Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
File:                     79F85264827711EFAACDBD12C4F9AE02.roa (raw, json)
Hash identifier:          y9ssG+Nlchy0jWaCyzN61HTdb2V4wt1xqBdScX6Lwak=
Subject key identifier:   4E:75:64:99:02:7E:D2:DC:2D:65:91:8A:19:09:20:50:5F:C9:F3:B5
Certificate issuer:       /CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
Certificate serial:       02
Authority key identifier: 06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
Signing time:             Fri 04 Oct 2024 17:38:33 +0000
ROA not before:           Fri 04 Oct 2024 17:38:33 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     46844
IP address blocks:        14.1.20.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl
                          rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 05:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D5C/serialNumber=0655BD524E87D079E65BE3161AA65BE68F9E827E
        Validity
            Not Before: Oct  4 17:38:33 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67002819-2abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:2d:31:f0:f3:3a:9c:46:36:4b:bd:ab:7b:
                    e7:e2:02:77:55:4d:75:a9:69:27:3e:e9:8b:70:70:
                    74:1e:d0:76:aa:de:fb:f7:d7:5e:e2:e3:8f:cf:42:
                    d9:f6:b2:b6:a6:f9:4f:8c:9d:6c:fb:64:9b:b8:fa:
                    be:49:59:d2:7c:6a:9b:b0:ba:c6:e8:e6:c3:1e:91:
                    98:9d:11:d1:cd:5d:df:fd:51:13:67:27:3d:b4:c0:
                    aa:e4:47:68:8d:46:f7:f3:ec:8a:c9:45:51:5a:31:
                    83:ef:25:2e:2a:23:46:9b:6e:94:0c:f1:7b:db:2b:
                    ff:11:ec:74:c6:b1:41:cc:8e:e5:89:bc:7b:b4:0c:
                    fa:b8:cc:b8:20:99:01:29:8d:0e:d0:c8:73:5f:9c:
                    ed:af:16:71:35:a8:ae:7b:8c:09:06:36:68:7a:e2:
                    1a:e1:eb:72:62:2f:5d:91:ce:b5:3c:20:de:c4:a5:
                    77:2b:1c:de:e0:f6:5f:24:38:ad:46:01:2d:aa:39:
                    ce:23:f7:62:57:f5:fa:2a:12:3c:9b:01:57:8f:6c:
                    be:2e:25:b5:d9:91:7b:33:c9:14:c3:bb:c4:12:ab:
                    4d:2a:57:8d:e9:15:cc:2a:03:ef:72:ba:7d:a7:fb:
                    f8:e9:02:f1:d8:c2:f8:a9:70:28:06:8d:5b:c8:3f:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:75:64:99:02:7E:D2:DC:2D:65:91:8A:19:09:20:50:5F:C9:F3:B5
            X509v3 Authority Key Identifier:
                keyid:06:55:BD:52:4E:87:D0:79:E6:5B:E3:16:1A:A6:5B:E6:8F:9E:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/BlW9Uk6H0HnmW-MWGqZb5o-egn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlW9Uk6H0HnmW-MWGqZb5o-egn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D5C/CBE6DB0A827611EF8E83ED0DC4F9AE02/79F85264827711EFAACDBD12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:cd:30:85:a3:bb:fe:ed:43:3e:8f:d4:cd:cb:18:4a:06:
         67:26:8b:53:6a:d5:e1:ca:9f:05:c3:14:d6:37:c9:ef:95:fc:
         04:0b:44:2f:b0:72:78:73:c1:30:99:7b:c2:7f:c0:c2:e4:d3:
         8f:46:62:3c:5c:50:c3:fc:b1:1c:2b:df:1f:fd:96:c3:70:ae:
         c8:c7:80:37:54:4b:9f:1e:24:cc:b4:a6:df:f2:a3:2d:4b:a1:
         a1:36:f0:f2:97:ea:cc:63:75:e0:c1:17:51:24:c1:50:4c:47:
         d0:68:85:64:8f:a8:3f:16:b3:7f:a6:a5:fe:9a:ed:3a:c7:d2:
         4a:62:fe:ea:6a:3c:0c:fa:e0:5c:f8:58:36:90:50:d6:d6:88:
         a8:8d:37:88:62:df:94:e9:6e:41:ec:9a:30:61:55:58:29:3f:
         83:03:72:29:b2:c4:80:75:a6:4a:64:93:b8:0f:ac:ef:a3:00:
         8b:67:4d:c4:f0:99:63:50:95:25:4d:2e:80:12:8b:24:be:c1:
         b4:da:6e:7d:2f:40:fc:a2:05:68:a3:2e:e0:70:06:3f:38:6a:
         21:16:e9:73:23:64:29:15:ca:6c:51:23:b2:0b:fd:fd:8e:30:
         93:11:16:be:b7:c4:bf:ad:48:a7:ea:34:7e:30:7c:ec:4b:0a:
         2e:b0:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org