Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
File:                     4EE2265C1FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier:          VzUoAgO2E80z2jcWSFxybrO2aIYVkOmZzN/BzkaZDy4=
Subject key identifier:   48:83:41:98:B4:3A:13:F9:19:E1:E4:E5:04:51:7D:6E:71:7E:E3:9A
Certificate issuer:       /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial:       0606
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 01:55:16 +0000
ROA not before:           Mon 03 Jun 2024 01:55:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58608
IP address blocks:        49.248.70.0/24 maxlen: 24
                          49.248.71.0/24 maxlen: 24
                          49.248.125.0/24 maxlen: 24
                          49.248.217.0/24 maxlen: 24
                          49.248.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
                          rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
        Validity
            Not Before: Jun  3 01:55:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=665d2283-5e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7d:ca:bd:10:e3:f9:b0:24:9f:cb:b2:9e:cd:
                    7d:81:c0:97:a4:6d:97:28:89:4d:f0:30:e4:e0:58:
                    e3:07:12:85:0b:b9:4a:cf:71:9d:67:fc:7f:3d:0a:
                    e4:eb:a3:84:6c:85:a9:1c:6c:a5:cf:f8:8c:91:e7:
                    53:f6:9d:e6:f8:07:f6:68:e9:0b:55:a3:84:b6:2e:
                    ea:87:3e:15:b9:f6:30:2d:c0:87:c9:bd:02:3c:d7:
                    e3:de:a6:d5:fb:c3:2e:f8:1a:0f:ed:a3:41:8e:9b:
                    dc:06:c5:81:69:05:12:29:c7:46:39:92:9c:e5:52:
                    46:57:6f:dc:e7:ef:7f:0c:b3:d3:f4:15:ee:19:f1:
                    75:5b:34:ef:14:aa:ec:c2:47:22:b4:da:a6:bd:82:
                    e0:7d:f2:49:f7:b1:a7:79:24:38:ef:4c:9b:ff:63:
                    98:f4:3e:da:16:f4:1d:73:64:2d:a6:bb:d0:3a:5b:
                    9f:b5:d7:36:bc:94:0b:f9:75:65:52:0a:35:76:44:
                    fd:44:6c:61:2f:ab:3c:ea:1d:1f:36:36:08:1b:b3:
                    ea:5f:41:33:77:b5:57:67:b4:36:43:91:97:a2:bd:
                    0d:7c:99:01:a7:33:c0:43:40:80:a7:ea:29:bf:fa:
                    67:48:d6:0a:37:ac:8f:e5:14:5c:b5:b1:ac:7f:02:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:83:41:98:B4:3A:13:F9:19:E1:E4:E5:04:51:7D:6E:71:7E:E3:9A
            X509v3 Authority Key Identifier:
                keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4EE2265C1FBE11EF97E7974FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.248.70.0/23
                  49.248.125.0/24
                  49.248.217.0/24
                  49.248.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:eb:e2:69:75:56:8d:08:28:1c:36:66:b0:65:61:c9:5a:cc:
         01:bf:37:64:1b:13:65:6e:cc:a7:4e:fd:06:0a:b3:24:19:8b:
         bd:3e:58:a9:a9:83:58:f6:ea:cc:a1:30:46:fa:a5:6e:1e:ff:
         30:7e:a1:3d:7d:9c:5d:d8:b9:f6:ee:49:33:da:a9:a4:5d:1a:
         00:3a:8b:ee:55:8a:2a:77:cb:58:e2:12:f8:e1:31:ca:28:67:
         82:2e:0c:29:a9:8b:b0:3f:d0:31:6d:d9:82:73:c6:f7:73:f4:
         8a:02:de:2c:ea:8e:cf:54:5f:6e:cf:4c:cb:57:a8:ad:14:88:
         0f:d4:c0:34:f8:03:1b:80:66:33:16:b8:8a:37:67:16:c9:96:
         4c:bf:50:cd:91:18:d6:82:5d:7e:e9:ad:7e:eb:e6:ff:23:d8:
         28:70:ea:c6:c2:43:e4:8b:f6:ee:72:89:fc:e4:59:21:8e:13:
         d1:e7:b8:10:df:86:ef:1f:f1:94:03:94:a5:44:5e:b8:1a:9c:
         c9:8c:64:92:d9:01:cc:a6:a6:2d:93:1a:f9:43:53:ad:b8:1d:
         d6:9c:ce:86:df:3e:5d:33:f8:e1:da:09:7a:1f:a0:ec:64:d5:
         29:dd:35:a9:d0:11:c5:58:88:fa:94:5f:8e:b9:c7:09:a2:71:
         e5:14:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org