Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
File:                     75CD74841CC611EEAD8F6969C4F9AE02.roa (raw, json)
Hash identifier:          0cBoK89RmbzqpaLi2uUCLcs3Qf4Q0PZ8UMqpFnbL8nI=
Subject key identifier:   0C:FC:A7:BB:03:47:A4:8C:31:EC:3F:4F:1B:69:D0:04:AE:56:F4:62
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       02B0
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
Signing time:             Wed 01 Nov 2023 03:34:26 +0000
ROA not before:           Wed 01 Nov 2023 03:34:26 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        223.29.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Nov  1 03:34:26 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=6541c742-e5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:6a:58:02:b9:aa:2b:58:97:9a:85:6a:6a:
                    c2:95:7a:56:f4:6d:32:c0:c3:c4:bf:98:4b:5a:a7:
                    e7:9d:90:e9:62:e0:eb:f0:d5:e7:a3:27:86:2e:cc:
                    11:33:52:dc:58:5f:fc:7c:1b:65:10:e1:0d:36:75:
                    c1:4b:b4:e5:3c:c6:c8:cb:82:9c:78:ef:36:08:b4:
                    a8:3e:a9:ed:12:95:35:c4:59:b0:88:b4:cc:82:3f:
                    05:54:10:aa:64:d7:b6:63:1c:ae:b1:40:94:a8:7b:
                    0d:55:27:84:8a:23:e6:b2:23:17:cd:35:a7:79:ad:
                    2b:4f:0a:d1:03:7f:94:f3:cf:fc:19:e8:7d:4a:36:
                    56:a2:fc:6c:24:91:69:af:11:be:e9:c9:c8:65:6d:
                    f0:86:b8:37:3b:f7:91:2e:43:b8:65:8c:36:bc:b4:
                    71:aa:6c:26:eb:07:69:f4:78:02:cc:54:da:b8:f9:
                    fe:6a:62:63:a5:21:4e:36:85:44:0c:45:90:03:e9:
                    66:42:b3:1c:6d:12:19:56:4c:c0:dd:b5:a8:06:57:
                    2d:07:0a:39:a4:fb:a9:fa:4c:ed:98:47:57:43:0c:
                    01:8d:cd:b5:a7:44:cd:7b:27:52:a4:e7:d2:eb:cc:
                    97:a8:16:f2:a0:7f:63:25:d4:bf:d6:a3:04:9b:f8:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:A7:BB:03:47:A4:8C:31:EC:3F:4F:1B:69:D0:04:AE:56:F4:62
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:aa:9d:ee:0c:d7:83:1a:0e:f4:a5:76:fb:d1:3b:97:5a:
         98:81:e6:d1:d0:07:33:9b:f5:6f:90:d4:1d:bc:0a:1d:b7:85:
         21:b9:a4:5c:0f:d1:b1:5f:76:0a:fa:5e:8e:6d:41:a5:21:3c:
         1f:f9:ee:68:dd:ea:0b:12:5e:34:66:00:7f:77:3f:3f:eb:bc:
         78:0f:e0:cc:05:33:39:44:9f:00:d4:0c:4d:57:1e:fc:b5:7e:
         10:1d:1f:04:20:e0:e3:2b:5d:97:63:7e:37:32:9e:21:d1:f0:
         af:5a:d6:72:1b:c4:60:14:8e:94:e0:ea:0f:da:2f:77:c4:b6:
         f5:81:8c:d1:c5:bc:73:68:03:c5:97:e4:46:5a:a9:16:c7:a5:
         77:29:2b:32:e9:d1:4a:2f:be:fa:74:cf:31:73:5f:c0:e8:5f:
         c2:2c:15:08:94:e5:b1:41:52:bb:38:61:fd:d3:dd:e0:90:6f:
         6c:1d:72:92:57:2a:2e:21:1a:cb:f3:43:d9:88:bc:58:9f:81:
         53:31:76:64:5c:b6:71:b8:4d:02:6f:7a:0a:2e:1c:fe:dd:04:
         ab:67:da:01:08:31:00:64:8c:02:99:19:d8:a2:46:fd:ba:ae:
         1f:f6:9d:31:b8:1d:94:20:28:30:d1:ed:7a:3d:27:6d:24:0e:
         70:32:d0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:34:57 2024 by rpki-client on console-ams.rpki-client.org