Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
File:                     2286A2E29C7611EF9FB2F666C4F9AE02.roa (raw, json)
Hash identifier:          /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=
Subject key identifier:   16:5F:11:B7:9B:D6:62:D5:15:F4:5D:EC:93:C7:75:5A:A3:1D:B0:78
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       35B5
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
Signing time:             Wed 06 Nov 2024 19:34:27 +0000
ROA not before:           Wed 06 Nov 2024 19:34:27 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     134465
IP address blocks:        175.29.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13749 (0x35b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Nov  6 19:34:27 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=672bc4c3-58db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:c2:37:d7:ee:1b:bd:ca:aa:4a:31:1a:7c:
                    ed:cc:4d:1a:cf:0d:28:ee:36:f8:11:6d:52:d7:d7:
                    e8:29:66:eb:90:f4:96:19:dd:9e:36:e4:48:9a:6c:
                    92:d8:dd:af:60:1a:79:21:c0:db:02:79:e2:3b:de:
                    79:c9:00:7d:29:69:5d:9e:32:38:57:15:06:24:6a:
                    68:04:5a:d2:57:d4:3c:42:84:b2:ff:6d:ea:6a:56:
                    5c:54:8f:a0:b0:f2:69:44:f7:65:20:4e:19:59:4b:
                    c3:18:fe:29:f3:6d:6b:9d:95:39:3f:04:b9:b8:19:
                    47:40:35:9e:88:9b:c9:d4:b8:c5:ca:fa:87:86:74:
                    61:50:b5:d9:21:7a:0e:5d:65:e5:18:ec:79:d6:87:
                    be:62:75:29:d5:d6:61:c3:5a:fb:81:b1:41:a6:45:
                    a9:ea:7c:49:ba:b0:8d:dd:0a:ff:c2:f2:1c:00:e3:
                    b8:a7:66:45:e2:27:92:e7:4d:f1:cf:4b:d0:ab:ef:
                    59:ce:af:c3:47:ca:b8:be:08:76:4b:f6:ad:17:1a:
                    7d:82:58:3c:0c:dc:a8:9c:df:e3:f9:0f:90:94:e8:
                    39:b8:82:16:73:67:18:aa:b2:c5:ba:a0:62:54:3b:
                    5c:1c:cf:0c:cb:32:32:dd:e6:bc:8d:e5:0e:de:cc:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:11:B7:9B:D6:62:D5:15:F4:5D:EC:93:C7:75:5A:A3:1D:B0:78
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/2286A2E29C7611EF9FB2F666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:db:46:55:2c:ee:49:4b:3c:fb:44:22:00:db:39:15:b8:ea:
         c8:d9:e3:31:ae:56:ca:0e:e5:67:ff:4e:cc:5c:d0:c2:c2:e9:
         d9:46:97:c0:9e:0a:e3:a2:3e:80:7e:a3:3f:27:bf:8c:27:de:
         87:57:64:2a:ba:f4:cb:ef:36:c6:2a:94:81:6c:72:6e:f8:e8:
         f4:7b:bb:08:68:31:12:83:39:80:c4:aa:87:03:b2:66:e5:fb:
         ab:57:95:8f:5e:7d:07:91:61:0c:60:24:eb:43:45:bd:f4:84:
         4e:ac:a8:b6:fc:d1:df:6e:5c:93:93:4a:47:33:09:85:f6:7c:
         15:18:85:e9:84:57:c9:19:d9:e3:3e:d1:c6:e7:f0:9e:d0:89:
         07:39:04:cc:bd:13:de:ef:84:a0:2c:f9:b5:2f:ae:d2:a2:48:
         40:f4:7b:f9:88:20:8b:d1:9c:9a:35:97:61:95:e0:74:9e:09:
         24:75:0a:e4:a5:cb:5a:49:c7:0e:7b:5a:d3:1d:e0:a3:63:e1:
         28:9e:b3:a2:0d:f6:0f:d5:54:5d:1f:a0:cf:46:9d:1e:1c:cd:
         83:7a:8d:f7:a2:d5:62:8e:31:ed:07:6a:d2:41:4e:83:b5:d5:
         b5:a8:d0:c0:a8:8e:cd:76:82:a5:ba:c8:d5:69:9a:81:b5:ab:
         cb:bc:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:08 2024 by rpki-client on console-ams.rpki-client.org