Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/4265BD864D5811EF98470D6DC4F9AE02.roa
File:                     4265BD864D5811EF98470D6DC4F9AE02.roa (raw, json)
Hash identifier:          DI0whxBE0VRYz5yAE2OsMixzXg5yBtVwc2go7LOY180=
Subject key identifier:   44:AA:38:B4:25:B7:2D:CD:D3:FD:65:EE:99:46:93:02:E4:1B:0E:B6
Certificate issuer:       /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
Certificate serial:       34D8
Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/4265BD864D5811EF98470D6DC4F9AE02.roa
Signing time:             Mon 29 Jul 2024 03:11:34 +0000
ROA not before:           Mon 29 Jul 2024 03:11:34 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     4795
IP address blocks:        2001:e00::/31 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl
                          rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13528 (0x34d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3
        Validity
            Not Before: Jul 29 03:11:34 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66a70866-bdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:28:4f:24:d8:39:c0:89:39:05:16:dc:6c:
                    3c:4b:85:4a:31:5c:a3:66:4e:e8:ff:93:a7:03:43:
                    2f:76:7b:ae:9e:e1:8c:92:5f:70:e8:c9:da:8a:b1:
                    72:f1:b3:0f:c5:c1:d5:73:f8:40:5d:3e:8b:f5:74:
                    15:1f:51:e2:81:20:32:4f:7c:1d:66:04:80:3c:c8:
                    b9:9d:19:67:62:35:d5:63:b8:cc:21:41:16:69:4a:
                    5e:37:d8:c1:67:e7:ba:96:5d:2e:5a:61:c2:fb:71:
                    0c:f3:77:f9:f3:36:6e:94:02:dc:85:3c:7e:12:81:
                    fe:c8:d7:8e:53:f2:81:61:9f:c4:99:f2:ca:25:47:
                    81:8a:67:1f:41:48:82:9c:93:40:7b:98:65:fb:36:
                    2a:e8:04:77:fa:d7:48:5d:d5:f0:38:76:71:16:94:
                    49:3f:bb:26:fb:f7:a5:a8:ba:5d:3f:05:6a:9d:a8:
                    39:8d:36:51:f4:aa:d9:01:33:07:7a:18:08:3a:de:
                    ca:4f:db:9b:ea:09:fe:78:00:e2:37:c7:8f:64:b5:
                    7a:47:b9:7a:b1:41:97:d5:5f:f4:e5:ad:8e:78:72:
                    2e:34:97:e2:c9:6d:1f:f5:2c:a4:75:cf:ab:76:0b:
                    91:e2:f8:ff:f2:58:5a:d5:d1:71:ac:23:94:ac:15:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:38:B4:25:B7:2D:CD:D3:FD:65:EE:99:46:93:02:E4:1B:0E:B6
            X509v3 Authority Key Identifier:
                keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/4265BD864D5811EF98470D6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e00::/31

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:76:a1:34:a7:d3:dc:b8:ca:33:6c:80:0a:70:20:51:6d:
         42:89:20:24:ac:94:fe:c4:71:79:3c:9c:65:25:40:76:f6:93:
         68:2b:7a:c6:26:2f:2d:23:fa:3f:7a:30:b5:5b:a6:4d:c8:46:
         22:6e:7e:ce:7b:12:ca:56:7a:6d:e5:a6:8d:f2:89:04:f3:87:
         96:ba:b0:ae:bd:96:2d:12:50:4f:46:ab:69:5b:65:9e:1e:45:
         43:fd:3a:1b:02:c9:28:ae:24:6e:26:df:70:6a:80:01:05:ff:
         da:ec:6a:03:7e:55:3c:33:83:a7:57:6d:24:aa:3b:df:38:d8:
         f2:bc:c7:f4:4c:c1:54:2e:fd:31:d7:0b:13:72:a4:ab:ad:a2:
         04:6b:24:ac:4d:0c:27:d6:1a:bd:b6:fb:b7:71:66:86:46:09:
         bf:c2:66:ca:f5:35:76:ba:98:00:d8:9d:c5:ab:6c:d4:6a:16:
         44:fa:e6:c8:cf:b3:d9:96:f9:51:13:7c:42:45:53:08:20:70:
         8c:98:d5:1d:e4:e1:41:0b:8e:2c:7b:31:f1:bc:74:dc:17:fc:
         72:e7:20:b4:ca:ef:22:ae:7f:40:86:e6:00:97:ac:90:27:af:
         49:96:45:7b:e1:4a:12:8f:40:fa:3c:8e:fc:9a:13:23:6d:b7:
         f6:b3:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:36 2024 by rpki-client on console-fra.rpki-client.org