Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/1479C514596A11ECB1394271C4F9AE02.roa
File:                     1479C514596A11ECB1394271C4F9AE02.roa (raw, json)
Hash identifier:          BB94ioWlwmy+5Fk/XHM3As2KqIhpAGjiHmhVZf8F+aE=
Subject key identifier:   EE:9A:CC:B0:54:92:8F:CC:F1:DF:93:FA:D7:D0:FA:96:92:83:DA:C1
Certificate issuer:       /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial:       0342
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/1479C514596A11ECB1394271C4F9AE02.roa
Signing time:             Fri 08 Dec 2023 17:45:04 +0000
ROA not before:           Fri 08 Dec 2023 17:45:04 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24482
IP address blocks:        45.129.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
        Validity
            Not Before: Dec  8 17:45:04 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=65735620-3463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:5a:0d:f9:18:93:43:59:57:81:95:a7:9f:
                    d9:00:5d:44:99:c5:10:63:a4:45:fe:3d:d5:a9:17:
                    0c:09:b9:7a:ac:17:e5:61:9c:7b:47:6c:fb:bd:51:
                    65:1b:cb:fd:ab:d0:fb:0a:99:14:14:5e:69:59:e1:
                    fa:bb:bf:b9:46:92:a2:29:aa:68:07:54:d4:5b:0b:
                    1d:bd:de:cc:83:ee:b8:8e:9a:0f:b3:1b:0d:59:ac:
                    17:f2:b3:41:00:d6:eb:ce:ed:37:5c:94:ce:37:fe:
                    0e:c6:ef:08:a7:69:d7:a6:8c:28:f7:d1:10:d9:a4:
                    fd:bf:10:1d:1f:9a:fa:4e:33:bc:9b:55:c6:6b:42:
                    0f:de:f7:17:bb:46:8a:fc:69:ad:c6:41:dc:ef:0d:
                    c9:11:d9:0c:49:75:05:dd:f3:04:7e:08:9a:b0:88:
                    eb:f9:d5:33:ef:84:ea:52:aa:ff:62:46:36:0f:31:
                    8d:c6:0d:50:65:78:3b:56:de:21:f7:7a:7b:72:83:
                    a1:c1:de:dd:1a:3c:a7:e6:76:d7:c2:fe:37:e2:c9:
                    d9:8a:f6:40:68:38:60:19:ad:fd:2c:b3:49:b1:f7:
                    0f:c8:50:3a:d4:06:e5:25:70:90:4d:e2:3f:2a:62:
                    95:3e:c4:02:a2:22:d5:cf:bd:c2:a0:ea:6a:92:c9:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9A:CC:B0:54:92:8F:CC:F1:DF:93:FA:D7:D0:FA:96:92:83:DA:C1
            X509v3 Authority Key Identifier:
                keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/1479C514596A11ECB1394271C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a3:2e:6a:36:cc:2c:b7:b7:43:b1:b7:c9:68:12:a4:72:78:
         d7:99:9c:ec:fd:cf:b1:f9:cb:14:86:22:18:e9:9a:b9:f7:f8:
         88:9b:99:e1:60:82:88:cc:76:d5:dd:07:8d:84:4d:6b:0c:67:
         1e:07:ee:00:d9:7f:c9:56:02:2f:4e:c7:2f:67:66:28:1e:79:
         f5:f2:0f:51:15:19:cc:b7:4d:d3:ad:a3:2e:37:d0:d3:91:b9:
         84:a3:62:d7:84:7f:d1:b9:8f:34:e2:1b:fe:17:29:c4:a0:08:
         8a:8b:3b:a3:d6:ea:ee:8c:51:fa:94:a9:4a:ea:37:4a:96:c8:
         ec:96:2c:95:cb:88:1d:1b:f7:c4:cd:7c:90:7f:17:2d:7c:e3:
         f3:a3:cd:d0:5d:11:89:51:f2:65:b8:f9:9b:e2:23:9f:ec:12:
         f6:13:7b:00:c1:3b:c7:8b:bc:d7:56:60:50:d8:12:56:23:5d:
         d3:94:26:ba:a0:68:3c:e5:fd:8a:a6:0c:b9:5d:53:90:f9:da:
         5d:24:2e:c1:e2:76:e3:b4:8d:86:16:6d:df:fb:b0:be:a4:d5:
         7f:6a:ae:9a:d6:ab:50:29:ca:e8:51:12:c6:ae:0a:36:38:9c:
         71:d1:0c:32:7e:0e:00:8a:f6:08:0b:af:31:28:d5:29:97:d4:
         d0:47:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:55 2024 by rpki-client on console-fra.rpki-client.org