Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
File:                     75CD74841CC611EEAD8F6969C4F9AE02.roa (raw, json)
Hash identifier:          NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=
Subject key identifier:   22:34:5F:83:22:CA:A8:6C:86:C3:5B:C7:EC:AF:1E:1F:46:72:FB:ED
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       03F6
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
Signing time:             Tue 29 Oct 2024 01:26:38 +0000
ROA not before:           Tue 29 Oct 2024 01:26:38 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     34549
IP address blocks:        223.29.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Oct 29 01:26:38 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672039ce-7ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:d4:50:8a:6d:da:bd:85:9c:45:be:ac:49:
                    83:fc:59:0b:41:35:2d:dc:f8:54:70:7d:60:df:05:
                    82:94:81:2f:a3:50:85:0e:62:b0:63:9e:9b:79:f0:
                    4a:31:68:1a:27:c5:4f:ea:ec:66:99:bc:92:bd:1f:
                    15:8b:7e:d5:06:b7:61:8a:5b:d6:44:bc:50:85:ad:
                    b5:dd:a7:05:86:bb:bd:fe:5d:c3:01:3a:b3:54:1f:
                    18:96:3a:35:c7:a4:04:de:28:99:ee:68:0b:7e:0c:
                    ef:a4:4d:ac:9a:5b:63:e9:6d:80:b0:ad:8d:80:6c:
                    66:8f:e6:38:82:7a:c2:c5:6f:1e:f0:da:38:bb:1c:
                    ba:23:d2:46:1c:f2:62:b8:41:1b:3a:8a:15:0f:58:
                    a8:cf:61:91:8f:a7:5f:61:f0:f4:38:f6:26:68:70:
                    92:9b:14:7c:f7:e7:84:49:4e:eb:d4:82:c6:bd:09:
                    3b:81:ee:21:d1:e3:54:e7:d4:00:21:84:a1:3a:f8:
                    94:6d:5c:2e:80:9d:ff:72:35:6f:1c:ea:0f:19:e6:
                    6d:a5:17:f1:af:c6:5b:78:46:a5:c5:82:9a:f9:e2:
                    f1:cc:ad:0e:75:31:82:f7:15:aa:87:a8:55:db:77:
                    3d:74:d2:27:6e:70:7f:e8:19:53:75:a5:07:3e:5c:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:5F:83:22:CA:A8:6C:86:C3:5B:C7:EC:AF:1E:1F:46:72:FB:ED
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/75CD74841CC611EEAD8F6969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:de:62:73:d0:c1:b8:fc:18:44:02:a4:e1:ec:2e:1d:21:4c:
         8a:25:3a:8e:0e:19:e2:1f:62:c9:b1:2f:89:7b:4f:75:0c:cd:
         fd:97:3d:cc:61:67:52:b2:e2:55:77:ed:df:75:ed:3d:2c:a3:
         12:ed:24:01:b5:fe:88:1b:cd:14:8d:56:d4:3a:51:62:cd:dd:
         f5:9d:b4:a2:d8:6b:8d:54:00:6b:28:1e:fa:05:c7:6d:58:d8:
         18:58:87:87:60:6e:eb:33:fe:41:6f:63:9e:d7:f1:38:43:6b:
         c2:92:9b:5e:49:72:0f:98:54:85:72:d8:70:6f:74:bf:c3:fc:
         a5:6e:46:c9:a0:08:1c:d5:b2:20:14:19:26:44:8e:08:ba:76:
         5c:0c:fb:24:a8:2e:d2:f3:91:b2:f1:a2:86:e1:cf:ea:31:b5:
         47:e5:b0:17:ce:48:b2:f5:eb:ed:51:70:ca:c6:de:b7:9b:7f:
         cd:71:80:16:c5:3f:64:74:f8:5f:ae:e0:9a:0f:7d:4b:6d:28:
         da:5c:ec:08:5d:70:80:0f:26:8e:de:02:dd:da:74:ca:a8:46:
         72:55:d6:9b:99:f3:27:48:04:7c:34:02:07:31:17:16:8a:5a:
         e1:c5:ca:d0:3f:5f:66:ca:41:f3:1e:9d:6f:03:32:8c:1c:ee:
         f2:02:79:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:33 2024 by rpki-client on console-ams.rpki-client.org