Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
File:                     9EEDB94662C111EE8F200F60C4F9AE02.roa (raw, json)
Hash identifier:          W15tb+7+a4VOZZM16otpW1viHRyC/Bw3dBhXfgeUMMM=
Subject key identifier:   17:4D:96:C9:F0:5E:AA:F5:93:8B:54:60:C1:37:E6:B7:D9:D1:97:E1
Certificate issuer:       /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
Certificate serial:       46
Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 07:49:50 +0000
ROA not before:           Thu 01 Feb 2024 07:49:50 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     17903
IP address blocks:        27.118.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl
                          rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03
        Validity
            Not Before: Feb  1 07:49:50 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65bb4d1e-cbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:e0:35:e0:a0:97:82:ec:cb:17:e3:b0:d3:
                    ff:01:cb:c8:1d:f8:be:bf:bf:e0:92:e8:83:bf:5f:
                    7e:f4:0a:61:eb:02:31:9f:7c:42:6d:77:37:44:3d:
                    d9:64:4e:25:e6:f7:08:48:82:19:66:93:25:be:69:
                    4b:ba:7a:49:7d:79:cd:eb:4e:09:4a:6b:f7:41:c1:
                    4b:91:9f:14:1b:07:92:88:08:fd:1d:03:70:6e:33:
                    be:c2:20:f0:d2:01:9e:75:23:53:a7:cf:bb:b9:c2:
                    d5:57:af:c2:6c:89:a8:2b:d4:b1:8a:76:54:79:64:
                    40:32:e1:ce:71:57:c8:10:02:6c:9e:a4:7e:69:4e:
                    8e:7b:07:e3:c9:a7:b7:7f:78:63:86:ad:cb:84:57:
                    3b:2b:78:01:d3:0a:c7:70:25:dc:92:a4:5a:6c:bf:
                    4a:10:19:9d:db:79:15:48:31:a4:f1:4c:e1:93:14:
                    9c:e7:66:11:53:d5:d4:88:1d:8a:55:b2:8c:27:14:
                    85:4b:58:4e:ec:ec:32:4a:9a:80:50:71:fe:53:1e:
                    6b:fc:ca:3f:4d:db:25:16:75:0b:8a:35:3c:29:c1:
                    72:39:61:63:82:c8:42:55:ed:72:a0:bd:68:ae:cd:
                    3b:2a:fa:e3:5f:05:6b:9a:0e:5c:55:dc:84:6a:9a:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:96:C9:F0:5E:AA:F5:93:8B:54:60:C1:37:E6:B7:D9:D1:97:E1
            X509v3 Authority Key Identifier:
                keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9EEDB94662C111EE8F200F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:29:61:af:33:27:9a:0a:2c:cb:ed:c9:a4:87:b0:94:ef:
         19:f3:dd:33:24:30:af:4b:b2:1d:f9:07:83:2d:bd:e1:6c:9d:
         0f:3f:e3:11:82:20:95:68:5e:9b:51:85:c7:08:b9:38:1e:75:
         a2:24:91:09:b5:e6:c4:b6:37:b2:04:9e:ef:ce:cd:ee:0b:ff:
         ab:5c:4a:26:af:c4:ee:b5:92:d1:34:a7:c9:9b:b9:e9:25:4a:
         6a:87:eb:66:de:68:f7:6c:58:c2:b6:1c:d9:b1:bd:f2:21:71:
         ea:f7:d6:03:2a:3d:02:80:3c:9d:07:4e:82:56:f2:93:4d:06:
         df:99:6e:f1:c2:4c:eb:35:14:a1:97:a3:50:eb:cf:fa:57:6b:
         14:66:59:b8:1a:f0:c8:c1:0c:da:c3:51:44:45:b7:a3:13:2f:
         4f:88:4b:c1:f3:50:3e:08:8b:3f:33:93:82:f6:04:b5:8d:6c:
         f3:3c:52:07:55:f2:ea:9b:0f:d5:4a:de:26:02:8f:40:9b:69:
         74:41:59:de:eb:12:9c:0b:0a:3b:46:fd:76:d6:dc:db:90:96:
         bf:ca:39:40:07:4a:23:50:15:5e:1b:81:1c:91:0e:c8:63:ef:
         d2:cf:0f:5f:1f:ac:d3:02:6a:29:85:3e:38:e7:c4:93:2b:35:
         d0:d4:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:05 2024 by rpki-client on console-ams.rpki-client.org