Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
File:                     4F148EC8A89211EFBE18B52EC4F9AE02.roa (raw, json)
Hash identifier:          Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=
Subject key identifier:   50:B7:63:8E:C6:22:09:F7:00:81:A7:DA:A0:68:86:B1:3D:6E:C1:1B
Certificate issuer:       /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial:       02
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
Signing time:             Fri 22 Nov 2024 05:26:22 +0000
ROA not before:           Fri 22 Nov 2024 05:26:22 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     142031
IP address blocks:        2001:df4:a7c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 06:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
        Validity
            Not Before: Nov 22 05:26:22 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674015fd-4c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:3f:66:bf:24:1c:2a:76:a5:b5:a0:0b:59:
                    37:b6:6e:38:b8:52:a8:46:4e:a3:ef:a3:10:8a:8f:
                    20:89:f6:d3:46:86:10:28:91:41:dd:39:c7:1f:52:
                    9b:e2:05:1d:4b:21:95:8e:9f:d9:bf:08:83:6f:4f:
                    9b:bf:87:c1:fb:ed:98:c4:72:5c:f2:48:45:8d:8a:
                    ea:fb:26:dc:aa:80:ad:f9:54:24:b8:d2:3e:04:fe:
                    d0:ab:1e:85:5e:42:cc:bb:62:0d:1e:e6:31:7b:cf:
                    4b:f1:36:67:78:1e:37:42:43:71:30:4c:b1:d9:f2:
                    93:5c:34:8f:f4:73:03:77:85:d6:31:c5:6e:dd:37:
                    4a:77:7a:53:d8:a8:2f:cb:3e:be:be:1b:74:97:46:
                    5e:fb:71:29:a8:ba:6c:a4:da:4f:b0:24:5c:5d:31:
                    03:3a:f7:b2:22:c6:ff:57:48:ee:25:ab:27:f1:39:
                    73:9a:fc:b8:6e:29:bf:20:bd:4c:67:93:af:90:cf:
                    3a:19:3a:b3:7b:5a:9c:91:b3:b4:52:a3:ca:7a:75:
                    0b:ff:f6:7f:1b:3b:86:39:86:d7:e8:9f:e9:c4:59:
                    c0:e0:6c:42:27:44:a0:bb:96:39:86:75:9d:d5:5b:
                    04:75:b5:41:8a:0c:7f:ca:d6:36:98:15:cf:02:bd:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:63:8E:C6:22:09:F7:00:81:A7:DA:A0:68:86:B1:3D:6E:C1:1B
            X509v3 Authority Key Identifier:
                keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:00:ea:92:47:a2:b5:30:70:fa:5b:79:57:98:e0:90:8e:
         76:4c:c6:51:60:57:ba:88:cd:6c:15:c4:69:05:01:1d:ac:42:
         fd:03:92:be:0e:5c:8a:8e:2e:83:67:c8:bf:47:74:4b:2a:77:
         c0:1a:7e:ae:fc:2c:a7:85:6f:60:28:85:fa:f4:14:df:1b:87:
         76:7c:bf:31:7d:66:60:41:2a:1e:81:10:7c:0d:f8:36:79:33:
         32:d3:85:30:c2:b4:f8:96:16:c6:ba:31:e6:a0:85:56:3f:9a:
         1d:2d:9b:8a:a8:c7:69:9a:80:34:5c:c5:c3:cb:95:2a:8b:6f:
         03:e4:80:13:bf:29:16:38:06:8a:5c:22:cd:75:05:6c:62:08:
         ac:a2:a5:99:27:78:65:4c:c8:2d:2a:e4:4b:93:35:f8:99:40:
         d2:3a:06:e1:e0:d1:76:21:5b:32:b8:8e:91:51:37:d7:f6:a0:
         55:11:70:67:d1:ef:bf:50:a1:74:c2:78:a5:d5:27:ad:aa:1a:
         3a:4e:2f:a4:fe:ed:a0:09:a7:19:3f:d3:69:a8:38:8e:9b:b7:
         c7:48:41:2f:2e:0d:cb:43:ea:fa:67:7c:94:b3:a7:21:af:cb:
         83:fd:ab:61:7d:62:f5:da:a3:a5:5e:21:25:7f:43:34:4d:66:
         3d:12:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:39:33 2024 by rpki-client on console-ams.rpki-client.org