Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa
File:                     AD1655A2DFEF11EB8486545FC4F9AE02.roa (raw, json)
Hash identifier:          wIyrFZVCRyVjiLRR2zYfkd9OzdUfRihQWq6QQuZjBOE=
Subject key identifier:   A2:FC:20:EF:1C:40:96:68:3B:65:1F:AF:F2:06:C6:EB:EB:EC:4A:4A
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1811
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa
Signing time:             Fri 12 Jan 2024 17:04:46 +0000
ROA not before:           Fri 12 Jan 2024 17:04:46 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     35994
IP address blocks:        125.56.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 16:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6161 (0x1811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan 12 17:04:46 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65a1712e-3521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:da:d5:91:a0:c1:07:e9:83:cf:ea:f0:dd:
                    8e:8e:2d:d8:18:f6:b2:5e:5e:90:cb:91:80:86:64:
                    c5:e7:be:0d:dc:40:fd:63:b3:8b:31:2e:22:3c:d4:
                    23:d9:85:2a:2f:6c:2c:35:db:f9:05:13:a7:38:80:
                    80:69:17:b5:42:2d:58:25:d7:91:8e:fd:8c:10:51:
                    51:4c:e9:c6:94:9f:bb:a7:17:8a:89:37:0c:82:46:
                    18:03:6c:ca:68:28:42:7b:44:0f:84:1d:ec:fc:e7:
                    97:9b:94:b8:d4:97:66:f2:c4:da:1c:5d:7f:ad:3d:
                    6b:71:6e:ee:70:b6:38:f4:f7:c2:ee:6e:a7:28:02:
                    33:ce:90:6b:33:dc:0a:85:ba:9e:46:32:52:2c:34:
                    97:d1:61:83:aa:02:00:67:e7:a4:50:c1:18:bc:01:
                    b1:5a:84:21:da:fd:f7:5c:c2:e5:a2:83:6a:16:0b:
                    02:1e:ee:e9:0d:7b:b8:60:7d:29:dc:40:2e:3b:a2:
                    bf:7e:5f:f4:b4:85:eb:14:73:00:00:db:d7:6f:b2:
                    9f:6d:4d:d8:e3:1a:49:36:8a:ce:f3:cb:5f:ca:e8:
                    b7:0d:98:ce:5e:c6:34:e7:e6:b3:c0:1b:c9:2e:d4:
                    36:f4:75:d8:0e:4c:54:55:b5:a7:60:75:6f:dd:b5:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:20:EF:1C:40:96:68:3B:65:1F:AF:F2:06:C6:EB:EB:EC:4A:4A
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/AD1655A2DFEF11EB8486545FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.56.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:fb:29:bd:2a:45:d5:2d:a1:24:a0:0f:15:45:2c:20:fa:
         db:01:8b:4c:26:63:ff:26:b8:1c:25:57:13:1e:34:f8:e8:b7:
         dd:71:4e:fc:93:4f:6a:36:c0:97:f4:71:bd:cc:ea:9e:ce:c2:
         59:f8:55:d4:ff:51:18:8d:d0:54:e1:62:ae:66:1e:9e:e8:d8:
         9e:33:9b:bb:c9:71:50:01:64:64:84:4c:21:e2:32:ca:f5:86:
         ad:cf:ac:4a:22:c6:c0:f1:93:1c:e5:af:a8:3e:2d:2a:f8:8d:
         23:4c:a3:8e:14:e2:6d:41:c4:f8:cf:7d:a7:c2:d8:7a:6c:45:
         92:b8:6f:16:26:1e:96:14:05:0f:ab:ec:30:d4:23:09:cb:80:
         66:fb:df:a8:3b:4b:8d:eb:d8:36:e5:02:49:a4:93:97:be:1c:
         61:07:24:f5:57:f5:cf:be:fd:4a:7d:1d:38:e2:84:57:5f:96:
         f1:1a:51:6c:78:0e:98:b6:00:b1:ab:3c:a9:66:f0:f2:90:56:
         65:f4:23:46:57:9c:90:0f:9e:1b:1c:97:83:7c:89:38:d1:c3:
         66:7f:83:88:f4:5a:5e:f2:79:6f:c0:40:6b:c3:52:31:ad:63:
         d1:12:63:ba:92:97:9f:68:9b:f9:d5:c8:d0:74:23:94:8e:84:
         a2:40:32:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:19 2024 by rpki-client on console-ams.rpki-client.org