Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
File:                     A937C2200FA511EFBDB06936C4F9AE02.roa (raw, json)
Hash identifier:          fjeTe75jZm5dJALxtcTp9K54dbCVL0/Mg85S4l4+7No=
Subject key identifier:   50:95:DD:08:14:29:46:A0:4A:1F:00:DE:06:27:E0:D5:7C:B6:2E:AF
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       26
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
Signing time:             Thu 11 Jul 2024 07:38:32 +0000
ROA not before:           Thu 11 Jul 2024 07:38:32 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     46015
IP address blocks:        45.127.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Jul 11 07:38:32 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=668f8bf8-b5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:d8:af:c1:13:6b:d4:6a:41:49:df:cf:ae:
                    2e:6f:31:44:65:60:83:9a:49:47:b8:a2:47:58:23:
                    69:3f:43:89:f2:0d:9b:f0:0e:37:47:ab:96:c3:0f:
                    22:e1:71:f8:06:e3:c4:46:26:ff:62:06:aa:b1:bd:
                    62:dd:e7:44:4f:d6:cc:b2:84:db:73:c8:ca:27:eb:
                    e3:ab:d0:44:18:8e:16:e8:1d:d1:2e:8f:0f:02:8a:
                    0a:6e:a8:34:9b:7d:84:a4:44:c5:c1:9e:63:31:2d:
                    84:cf:f4:71:e9:5f:69:67:95:a6:94:97:03:c5:16:
                    a5:b3:15:e1:4d:64:83:cb:35:36:5c:96:bb:b4:69:
                    6a:50:ab:a2:44:2d:76:ab:b8:77:1f:4f:ce:9b:f8:
                    79:a2:6e:5b:f7:e8:e1:98:a9:5a:6a:ae:fc:7e:15:
                    4b:37:13:05:c3:66:9d:a7:49:ea:67:44:2c:8b:a3:
                    bb:14:d5:ba:34:b3:93:d3:08:38:d5:35:c8:b0:45:
                    59:51:28:04:f4:db:df:51:f7:40:8e:f8:8c:c9:98:
                    89:68:8f:19:80:c7:23:75:14:cc:59:25:f2:aa:83:
                    e5:25:49:ac:c7:fd:3f:05:13:d4:a2:3d:7e:27:60:
                    3a:57:65:f8:51:2b:78:0e:7e:bd:f9:a5:7c:2f:a0:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:DD:08:14:29:46:A0:4A:1F:00:DE:06:27:E0:D5:7C:B6:2E:AF
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/A937C2200FA511EFBDB06936C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:64:ef:7c:bb:7b:a9:b1:21:70:20:0c:6f:87:0d:af:02:59:
         58:9d:26:6a:96:f3:2c:57:dd:91:24:9f:10:88:3f:d4:8b:9b:
         59:24:ac:d5:a8:39:5d:54:cf:a4:4c:87:83:e6:1b:c5:0c:c0:
         31:6d:e7:0a:7e:d7:13:28:81:9b:21:a9:05:62:35:36:09:7b:
         11:61:7f:27:81:a3:e7:e3:89:ee:b4:98:ce:a6:34:15:80:65:
         21:e9:d9:b5:cb:8f:79:57:f6:68:8d:48:e7:5c:5f:d5:f8:dd:
         65:ae:dd:4b:60:ea:72:45:73:e3:c5:ef:eb:1d:b8:93:42:b6:
         73:27:a5:d8:49:4e:a6:df:e4:cb:2b:cc:05:e2:ea:fa:ef:ca:
         81:8b:80:09:e2:2d:1c:69:d9:b3:17:81:59:69:e7:76:61:4f:
         f4:1c:dc:19:6a:a4:88:e2:19:58:99:66:2f:d0:5b:ae:e2:5e:
         90:88:e3:06:24:3d:a0:ae:12:fb:e3:ad:bb:3a:e2:6d:e2:e2:
         6f:68:04:9a:48:13:36:7c:04:41:2e:0d:e7:f9:f6:6a:fb:65:
         01:83:6f:58:8f:2c:75:10:78:59:3d:0e:7a:21:eb:38:9b:e0:
         98:ce:3c:94:55:55:c1:19:e1:9c:e4:49:b6:bd:d3:fd:fe:46:
         0b:ee:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org