Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/ABD794FA669A11EFAA2C7969C4F9AE02.roa
File:                     ABD794FA669A11EFAA2C7969C4F9AE02.roa (raw, json)
Hash identifier:          N036pW0PtfBFAIVyyK5dLQ8pyR5U9JWbZRqxG+qDKMg=
Subject key identifier:   AF:49:47:71:2C:F5:00:0D:45:A7:B4:34:59:1C:9C:09:15:E8:BE:98
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       33CF
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/ABD794FA669A11EFAA2C7969C4F9AE02.roa
Signing time:             Fri 30 Aug 2024 06:39:57 +0000
ROA not before:           Fri 30 Aug 2024 06:39:57 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     21700
IP address blocks:        122.8.96.0/22 maxlen: 22
                          122.8.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13263 (0x33cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Aug 30 06:39:57 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66d1693c-846e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:fa:01:ba:bf:80:7b:08:59:95:07:b5:6b:
                    f8:76:e4:d1:15:e0:75:ca:d4:90:62:a5:28:ca:83:
                    c8:b0:89:f9:99:8f:2d:2a:e4:58:33:c0:f1:38:8f:
                    89:6d:6c:c8:4b:9a:66:ae:eb:63:dd:57:3b:5a:d3:
                    b8:23:34:76:f9:bc:cd:66:e7:ca:4f:66:ac:07:ec:
                    ca:25:d1:9a:55:ff:59:41:85:c7:04:65:e8:86:35:
                    bc:1c:d1:0e:d7:b3:b7:5f:82:ce:63:7a:a3:b6:80:
                    d4:4d:e0:15:0f:b2:bc:7d:eb:c2:8e:1e:2b:1b:b5:
                    db:89:3b:fb:0f:1d:ac:f1:b6:73:5f:2c:58:e5:58:
                    86:f5:f0:65:c2:5d:1c:27:49:6e:43:0a:23:34:89:
                    0e:ad:57:7d:64:ee:f2:6e:5a:10:11:17:e2:66:28:
                    03:f3:7c:2d:76:72:8d:f0:bf:f6:b9:2e:e3:e5:5a:
                    ef:da:dd:14:fd:df:19:d1:4f:ec:d1:84:b2:b9:c5:
                    ff:e9:cc:1e:50:32:83:9b:7b:41:68:cf:7d:38:f9:
                    8b:60:85:aa:72:32:0a:a9:16:40:e9:d1:89:f3:f7:
                    23:30:0e:ef:32:dc:ef:f5:2a:74:b5:f4:56:df:62:
                    5d:28:ec:35:31:00:64:bb:f7:45:6e:a8:ff:d5:2d:
                    0c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:49:47:71:2C:F5:00:0D:45:A7:B4:34:59:1C:9C:09:15:E8:BE:98
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/ABD794FA669A11EFAA2C7969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.96.0/22
                  122.8.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:28:b6:67:01:84:bc:2b:ed:74:b7:ac:31:c3:c2:0a:82:18:
         f2:2f:22:2f:89:f0:ee:67:41:ce:50:13:7e:6b:12:86:25:b3:
         35:54:38:59:af:4c:48:c4:73:75:15:4b:ce:28:34:ae:c4:f8:
         41:00:a2:cd:05:16:81:26:3e:fd:18:b1:c1:13:a4:95:8e:ff:
         78:9f:ae:b0:c1:6a:d3:24:af:56:24:a2:e9:15:c5:50:fd:92:
         41:cd:19:d0:e6:60:5c:9e:71:bc:71:0b:bd:ea:e6:07:52:ab:
         25:76:ed:04:99:78:65:e2:40:8a:92:7f:aa:58:25:3d:65:eb:
         5c:59:8e:a4:43:4f:00:1e:63:d4:de:ae:e7:32:d7:53:95:28:
         22:b4:af:da:93:11:33:66:1f:a3:82:5b:02:b3:7e:c3:d8:c5:
         b4:0a:40:b4:6e:4b:c1:48:28:c8:3d:50:06:1b:c0:48:33:5e:
         28:03:c8:1f:83:ad:dc:38:b0:ed:29:c7:b9:45:fe:d7:a2:b1:
         3e:d6:64:88:07:c9:a0:f9:aa:ae:05:e2:cf:cb:d7:51:33:0d:
         c1:10:e8:12:77:89:b6:7d:5e:55:4a:f2:a1:b7:b8:7d:8c:96:
         a8:85:9f:5a:3d:e5:55:02:bb:ef:07:5d:2e:73:c2:1d:19:91:
         59:9f:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org