Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
File:                     0722D856931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          m8h12XB2lIbVgKDkFz+TK2az6NbM66qEOmN6IzpmQ5A=
Subject key identifier:   ED:93:6B:D5:EA:48:9F:D3:92:06:2A:8F:B3:B2:59:D7:2B:1E:A2:02
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       253A
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
Signing time:             Fri 16 Aug 2024 18:15:58 +0000
ROA not before:           Fri 16 Aug 2024 18:15:58 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141384
IP address blocks:        2001:df0:5580::/52 maxlen: 52

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9530 (0x253a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Aug 16 18:15:58 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66bf975e-e7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:f9:44:b8:ae:0a:a2:52:11:7a:9d:37:ce:
                    15:d9:f9:b6:69:17:f9:bf:be:8c:2b:ec:01:a9:4a:
                    47:81:7b:2f:75:8e:a5:d3:b1:1d:43:3f:85:1a:9c:
                    f2:8c:63:2c:29:99:a5:16:dc:69:c6:a6:f9:b9:ac:
                    04:76:90:fa:d0:8d:e6:18:32:6d:a1:1b:45:6b:34:
                    f6:79:94:97:6c:d9:1e:b6:ba:07:46:f0:d1:f4:82:
                    5f:0f:d6:3f:cf:3f:0d:bf:6e:0b:cb:c2:f8:e9:6b:
                    f0:74:b6:dc:c2:bd:54:9f:10:ff:99:a0:d2:96:c6:
                    62:b3:de:09:b7:fd:e9:59:ca:ab:b9:67:f2:6f:57:
                    d0:d9:69:7a:15:ff:95:16:2e:4a:f5:d3:60:51:e9:
                    de:e0:35:4a:63:5c:64:df:a1:22:90:e5:b4:65:19:
                    6c:22:0c:c8:8e:b5:b6:cd:c8:14:ed:e2:60:91:69:
                    31:a8:0a:4c:8a:6a:08:d4:24:5a:18:80:d3:52:b4:
                    17:c3:f2:9d:67:1c:66:59:59:69:5e:72:e8:6a:f0:
                    5c:3e:d8:89:76:46:2b:05:87:b8:1b:c2:67:8e:ad:
                    c2:d8:e7:79:d8:3c:79:cf:7d:7a:32:c0:6b:a4:4f:
                    2c:bb:f4:af:87:93:a4:12:ce:fe:35:b7:d2:eb:01:
                    12:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:93:6B:D5:EA:48:9F:D3:92:06:2A:8F:B3:B2:59:D7:2B:1E:A2:02
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:5580::/52

    Signature Algorithm: sha256WithRSAEncryption
         17:08:93:40:23:f3:48:f8:b7:ef:5a:68:22:94:72:2d:e6:bd:
         cf:91:4e:3d:fd:04:5e:40:4e:84:29:93:91:6b:39:5f:60:02:
         8e:4a:6a:8b:92:ce:87:9a:4b:45:16:b9:88:08:c5:e7:f5:76:
         7c:6e:59:27:d7:13:a3:3d:37:28:0b:2a:a5:48:d9:80:7a:2a:
         69:51:4f:b3:9b:59:63:01:ad:11:d9:e7:78:b3:05:39:db:37:
         89:28:5c:44:6e:fc:b5:43:1e:89:d1:a1:da:5c:2c:17:e5:44:
         37:2d:ff:e8:5d:fa:13:d7:4f:41:a4:70:59:7b:e7:60:fd:43:
         a4:d5:4e:8c:4d:97:7e:43:ad:b4:c5:78:64:7c:ec:d8:30:52:
         41:b4:bf:f8:99:ad:6f:16:60:b2:65:5a:9f:55:36:5d:1a:1d:
         14:71:4e:e3:ab:92:5f:86:7f:7e:b6:32:4b:77:52:f7:1d:94:
         02:ba:f5:ab:49:91:ff:aa:2a:96:cb:fd:f0:ff:96:2a:34:35:
         2c:5d:23:d5:fc:b2:b6:1b:25:30:aa:96:00:1e:7e:fb:2c:9e:
         02:f3:c8:8e:b4:fc:85:c0:53:84:99:e2:5d:41:74:9b:b7:25:
         95:c5:58:89:c5:75:55:f4:45:98:5c:d4:f4:9c:0d:cf:43:c1:
         bc:a8:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:50 2024 by rpki-client on console-fra.rpki-client.org