Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
File:                     EB0C7BBC293D11EFB7D44673C4F9AE02.roa (raw, json)
Hash identifier:          KJkeZUjeqMxzrhPdJDdsZ7TY/TJfd72TjAx8JA8jobA=
Subject key identifier:   B8:76:E1:4F:A1:03:2A:9D:0D:7B:6E:AE:27:78:4A:F3:A4:6B:96:A6
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       11
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
Signing time:             Thu 13 Jun 2024 04:32:19 +0000
ROA not before:           Thu 13 Jun 2024 04:32:19 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     17466
IP address blocks:        124.4.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Oct 2024 05:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Jun 13 04:32:19 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=666a7652-1968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:b5:c2:fe:39:f6:c1:36:25:da:cd:27:dc:
                    2a:c5:25:94:59:c2:dc:d7:d4:6b:3a:b5:58:6e:85:
                    d2:31:e4:11:14:31:d5:59:5d:fd:42:c7:91:cd:34:
                    7a:08:a3:fb:fd:d9:49:56:c9:b9:99:40:a1:bc:c7:
                    52:c9:4f:3b:a0:23:23:5c:2d:ce:a4:10:77:06:16:
                    cf:76:01:4d:b7:1c:44:8e:88:73:17:6e:00:c1:cc:
                    2b:cd:e8:cd:e3:0f:ec:df:84:dd:51:cd:10:6e:5f:
                    0c:ae:13:04:b7:4c:88:31:d1:85:b0:62:18:fd:dd:
                    2e:97:91:7e:5e:94:f1:65:a7:95:16:d6:aa:09:77:
                    eb:4a:c8:c1:7d:41:9a:f0:ab:9d:2f:c7:cc:26:74:
                    55:f1:b8:89:ef:9b:4b:f6:96:26:0d:37:61:ce:96:
                    ff:87:d0:eb:28:cf:dd:87:fd:1a:96:d9:93:de:ce:
                    89:63:be:9d:c7:00:12:1c:ca:73:bb:9f:ea:44:07:
                    42:aa:3d:99:6b:2a:96:be:8f:d2:b8:83:a7:bf:af:
                    68:21:3f:73:be:dc:c2:f8:f6:3d:02:0e:10:2e:09:
                    18:90:29:d8:6d:da:7c:a1:2e:00:58:ea:36:bf:99:
                    0f:05:45:05:04:d7:f3:c7:bc:4d:fd:54:6b:8d:24:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:E1:4F:A1:03:2A:9D:0D:7B:6E:AE:27:78:4A:F3:A4:6B:96:A6
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/EB0C7BBC293D11EFB7D44673C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.4.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:41:da:4a:09:42:88:94:45:56:50:2b:1d:d3:d3:ac:36:86:
         08:b6:ff:65:cf:25:05:40:e8:df:4e:58:4c:1d:f7:b6:ed:79:
         e8:8d:6e:9c:06:6f:98:61:c0:21:e0:eb:3a:f7:7d:81:0d:a6:
         86:d1:10:1a:63:d7:97:de:a0:6d:7d:43:03:53:95:2a:b4:71:
         ac:11:21:8e:eb:96:8a:59:aa:eb:a9:71:40:8b:a0:09:44:fa:
         44:36:a7:d2:dc:1f:56:be:23:36:ba:37:e9:b7:51:a5:cb:60:
         58:ad:cf:92:64:ea:7c:3a:29:4b:c4:7d:b7:1f:1c:68:f5:5d:
         a8:08:95:58:7b:d3:7a:e2:cc:2b:40:84:70:fe:81:69:ef:8e:
         84:be:b8:6b:66:93:c8:e4:9e:ce:d7:93:c6:37:b5:8c:f1:c7:
         8a:4a:92:65:20:87:d0:04:7a:22:5e:d6:c4:cb:21:8f:f1:08:
         55:cc:3e:e2:36:09:c5:50:c9:6b:cf:2f:88:0d:76:28:86:79:
         38:1c:73:77:9e:fa:8b:08:b8:d8:25:29:d7:40:57:b7:48:df:
         11:cc:c8:29:65:66:0c:53:1f:14:4f:11:b5:b0:eb:67:a2:a6:
         b4:3a:de:8a:0c:c7:91:e7:00:31:f2:22:65:05:ce:ae:11:e3:
         5b:31:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:05:44 2024 by rpki-client on console-ams.rpki-client.org