Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/82714490765211EF8ADD7474C4F9AE02.roa
File:                     82714490765211EF8ADD7474C4F9AE02.roa (raw, json)
Hash identifier:          JEKBigdfq5ibMAGzfaPDiwOq8XtNE9Mn0hljSNM2b7s=
Subject key identifier:   9C:AC:4D:53:7A:55:1F:CD:98:F9:05:9D:9A:78:3E:03:7B:1E:31:69
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3569
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/82714490765211EF8ADD7474C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 14:50:45 +0000
ROA not before:           Thu 10 Oct 2024 14:50:45 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151704
IP address blocks:        175.29.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct 10 14:50:45 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6707e9c5-cdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:3b:e9:a5:0c:a9:1e:67:9c:84:29:25:fe:
                    b2:a5:fc:ca:80:b3:78:19:ca:a3:8d:f1:e6:83:f1:
                    c6:9d:05:16:ce:1e:ca:f6:b0:02:09:eb:3b:9c:f5:
                    8b:65:40:cd:f5:93:f2:ad:59:ab:80:86:f3:27:1b:
                    26:28:38:b6:13:93:39:72:65:76:a3:56:4d:0e:47:
                    21:7f:77:ba:33:28:19:40:b0:aa:bc:14:c0:a6:cf:
                    b3:75:af:22:c6:56:42:c4:da:1d:30:5d:63:7a:20:
                    c1:e3:55:00:45:6a:34:1d:88:55:a2:eb:2c:7a:83:
                    63:96:21:02:9a:eb:7d:06:74:b2:76:01:ed:9c:f4:
                    2c:dd:ab:ae:15:ea:74:87:af:a5:e2:dc:22:04:81:
                    2b:f4:fc:f4:cd:92:54:93:47:39:a0:36:38:e8:ad:
                    45:bf:2a:80:ec:d3:a9:d4:60:3f:03:36:f1:07:1e:
                    ea:e2:90:5f:e2:6a:34:e3:5c:dd:d0:b2:85:5c:e5:
                    5a:b8:7d:a5:b6:95:c8:1a:f4:5a:95:c7:4d:da:7f:
                    f9:c5:1f:da:7a:cc:41:11:96:3f:ac:ec:e5:39:8d:
                    72:0a:a5:cc:70:ff:8c:7c:87:50:d9:a5:38:9a:06:
                    3b:59:5c:91:83:46:46:f7:7f:06:ed:a4:27:bb:d5:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:4D:53:7A:55:1F:CD:98:F9:05:9D:9A:78:3E:03:7B:1E:31:69
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/82714490765211EF8ADD7474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:61:f6:15:88:e8:39:ff:43:9a:0e:63:6c:4e:6c:2d:5b:24:
         29:b8:ad:23:b8:7f:58:c4:d9:6d:ef:37:22:fa:e7:56:9c:89:
         4e:c0:16:7d:32:6a:14:02:d7:39:38:3e:48:60:c3:6d:8b:16:
         0b:27:c8:a7:3b:3d:21:d5:9a:92:70:cd:91:2b:0e:55:59:20:
         43:3d:96:85:99:57:72:bf:64:64:16:2c:d0:8b:35:7e:bf:20:
         ad:ff:75:78:84:17:c9:55:36:25:ae:fd:99:4b:c1:9c:46:58:
         b2:75:78:54:33:52:c4:d6:7f:24:96:42:71:aa:3d:35:16:61:
         77:4e:b3:c7:85:5f:55:57:4c:c0:d0:ee:18:e9:e1:f0:7b:3d:
         93:8f:18:01:02:b9:24:1b:8a:9d:29:60:f8:c3:c3:ce:74:b1:
         f5:5e:d9:91:2d:a6:ef:06:34:49:0d:cb:7f:cf:a1:02:d5:48:
         58:ef:c6:d3:6d:d0:7d:9f:49:93:8e:b3:a8:88:34:6a:bd:d9:
         a1:98:f6:e3:78:6d:26:13:f2:de:64:e0:39:d9:44:e4:26:38:
         f2:be:91:5a:c0:e4:fd:6b:9e:90:9c:b4:78:7d:b8:08:3b:f6:
         bb:cf:5f:c4:4c:59:19:90:b3:fd:40:b0:4d:29:4c:c0:18:97:
         40:c3:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:08 2024 by rpki-client on console-ams.rpki-client.org