Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
File:                     7AC60C48CEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier:          Kmy121XzUGh8ewwF3KZSeQZhERtI3ipUIuwTYhIH4NM=
Subject key identifier:   CC:3E:A2:72:A6:4E:AC:9B:1C:FD:AA:AD:D2:0C:E1:4B:AD:F2:1A:A4
Certificate issuer:       /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial:       05F8
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
Signing time:             Thu 04 Jul 2024 23:41:22 +0000
ROA not before:           Thu 04 Jul 2024 23:41:22 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     38465
IP address blocks:        210.215.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
        Validity
            Not Before: Jul  4 23:41:22 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66873321-ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f5:8f:e1:a6:35:d5:09:24:dc:07:ba:b2:38:
                    23:78:25:c7:dd:f9:da:7b:42:3a:cb:84:10:fc:b3:
                    38:a1:b3:da:79:59:e8:44:2c:b6:f1:cf:a3:d7:69:
                    6e:2f:24:d4:8c:23:fd:95:df:ba:a1:5e:59:3d:f5:
                    60:b9:d9:a0:86:d0:62:ef:23:38:d5:62:2b:e8:99:
                    8c:d9:7a:e7:58:7a:b5:01:96:0a:b5:c6:f5:c4:4a:
                    e8:60:f1:05:d5:7d:b0:e7:f6:ce:fa:c7:93:43:ae:
                    9d:31:5a:2d:32:9a:00:f0:fd:24:ea:7b:af:29:ae:
                    7e:fe:15:e5:73:a8:17:b2:8e:52:b3:ca:be:e8:d3:
                    ec:cd:de:b8:25:4d:ca:4b:13:e9:9e:62:d6:83:03:
                    50:75:29:83:15:3d:0c:6a:6c:38:c8:f5:8f:cf:de:
                    b7:36:68:9d:55:d7:e7:c7:83:25:25:6f:fa:97:a8:
                    c0:90:c2:cf:4a:4d:3d:bf:8a:86:71:9b:20:64:07:
                    dd:01:68:f8:ee:a7:9c:39:42:54:de:30:fb:ac:4a:
                    23:25:65:94:59:64:1a:e2:7e:cb:99:10:d8:35:c7:
                    c2:f2:c9:38:21:ea:e1:f8:43:38:8c:f8:9a:14:8c:
                    8a:c8:78:7e:b5:1f:72:49:9a:ab:b2:62:a9:74:63:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3E:A2:72:A6:4E:AC:9B:1C:FD:AA:AD:D2:0C:E1:4B:AD:F2:1A:A4
            X509v3 Authority Key Identifier:
                keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.215.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:4d:87:ea:29:74:1e:6c:11:c5:b5:81:ef:77:38:71:05:
         e7:4c:a6:7d:9a:c2:7f:0a:ce:68:56:37:b8:55:07:b1:34:15:
         df:46:08:21:8b:5c:94:e9:78:71:0c:02:db:94:91:b9:71:84:
         eb:c0:e1:7c:3a:0d:f5:91:47:36:84:83:41:20:5f:16:58:e8:
         89:47:30:1f:b0:64:25:bb:a6:95:2f:ef:74:3b:1f:d5:95:16:
         5a:08:2c:c9:21:1f:63:99:68:32:fc:3a:8a:a4:60:fa:1d:f4:
         a7:72:fd:09:9e:0d:a7:7e:fa:c2:64:02:37:91:f0:4c:d8:64:
         66:a6:43:8d:76:77:f4:bd:1c:9e:36:8d:e1:d8:a2:00:06:70:
         41:78:36:74:d0:d2:f3:bd:9d:e5:48:17:2c:a7:c6:96:3a:77:
         da:de:7b:b6:be:79:f9:82:7e:1d:6f:ac:1d:d4:c4:99:b9:dd:
         c8:69:00:60:c4:95:99:56:6e:db:47:c8:c2:4b:17:07:93:4e:
         c7:c5:d2:35:f6:39:ea:c5:87:e0:34:82:08:4e:9c:90:dc:40:
         45:4d:c3:8a:ff:1f:0c:59:f0:83:99:b6:0a:1e:77:c1:0b:c2:
         5a:9d:81:5e:da:f4:c2:88:f9:32:3c:13:28:cc:ca:37:14:c0:
         a2:04:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:29 2024 by rpki-client on console-fra.rpki-client.org