Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/C82EFE8E38E311EF94CEFA33C4F9AE02.roa
File:                     C82EFE8E38E311EF94CEFA33C4F9AE02.roa (raw, json)
Hash identifier:          A22A7vfbdFCKohYtFWHmIoIwrTgE4FKBGK/cUFAx+GQ=
Subject key identifier:   83:0F:09:55:74:17:E6:1A:C0:5E:05:42:3F:65:64:7E:BE:20:C1:A3
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       02
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/C82EFE8E38E311EF94CEFA33C4F9AE02.roa
Signing time:             Wed 03 Jul 2024 02:27:24 +0000
ROA not before:           Wed 03 Jul 2024 02:27:24 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     1221
IP address blocks:        2001:df0:201::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Sep 2024 04:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Jul  3 02:27:24 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6684b70c-75f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:ba:38:d2:84:3f:90:6e:a5:9e:c0:e5:68:
                    7c:14:6d:dc:b4:e0:49:0c:21:75:94:0d:49:90:3a:
                    e3:f0:63:ae:22:fb:fc:78:5e:de:28:82:2d:45:47:
                    79:79:2b:63:a0:7e:a8:fe:3e:09:8d:39:80:14:97:
                    32:e7:d5:41:c0:dd:0a:72:6f:7c:f9:90:b5:06:eb:
                    40:90:80:97:4e:83:41:e2:4a:32:4d:04:53:ef:91:
                    14:79:1e:ab:e1:43:36:27:6f:1d:2b:5b:e6:6c:56:
                    e6:a7:52:f0:36:21:ed:7d:c3:61:fe:7c:93:66:aa:
                    d0:f3:bf:94:76:39:ac:4b:14:cd:92:ad:f8:d5:c1:
                    b3:e1:bf:e1:90:59:aa:28:7f:b0:e7:c3:cf:e2:ad:
                    4d:a3:3f:47:d0:aa:23:74:ce:45:b1:15:8f:75:2c:
                    d9:35:e9:0d:fa:25:89:09:6b:f4:9d:a2:a5:d5:a0:
                    aa:4e:00:05:2c:e3:81:59:66:cd:7a:66:1d:d5:23:
                    94:81:15:be:09:8b:ed:9e:ce:81:93:f9:df:52:25:
                    9a:4e:c7:af:f6:09:98:89:4f:36:ae:ea:aa:ca:9c:
                    d9:44:88:71:03:8d:f0:a5:6e:a0:01:9a:41:65:29:
                    18:73:52:2d:bb:c5:14:30:19:c7:79:cc:73:16:ee:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0F:09:55:74:17:E6:1A:C0:5E:05:42:3F:65:64:7E:BE:20:C1:A3
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/C82EFE8E38E311EF94CEFA33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:201::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:93:4e:e0:b8:3a:c4:96:e0:3d:81:2f:62:7d:da:e6:88:5a:
         86:4c:74:a8:b1:bd:f7:7c:f6:2d:4a:07:e7:40:9e:fe:bf:71:
         0d:ad:f6:cc:c4:5e:b2:10:25:f4:4e:30:e5:e9:44:0b:fb:ea:
         b2:0f:ee:58:ff:e6:ec:3e:6b:05:66:ba:50:99:eb:a4:c5:c7:
         fa:fe:b3:03:26:12:14:8b:46:1d:e3:93:b3:5e:1b:bf:67:62:
         ff:37:b3:55:18:bd:91:ac:e2:b1:24:bf:9b:41:81:d2:fe:18:
         f7:88:8d:dd:36:48:14:f1:a8:2c:bd:cc:65:91:c2:44:44:93:
         1a:27:4b:e5:31:56:1e:92:d9:81:e8:4f:a2:69:e4:7e:b7:6a:
         26:27:5e:05:a3:c7:05:29:6d:ea:16:6a:5b:15:5f:cd:03:95:
         01:26:6f:3b:dc:ea:81:31:e3:44:91:16:97:b7:83:7c:98:3c:
         64:49:99:6f:ad:af:d3:c7:d7:a1:9a:4a:1a:5e:3c:17:28:32:
         38:58:4f:3c:ab:5a:97:23:e2:7b:ff:22:5a:25:9c:b3:cc:0a:
         a2:85:d0:e3:20:59:67:28:d2:f4:96:61:84:26:7b:fd:7a:57:
         02:5c:24:41:7a:a2:93:f8:0e:4e:68:5c:64:40:76:48:ac:c2:
         f1:32:fd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 08:11:55 2024 by rpki-client on console-ams.rpki-client.org