Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
File:                     0DEDF8C290E511EFBB48661DC4F9AE02.roa (raw, json)
Hash identifier:          /wOg9gtrN+8DrYFTeiVl4tpzdcNIlWbG4hivynbKbEQ=
Subject key identifier:   1E:AA:A0:1A:F3:3B:43:E1:EB:B6:8F:E8:06:D5:70:00:A1:89:CC:A0
Certificate issuer:       /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
Certificate serial:       09
Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
Signing time:             Wed 23 Oct 2024 02:55:10 +0000
ROA not before:           Wed 23 Oct 2024 02:55:10 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     152127
IP address blocks:        210.79.130.0/23 maxlen: 24
                          2401:5460::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl
                          rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
        Validity
            Not Before: Oct 23 02:55:10 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=6718658e-4934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:c1:0f:02:4d:2e:86:af:17:e7:d3:a7:0c:
                    0b:e9:7b:80:4c:76:74:93:76:1f:d0:5d:4c:b0:2e:
                    04:bf:96:7e:cb:05:52:ec:33:64:0c:3c:f2:d7:14:
                    d3:e1:9d:49:4f:23:51:b2:44:fe:78:d9:7a:5a:6b:
                    ea:b4:12:74:53:9e:bc:77:c3:08:20:55:3c:e3:1b:
                    8b:c1:3b:bd:6a:32:a8:32:03:1f:af:88:4b:33:a5:
                    75:71:b8:ff:77:28:4d:52:44:cc:c3:85:63:e6:91:
                    55:b8:79:2a:ff:f8:b8:d6:34:cd:ca:36:fb:bc:df:
                    07:88:ce:f6:4f:d5:ff:3d:21:32:46:2b:95:9d:70:
                    41:d7:de:79:82:89:20:ac:db:36:96:4f:4d:2f:86:
                    5c:9a:91:00:82:91:c0:78:c9:5a:05:44:d2:24:b7:
                    05:4a:c6:59:76:a0:52:05:a3:8b:47:28:d1:8e:a4:
                    3d:09:1c:81:7a:5a:6d:44:78:66:52:e1:b3:f7:61:
                    fa:df:df:55:91:6a:a3:93:ee:22:4d:39:63:db:a9:
                    8e:d1:a9:fb:59:a7:b9:be:97:f7:97:0f:ca:00:fb:
                    fc:3b:9b:da:60:60:75:29:fb:6c:ab:44:1e:17:0f:
                    2d:36:d2:0f:ef:7a:10:cb:c3:2b:a5:cf:60:e0:65:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AA:A0:1A:F3:3B:43:E1:EB:B6:8F:E8:06:D5:70:00:A1:89:CC:A0
            X509v3 Authority Key Identifier:
                keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.130.0/23
                IPv6:
                  2401:5460::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:06:85:ff:f5:87:28:57:2c:29:4a:bf:79:4a:80:31:10:b1:
         5b:a2:52:21:18:1f:b7:36:0c:02:e3:0d:62:91:31:6c:88:e0:
         a8:c9:36:c6:bb:9f:32:47:bc:b1:91:a6:7d:64:80:4a:51:bc:
         0a:b8:3a:be:3c:99:b0:30:8c:73:92:04:02:9a:79:a8:95:02:
         4b:a2:f2:1e:c3:2a:24:02:73:b1:06:2c:3e:d9:c7:87:91:78:
         f6:db:10:7a:4b:be:7b:69:1a:84:e8:3c:eb:93:bf:57:7f:f8:
         e4:1e:5a:32:22:51:86:55:f4:84:22:79:e4:cd:1f:ad:5a:bd:
         cd:8e:60:c4:9b:f4:96:c8:d9:ec:aa:0d:64:f2:28:38:24:58:
         c6:67:d4:36:14:20:23:48:74:b3:90:c0:5c:2c:8b:d7:28:75:
         c0:56:fb:4f:29:80:31:e4:86:86:dc:3d:bd:b8:35:73:d2:31:
         08:f5:59:22:b3:7b:33:1d:82:04:06:b2:e5:12:87:a2:00:57:
         a6:9f:cc:50:4b:28:e3:33:a6:8e:5c:7a:06:43:ed:63:7b:89:
         f6:47:b0:43:c2:a6:60:c2:bd:9b:f7:f8:f4:f6:1c:da:a6:6d:
         ea:fa:63:1d:17:0c:1e:18:a4:a5:d3:bf:92:b3:1f:03:c1:55:
         08:85:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org