Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
File:                     4453BC8A2CD411EC8884B41FC4F9AE02.roa (raw, json)
Hash identifier:          zDQWuqCZIhUi8QY/I4kch58V8XHnqGl1lQQctTfprP4=
Subject key identifier:   46:A8:56:D0:71:F8:0C:35:92:18:0E:DC:E2:CF:5F:A3:E3:70:C6:CF
Certificate issuer:       /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial:       342F
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
Signing time:             Wed 16 Oct 2024 15:31:09 +0000
ROA not before:           Wed 16 Oct 2024 15:31:09 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     198504
IP address blocks:        203.171.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
                          rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13359 (0x342f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
        Validity
            Not Before: Oct 16 15:31:09 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=670fdc3d-922e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:7a:d2:ec:db:d8:6e:d0:68:2c:87:eb:4c:
                    cf:f7:7b:ab:6e:23:a3:4a:a6:0c:37:b8:b7:24:c4:
                    84:34:d7:91:1b:fa:5c:0e:5f:93:8b:2c:05:62:83:
                    0a:9f:e7:6f:39:cd:07:10:b9:ce:88:00:ea:b1:96:
                    43:2e:77:80:40:8e:a3:79:0b:fc:44:06:c4:ac:89:
                    01:80:08:ec:24:c9:53:36:e0:2c:5b:49:96:e5:33:
                    02:56:17:a5:eb:b1:b5:0a:9f:ca:e6:95:7d:2d:0f:
                    3c:67:10:af:25:4c:45:a2:33:a1:81:84:48:a5:d9:
                    1e:af:25:7f:56:89:ba:bc:6b:88:7b:70:b5:e1:7f:
                    7f:47:11:3b:91:00:5c:b7:11:91:33:06:fb:ff:11:
                    a6:b1:60:b2:6a:1b:c7:8f:fd:5d:f3:d8:71:04:77:
                    4f:df:a3:7d:bb:53:74:1b:16:37:e4:0f:81:e5:91:
                    dd:e2:b6:24:ea:8c:c5:c8:3c:00:95:90:40:f2:83:
                    d3:d6:ab:06:95:a4:73:e2:44:52:bd:0f:4d:ea:9d:
                    de:a0:ef:6f:f1:50:64:4c:d4:0a:e3:fe:d2:0b:f5:
                    54:22:d4:68:90:ed:02:a3:ee:17:22:6a:29:06:13:
                    3d:aa:4b:aa:27:88:e9:52:bd:ec:cd:56:c2:fa:85:
                    4b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:56:D0:71:F8:0C:35:92:18:0E:DC:E2:CF:5F:A3:E3:70:C6:CF
            X509v3 Authority Key Identifier:
                keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/4453BC8A2CD411EC8884B41FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.171.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:14:26:42:97:cc:07:e4:13:a7:af:38:40:b8:bd:24:10:e6:
         34:10:1d:96:80:7f:5f:cc:f7:9f:cb:e3:05:b8:73:18:e2:2a:
         86:6b:2d:dc:75:da:1e:66:11:49:5b:d0:d5:50:a4:45:5a:9d:
         a2:f1:c5:c7:5d:2c:8b:d3:41:bf:2c:aa:41:bd:52:19:a3:a2:
         c1:28:74:43:24:cc:32:78:25:3c:0e:d2:df:e6:97:7a:7f:e2:
         62:7e:3c:e1:50:ea:fd:12:dc:35:92:d2:db:b8:e0:1b:f6:66:
         74:ef:68:32:39:69:2f:f7:53:fa:4e:6a:1c:10:c6:97:a0:1f:
         f0:5e:c5:99:3c:8b:27:9e:4d:9f:92:2c:13:c8:20:c6:ea:96:
         8f:40:ed:3c:5d:b0:c9:4c:80:75:60:3f:81:d9:da:5b:8b:ed:
         e4:01:a6:ff:3b:e8:e7:9e:43:3a:b8:53:27:ef:a6:11:ef:9e:
         8c:62:bc:e5:0c:6f:eb:f0:19:f2:c4:75:ac:7e:22:6f:35:b2:
         11:b1:5f:f9:c0:99:f2:4a:52:50:6b:ee:67:ba:26:c3:51:f8:
         1a:d0:cf:35:d6:8e:25:9b:e5:47:b2:96:70:96:36:8a:c0:70:
         03:35:df:a3:35:2d:99:6f:2e:49:76:31:8e:62:3f:2e:56:0e:
         54:28:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org