Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/10FEE4F0822B11EE878EB774C4F9AE02.roa
File:                     10FEE4F0822B11EE878EB774C4F9AE02.roa (raw, json)
Hash identifier:          nnWbn+2cl3nxqeQE6JIoD8N3K6F3BV/Ejrkhyfo5uV4=
Subject key identifier:   A3:E6:74:62:F4:A1:CD:D9:A3:F5:1C:0F:C0:B0:A1:7A:08:05:64:B4
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0A27
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/10FEE4F0822B11EE878EB774C4F9AE02.roa
Signing time:             Sat 02 Dec 2023 13:47:06 +0000
ROA not before:           Sat 02 Dec 2023 13:47:06 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        45.115.24.0/24 maxlen: 24
                          45.115.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 20:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Dec  2 13:47:06 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=656b355a-4609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:03:52:70:e7:88:ea:58:87:1c:46:57:b6:
                    b7:bd:bd:e2:77:0f:ab:9a:b0:db:28:14:d5:ea:49:
                    8b:02:a9:28:aa:95:ce:3e:ec:e8:f8:2c:7f:75:af:
                    3a:b6:cb:f9:0b:e6:03:c1:54:6d:7b:a5:ff:4b:89:
                    ee:0c:5e:77:cf:9e:48:bb:ea:84:81:b0:d3:5a:c5:
                    c4:d7:bc:8f:59:71:ae:39:58:31:37:ca:1b:97:13:
                    00:19:4d:03:f0:6e:67:58:45:2f:17:31:71:48:8d:
                    dc:59:c1:ba:a1:6c:0e:95:77:79:4f:f4:a1:7c:97:
                    39:3c:ea:42:0d:97:85:ce:da:00:86:94:bc:1c:c0:
                    89:c3:f3:13:c4:d5:53:ea:a0:cf:81:5e:40:38:e0:
                    a7:c3:78:d0:ab:7c:9a:1f:d8:d9:b4:99:87:41:93:
                    55:d1:d8:ec:c3:aa:a0:83:2b:4f:c1:ce:4d:ce:12:
                    a8:93:b4:c3:8d:61:db:78:af:ca:76:19:11:a1:9f:
                    ee:29:f5:be:dc:57:e6:5c:cd:61:22:dd:68:cc:63:
                    18:9e:70:46:8e:35:79:2d:99:4a:b4:a7:f3:d9:6e:
                    30:6a:f8:60:dd:c4:e8:ea:cf:9e:52:80:46:6f:2f:
                    b3:f1:21:d9:d0:63:4e:e9:05:15:da:1b:74:ba:8c:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:74:62:F4:A1:CD:D9:A3:F5:1C:0F:C0:B0:A1:7A:08:05:64:B4
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/10FEE4F0822B11EE878EB774C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.24.0/24
                  45.115.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:26:bb:b2:60:2f:4a:64:f4:79:a6:b2:7c:77:20:6f:63:
         67:c9:ae:a9:dc:83:6c:54:67:15:c2:f8:f3:2a:05:35:1e:2f:
         01:49:65:d0:15:77:7e:aa:43:89:25:65:28:66:15:af:dc:78:
         80:4c:39:b2:6d:fe:d0:b7:6c:ad:a6:cf:f6:3e:d7:ee:de:2e:
         0f:9f:0b:14:c9:63:23:94:87:ae:00:e5:59:05:ba:f7:88:be:
         67:3f:de:1d:cd:47:5d:3d:45:c0:72:45:78:92:d9:1f:d0:e7:
         7c:dd:b0:77:8f:68:9d:db:78:02:10:6b:c6:82:1a:68:d9:97:
         56:fd:61:15:55:76:be:e3:70:c5:19:5c:5c:cc:8a:41:22:03:
         25:66:7f:cf:81:10:2d:6c:be:f8:53:df:60:89:ee:af:8c:c8:
         b8:4f:a2:f1:4c:81:01:6b:b4:5d:33:bd:7f:05:cd:16:32:f0:
         16:86:5b:91:31:25:ae:94:d1:3b:61:91:c6:82:93:ba:f7:98:
         f3:01:8b:91:66:72:7e:96:38:e5:af:df:c1:5b:90:77:d4:7c:
         e9:aa:e1:50:be:87:9d:12:bb:8f:3b:b8:22:1a:e3:7a:85:ee:
         b0:7c:8f:0d:a0:7a:67:89:dd:d9:2b:00:9e:ae:a1:93:7b:4d:
         45:17:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:12 2024 by rpki-client on console-ams.rpki-client.org