Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
File:                     94C16496222811EF99153155C4F9AE02.roa (raw, json)
Hash identifier:          Ac6cnmBtCeQwIV5PdTOpzzOyj+FEtvQgRkdEJEIsldM=
Subject key identifier:   7D:B2:23:F2:99:15:20:BB:FA:34:07:AB:2E:02:E6:75:5C:AE:B8:D9
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2401
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
Signing time:             Fri 26 Jul 2024 16:33:35 +0000
ROA not before:           Fri 26 Jul 2024 16:33:35 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     18392
IP address blocks:        45.114.20.0/24 maxlen: 24
                          45.114.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9217 (0x2401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 26 16:33:35 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a3cfdf-238c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:5e:90:aa:b3:e1:ee:03:76:e7:40:c0:04:
                    8e:8e:00:ee:b4:1d:ba:b1:48:01:7e:71:f9:c8:1b:
                    e0:07:e0:2e:e0:e0:36:cb:49:6d:c4:ac:a6:1c:22:
                    5f:f8:03:a4:ff:88:69:2d:fd:9c:33:58:6a:a8:4a:
                    60:be:7e:0a:4c:86:db:2e:1f:69:d4:0a:0f:36:1b:
                    cb:ab:21:44:e9:ff:ba:1d:3c:41:16:f5:dc:d8:52:
                    3f:40:a6:6b:a6:1d:8a:df:db:bf:c6:9f:71:7e:49:
                    07:18:e3:0a:a5:1a:73:1e:df:d4:28:33:20:62:f3:
                    96:19:d0:05:13:79:9b:52:a6:0b:a7:a8:43:ec:e0:
                    fd:87:c5:4a:be:6b:b8:0a:45:a1:8d:2d:01:48:c6:
                    ed:08:c6:04:12:61:cf:20:ad:cf:e0:c3:93:19:8b:
                    08:1a:cd:3f:e9:4f:50:17:38:68:e2:7b:37:00:12:
                    e9:6d:e6:11:33:5a:c3:81:11:49:e0:17:ab:39:de:
                    d7:a4:7a:4d:4f:b6:24:39:73:ed:45:d7:c2:e6:e1:
                    bc:59:ca:40:cb:b5:3f:83:0e:c8:54:0b:a8:46:b1:
                    47:2a:5e:e9:99:8d:db:ae:d9:ab:a3:8e:df:0d:cd:
                    0c:ac:99:ba:5a:ea:e1:e4:1a:05:76:52:e6:47:f1:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B2:23:F2:99:15:20:BB:FA:34:07:AB:2E:02:E6:75:5C:AE:B8:D9
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:3b:42:05:3d:2d:1e:ae:53:73:71:98:67:45:bb:bb:4b:bf:
         93:7a:79:1c:1e:13:0e:44:b1:7d:27:42:d9:58:7f:bc:ad:ed:
         b6:22:e2:ae:60:f8:1d:71:ff:51:31:d2:22:16:93:45:69:ae:
         5b:f0:12:7e:9e:3f:61:15:b2:cf:c5:46:d4:99:18:4c:dc:a9:
         31:02:2b:02:6a:c9:2f:5c:3b:6d:c6:8f:e3:e3:b8:27:e4:79:
         79:9f:7b:af:59:cf:48:30:29:4f:a8:f7:8e:af:74:37:b9:d8:
         a9:52:55:15:2f:46:72:29:56:a0:67:13:f5:a4:b8:aa:fd:9c:
         f2:d5:a6:29:cb:a5:a1:67:ad:85:a9:93:34:50:da:9d:4a:29:
         e5:13:09:18:62:8b:8f:fd:9b:27:6a:b2:47:45:23:c2:15:a4:
         4a:16:8c:68:c8:9a:ec:17:a6:d0:29:56:73:75:3d:87:2d:27:
         61:13:7f:5b:ae:c2:a2:2b:7f:7d:a9:a7:7f:47:8f:3d:a2:84:
         41:26:64:12:b0:c3:4a:51:9c:2a:42:eb:74:15:bb:95:5f:f4:
         72:1a:54:de:3c:ae:5e:9a:8c:8e:77:ec:dd:d1:55:f2:57:03:
         59:09:84:3f:f9:a7:0b:c0:4e:cb:e3:18:61:db:52:4f:c1:83:
         27:21:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org