Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
File:                     1F676C22068711EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier:          js7wAPY4vYVuobTGafcZGa/sKzvGw3A4kNsurTbXJzQ=
Subject key identifier:   A7:01:ED:64:01:18:A0:9B:BA:BB:05:C3:B0:B7:47:9B:AF:DA:A7:64
Certificate issuer:       /CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
Certificate serial:       0AD2
Authority key identifier: 20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
Signing time:             Thu 10 Oct 2024 07:10:08 +0000
ROA not before:           Thu 10 Oct 2024 07:10:08 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        45.115.26.0/24 maxlen: 24
                          103.55.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl
                          rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2770 (0xad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178B2B/serialNumber=202079D6C9FE07BF186221D1A99827CBF6B122AE
        Validity
            Not Before: Oct 10 07:10:08 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67077dd0-7b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:02:da:68:bc:0c:8c:a2:62:fd:14:22:c3:
                    de:ee:70:78:17:a0:c6:b9:2c:08:be:14:a1:5a:b4:
                    26:1f:f4:29:1d:6f:45:f1:14:55:41:1d:0a:14:dd:
                    57:08:96:4f:cc:b8:fb:1f:2a:15:e2:a9:b8:2f:3c:
                    51:ef:d4:20:73:f1:98:17:26:8c:0a:c6:ce:37:0f:
                    85:ec:11:9b:98:6d:06:e1:83:92:2f:7d:ea:8f:93:
                    8e:a4:50:bd:a9:32:64:d4:df:a4:c3:41:d1:bc:a1:
                    fa:c8:d1:3e:af:e9:0e:93:d5:3c:4b:0e:85:1d:6a:
                    ac:53:27:17:10:a8:10:42:a4:55:4e:be:15:91:81:
                    f6:77:53:19:d9:36:e4:15:51:15:ef:a1:f8:18:66:
                    4c:7a:d7:78:4c:5e:7b:d6:a0:13:b0:47:58:68:db:
                    5c:52:10:5d:b3:1e:90:49:c5:a9:35:1c:57:10:2d:
                    e9:c8:45:f0:3a:07:bc:39:21:f2:aa:8a:9a:d8:da:
                    fb:45:07:ee:73:44:64:11:0f:85:31:5a:25:2d:a5:
                    8f:c8:ff:5b:3e:45:95:47:e4:ed:43:5e:30:de:a6:
                    04:38:1b:6d:6a:ae:0b:ff:2d:32:bf:dd:f5:22:69:
                    be:e6:46:b9:8c:25:9c:1f:8e:b8:cc:e7:2f:7d:49:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:ED:64:01:18:A0:9B:BA:BB:05:C3:B0:B7:47:9B:AF:DA:A7:64
            X509v3 Authority Key Identifier:
                keyid:20:20:79:D6:C9:FE:07:BF:18:62:21:D1:A9:98:27:CB:F6:B1:22:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/ICB51sn-B78YYiHRqZgny_axIq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ICB51sn-B78YYiHRqZgny_axIq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178B2B/BFDD222E3C4411EAAEE6F70AC4F9AE02/1F676C22068711EDA1C2070DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.26.0/24
                  103.55.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:38:e3:f5:d8:d0:77:85:48:9d:3b:6c:f1:21:e4:8b:7e:ef:
         6e:6e:8a:35:4f:fb:64:39:f1:34:c0:db:95:c5:e1:db:48:1c:
         94:2a:e7:16:55:56:a0:3f:5b:60:70:37:b0:bd:3e:0f:59:35:
         d3:c8:c1:2d:0f:f0:b0:d2:78:b4:c6:e0:34:0d:68:14:57:59:
         95:b2:35:df:18:14:ed:51:1b:80:19:a4:44:31:c9:e5:0f:95:
         13:94:39:25:e4:5b:60:1e:c1:1f:2f:ca:2c:27:41:cc:b1:0a:
         4b:2b:ca:f6:b4:93:1a:fb:98:87:4d:37:40:36:b1:40:89:12:
         19:fc:53:ff:60:52:b9:fb:e7:9a:c2:bf:48:78:1e:a8:79:b5:
         56:da:71:32:4e:c5:3f:aa:4d:88:1c:d1:2c:fc:54:28:33:d8:
         d9:06:f8:37:cf:27:82:fa:79:01:9c:3f:ca:35:a9:3c:c7:4f:
         2f:3e:4b:1a:7d:46:92:08:9e:69:e7:a4:6e:0b:14:e3:fd:13:
         bb:84:46:37:50:79:a6:f2:09:2b:e5:b8:03:db:5b:d0:6e:80:
         6f:95:9c:d6:aa:95:18:68:4d:6f:26:a5:f3:e2:4d:c4:46:ee:
         0f:f5:98:a7:ea:69:af:fa:b4:69:3d:6a:c9:e2:d7:19:03:11:
         18:9d:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:34:53 2024 by rpki-client on console-ams.rpki-client.org