:E1:FC:1A:3B:CE:EE:5F:B5:33:F4:AE:CC:7E:E0:51:F5
            X509v3 Authority Key Identifier:
                keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/FC34967C6C8611EFBF35D221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.187.0/24
                IPv6:
                  2001:df3:25c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:99:7c:6e:07:c9:bc:42:08:22:33:35:80:6f:5a:85:b2:b8:
         68:74:2e:bf:7d:74:99:db:de:71:ad:1c:7f:49:38:85:5a:7b:
         8d:c0:90:de:e5:dd:61:1f:df:c3:93:21:d3:bb:77:8e:43:f0:
         34:51:39:24:d2:e0:d3:fb:63:f6:20:8e:1a:18:0a:34:ab:57:
         a4:0c:af:12:72:3b:95:ed:1c:eb:3c:c5:5c:30:33:83:7f:50:
         91:3c:14:60:a5:da:c3:df:d7:a2:b3:66:43:77:47:af:85:65:
         74:4c:d6:81:93:2c:b8:46:71:88:a5:38:0c:3d:33:d4:a4:3e:
         1a:72:70:b7:5e:06:bc:df:23:15:18:2b:17:c6:3d:6a:fc:57:
         87:64:7c:d4:17:11:03:3d:a7:41:a2:ba:4c:bf:4c:3e:16:76:
         d5:a1:bd:b8:8e:39:75:ed:1a:4f:3f:a3:38:a7:b8:0a:82:8c:
         57:5a:8c:35:49:cf:b7:d8:6f:f9:79:b6:0a:f1:ce:80:b8:e7:
         c0:38:7d:e8:fc:3c:1f:a0:a9:de:6b:44:af:4b:c9:8b:0a:92:
         1a:04:20:b5:7b:c7:7e:0a:37:58:dc:1d:0d:2f:9c:0a:14:29:
         7c:47:e1:dd:87:af:6d:72:00:5f:e0:30:1b:a1:9b:0f:ad:fb:
         ba:e6:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:52 2024 by rpki-client on console-ams.rpki-client.org