Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
File:                     010342748FE911EDA6F5922AC4F9AE02.roa (raw, json)
Hash identifier:          rkgFtN+easpfj80zyIh12NHa5YIf9/kqUBTz88A9U+0=
Subject key identifier:   8B:60:92:F9:9E:15:66:D2:8C:30:CB:79:34:D3:0D:B7:87:28:CD:DA
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       02B9
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
Signing time:             Mon 13 May 2024 04:08:47 +0000
ROA not before:           Mon 13 May 2024 04:08:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     40676
IP address blocks:        45.113.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 18:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May 13 04:08:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6641924f-8f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:57:0a:4c:24:63:4c:c0:ba:bd:85:41:67:
                    ac:57:b2:03:84:81:86:33:82:99:1e:22:f7:c6:40:
                    de:ff:e5:43:3a:d7:5c:8a:28:8c:d8:fa:d2:d8:a3:
                    75:66:c9:c2:67:8c:37:f9:d7:5d:2c:18:ce:79:1e:
                    71:02:68:2e:d3:6b:26:7b:ff:17:0f:2d:6f:7b:ab:
                    09:cf:d7:ff:fe:6c:d0:4d:ba:5f:3a:c4:66:da:94:
                    b2:89:6e:70:87:db:fa:9b:8b:75:89:61:fa:5b:df:
                    6e:e9:db:e8:01:6d:2b:0b:8c:c2:b4:d1:55:47:ad:
                    34:7f:5a:32:61:ea:a2:89:b6:72:2c:c5:f2:21:35:
                    bb:1d:70:37:56:65:5a:8d:2b:35:ed:53:03:58:32:
                    52:68:d1:22:6a:e0:13:67:f7:40:14:91:33:fc:c5:
                    e4:ad:2f:df:0d:f0:55:ff:d7:57:7b:77:35:73:15:
                    ed:bc:74:52:ff:ce:ca:32:e2:d2:ac:30:69:06:61:
                    f9:e2:6a:81:f2:4a:c1:8c:78:0d:82:06:b9:5a:d5:
                    4f:18:d7:dc:ae:39:2d:be:1e:67:0d:e9:e9:25:a3:
                    82:ed:49:b6:08:d9:fe:37:3b:c1:76:e5:d8:7c:fe:
                    7e:c9:59:be:9d:9b:9c:f6:8f:ac:98:f2:37:51:b0:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:92:F9:9E:15:66:D2:8C:30:CB:79:34:D3:0D:B7:87:28:CD:DA
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/010342748FE911EDA6F5922AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:70:34:76:bf:76:cf:43:21:d6:1a:4a:7f:16:d9:e3:6c:
         ca:95:c0:8d:3e:2a:3a:00:c8:a2:75:33:7f:64:e4:91:87:7a:
         9e:05:23:ed:46:cb:0c:30:18:af:9f:21:7b:a2:9a:f3:65:15:
         90:10:d4:d0:a8:76:61:63:2b:be:37:d0:a5:ba:e3:d3:bd:fe:
         79:a2:ad:b8:9c:36:74:7c:96:89:46:ae:fe:1f:3b:31:2a:43:
         70:3d:49:9c:cc:e6:01:8a:68:3b:04:5b:2e:12:1e:6e:b0:76:
         53:d2:d5:d4:27:7f:2a:c5:e6:0a:df:bd:6b:14:2e:79:97:89:
         fa:e0:f0:1d:6c:69:47:3b:20:01:1f:a3:3f:9c:5f:81:90:f1:
         0b:8e:6b:96:92:05:f0:de:09:66:cd:55:80:ab:b1:03:97:1d:
         cb:30:da:0b:c1:ec:ab:ff:df:98:35:90:8b:90:02:76:c8:f9:
         3d:86:ec:e4:2f:e2:bd:b0:ca:9c:b4:b4:08:fa:ad:41:7f:d6:
         0e:63:7d:1b:74:4c:09:18:a0:5b:dc:b3:26:a7:38:02:bd:72:
         25:b4:0c:0b:c7:26:d0:9a:7d:54:74:6b:b1:02:2d:8e:dc:fe:
         c4:f3:72:00:5e:2f:2c:a4:2e:f8:09:79:d6:26:e2:2c:60:07:
         38:16:4a:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjQwNTEzMDQwODQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjQxOTI0Zi04ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0ZXCkwkY0zAur2FQWesV7IDhIGGM4KZHiL3xkDe/+VDOtdciiiM2PrS2KN1
ZsnCZ4w3+dddLBjOeR5xAmgu02sme/8XDy1ve6sJz9f//mzQTbpfOsRm2pSyiW5w
h9v6m4t1iWH6W99u6dvoAW0rC4zCtNFVR600f1oyYeqiibZyLMXyITW7HXA3VmVa
jSs17VMDWDJSaNEiauATZ/dAFJEz/MXkrS/fDfBV/9dXe3c1cxXtvHRS/87KMuLS
rDBpBmH54mqB8krBjHgNgga5WtVPGNfcrjktvh5nDenpJaOC7Um2CNn+NzvBduXY
fP5+yVm+nZuc9o+smPI3UbD0KwIDAQABo4IClTCCApEwHQYDVR0OBBYEFItgkvme
FWbSjDDLeTTTDbeHKM3aMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMDEwMzQyNzQ4
RkU5MTFFREE2RjU5MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtcVAwDQYJKoZIhvcNAQELBQADggEBAICrcDR2v3bPQyHW
Gkp/FtnjbMqVwI0+KjoAyKJ1M39k5JGHep4FI+1GywwwGK+fIXuimvNlFZAQ1NCo
dmFjK7430KW649O9/nmirbicNnR8lolGrv4fOzEqQ3A9SZzM5gGKaDsEWy4SHm6w
dlPS1dQnfyrF5grfvWsULnmXifrg8B1saUc7IAEfoz+cX4GQ8QuOa5aSBfDeCWbN
VYCrsQOXHcsw2gvB7Kv/35g1kIuQAnbI+T2G7OQv4r2wypy0tAj6rUF/1g5jfRt0
TAkYoFvcsyanOAK9ciW0DAvHJtCafVR0a7ECLY7c/sTzcgBeLyykLvgJedYm4ixg
BzgWSiE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org