Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
File:                     B8BB04788D0E11EF9759C171C4F9AE02.roa (raw, json)
Hash identifier:          11/Hh4j/AFFQS1iSbMmvJiVpOU5V6AsyR+Oj8b1vZeE=
Subject key identifier:   24:D3:D8:4F:6D:96:7B:6F:0D:99:7E:7A:26:07:FE:10:CD:B4:67:44
Certificate issuer:       /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial:       0733
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
Signing time:             Fri 18 Oct 2024 05:06:24 +0000
ROA not before:           Fri 18 Oct 2024 05:06:24 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     5065
IP address blocks:        45.123.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
                          rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
        Validity
            Not Before: Oct 18 05:06:24 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6711ecd0-2a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:01:fd:4d:f5:f2:af:bb:a6:e7:cc:bd:ac:
                    e6:81:6c:4b:b0:20:cf:a8:5c:cd:cc:39:be:20:3a:
                    30:27:c8:4e:b1:ff:b8:c6:2e:8b:f7:fe:1e:e4:d2:
                    52:20:21:3f:af:eb:30:af:e1:5e:2e:b0:cb:a8:fc:
                    8c:be:95:0e:ab:70:41:4d:3d:c9:4c:ad:a4:e2:ba:
                    13:82:ab:bd:28:0a:b8:5b:cb:4d:fb:27:01:87:27:
                    86:71:50:66:fa:53:53:2a:6b:27:94:0f:b6:c3:69:
                    a9:cf:a3:cc:23:82:98:7b:8d:03:a9:ac:11:76:a6:
                    af:48:1e:d6:45:e5:1e:c3:06:a1:8d:12:9e:f2:86:
                    54:2f:87:f1:62:ee:33:d9:70:80:53:5a:49:c1:93:
                    e9:53:46:07:a0:05:78:81:35:c1:60:b8:6e:e4:e7:
                    ce:54:9b:dc:8f:e0:c2:99:b1:47:d6:29:47:fb:be:
                    ff:20:fc:60:99:4d:87:3a:09:cc:4a:2d:aa:55:5f:
                    f2:af:19:d3:d0:4f:81:ca:f6:59:3f:59:5c:96:66:
                    14:28:58:ef:44:69:67:20:30:6f:d3:cc:0d:95:85:
                    10:6f:93:3c:4e:40:6b:23:3e:17:fe:79:fa:93:77:
                    98:f2:54:b6:1f:0a:40:bd:aa:6e:85:96:9a:dd:a3:
                    8f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D3:D8:4F:6D:96:7B:6F:0D:99:7E:7A:26:07:FE:10:CD:B4:67:44
            X509v3 Authority Key Identifier:
                keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/B8BB04788D0E11EF9759C171C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:6b:8e:91:d1:d3:8f:28:33:7f:f0:90:73:6e:11:3b:b7:
         9c:f3:98:1e:21:20:72:26:ae:4b:d3:f9:ec:b7:ba:1a:0d:c9:
         0a:6c:01:0f:25:b6:05:f0:c1:9a:85:e9:22:15:71:f7:c4:49:
         32:30:16:2a:9a:cb:c3:0c:67:d9:dc:f8:f2:ae:eb:3f:47:cc:
         7b:e0:05:89:92:5f:39:45:27:4a:eb:aa:69:3e:d5:d1:48:ac:
         31:b4:79:36:77:2d:9a:9a:10:5b:1e:fb:a4:b7:02:2a:e5:91:
         cf:be:03:a9:b3:20:90:32:95:36:9f:58:d0:a6:61:c7:b8:0a:
         e8:ab:da:26:be:3f:ed:5e:5e:6d:00:a5:d0:0b:9b:ba:86:5d:
         91:c6:21:fa:06:3b:98:d9:41:ff:88:71:f4:78:d8:74:43:6b:
         51:fb:da:d2:fd:9c:26:fb:08:45:61:96:74:39:4c:41:ed:ba:
         55:75:e9:6e:b5:cd:95:ed:35:6e:be:96:32:8b:bc:a9:df:99:
         5c:53:4a:e3:eb:40:4e:82:f3:26:53:e2:46:4a:7f:05:fb:d4:
         41:27:cd:ff:ea:f9:39:cd:c4:cf:64:2b:99:51:a6:5d:63:79:
         f6:45:a1:e5:da:01:f7:8d:79:e2:72:f3:3e:a2:f7:04:bf:66:
         34:ce:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org