Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
File:                     22F2C0647DCB11EEB9150234C4F9AE02.roa (raw, json)
Hash identifier:          0KwtvVvJORSXDZJXoDg8yH9MqNo0pSSAze/dXIycs7s=
Subject key identifier:   BD:A3:48:DC:BA:1E:7C:CD:29:F3:4B:23:B0:80:EA:EF:6E:B8:A2:4E
Certificate issuer:       /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
Certificate serial:       30
Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
Signing time:             Wed 08 Nov 2023 00:09:51 +0000
ROA not before:           Wed 08 Nov 2023 00:09:51 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     149875
IP address blocks:        45.249.226.224/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44
        Validity
            Not Before: Nov  8 00:09:51 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=654ad1cf-4fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4b:14:e0:91:b5:cc:31:8c:c4:c9:70:27:2f:
                    17:72:a5:3d:f3:a1:97:1a:c3:30:12:8b:eb:83:37:
                    c1:3c:9b:b4:61:3e:de:76:30:20:4f:5d:26:fd:19:
                    ff:24:df:75:14:05:2d:cb:36:18:e8:d7:60:3e:a3:
                    5d:cf:f0:0c:17:14:c5:a1:54:ba:c1:7c:df:d6:b6:
                    3e:d9:b9:a8:5a:c0:18:80:c6:0a:29:ec:7f:f3:d4:
                    94:cf:d8:99:c5:ff:0c:a9:0b:47:b7:bd:d5:fc:ea:
                    14:e1:ba:31:7a:84:6f:ce:cb:10:5d:58:0a:7f:e3:
                    c3:37:48:a0:bd:e5:f5:4f:87:52:3e:2e:08:a4:0d:
                    7e:f8:bb:b5:ab:c6:51:12:00:83:f4:ea:6c:73:e6:
                    62:36:d3:a0:2e:97:19:dc:f5:2b:ab:3e:31:ba:dc:
                    7e:05:db:91:72:31:59:a9:c2:5c:6f:6c:33:0f:1c:
                    0d:51:c9:a7:ee:5b:a0:fa:cc:6b:fc:46:5f:fe:d4:
                    af:ef:b1:59:e4:b3:c3:ff:a3:56:ff:6b:f4:61:48:
                    b2:be:81:30:7f:88:e7:3a:1e:f6:32:b2:b3:e2:17:
                    bb:5b:93:15:2d:63:bf:30:69:b3:22:c8:ed:4a:8a:
                    c2:7d:ce:eb:cf:81:87:76:9d:eb:46:ab:e8:b4:2c:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A3:48:DC:BA:1E:7C:CD:29:F3:4B:23:B0:80:EA:EF:6E:B8:A2:4E
            X509v3 Authority Key Identifier:
                keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/22F2C0647DCB11EEB9150234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.226.224/28

    Signature Algorithm: sha256WithRSAEncryption
         b9:5b:52:3b:30:73:86:6d:9f:4b:59:b1:70:38:43:1f:fc:ba:
         41:49:50:a0:61:f9:1b:46:9e:b1:7a:4b:31:d9:2d:9a:95:e8:
         94:8a:1a:11:ad:a9:4f:a2:43:0a:7f:f4:03:97:52:05:45:4c:
         de:2d:e8:23:08:6f:cb:72:d8:dd:a7:ea:2a:dd:81:d8:a5:a7:
         de:ea:9a:f0:a8:fb:d1:26:96:04:6a:32:37:a9:79:62:3b:3a:
         72:ac:76:56:98:9c:8b:86:79:b2:ab:50:b4:95:77:36:5a:2a:
         a1:58:91:64:c0:62:4a:a6:54:a6:52:d1:1a:70:ff:6b:db:2c:
         f5:76:05:86:f1:2f:58:43:aa:4b:e4:e2:18:b4:ec:81:32:f5:
         4e:7f:87:5a:f0:be:1c:37:4b:ee:4b:78:b5:39:11:d5:e4:c1:
         00:4d:e3:21:a2:86:c7:fd:14:8f:6e:c2:a9:c0:6d:4d:54:82:
         bf:b4:b9:40:f4:04:24:41:d7:07:65:bb:7d:2e:da:dd:45:d0:
         72:55:2e:13:95:fc:be:c6:a9:39:6c:c1:f3:10:17:0e:4f:4f:
         a0:83:9f:45:5b:ae:a2:33:75:a8:ea:c3:38:79:99:61:b6:0c:
         58:e5:d8:df:93:01:94:1e:95:e9:68:64:01:f9:2f:e7:e5:22:
         2e:9e:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 08:55:05 2024 by rpki-client on console-ams.rpki-client.org