Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa
File:                     DCE066622C7811EC97C8D979C4F9AE02.roa (raw, json)
Hash identifier:          DeSX5mR90qF9IRdX2EyXW+cFduwBwR++LaECrmC9RqI=
Subject key identifier:   48:12:45:18:BB:55:CC:A3:94:59:ED:5A:5A:49:61:D2:43:DF:68:89
Certificate issuer:       /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial:       09CF
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa
Signing time:             Mon 24 Jun 2024 20:42:55 +0000
ROA not before:           Mon 24 Jun 2024 20:42:55 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     45475
IP address blocks:        202.44.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
                          rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
        Validity
            Not Before: Jun 24 20:42:55 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6679da4f-4088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:bb:50:fc:c6:32:8e:74:8f:30:33:c5:d6:
                    52:2c:c4:de:62:e1:2e:13:70:99:7d:a0:8b:cf:59:
                    61:07:13:77:14:33:7b:89:6e:fc:f3:99:a0:d0:8e:
                    9e:f7:1b:14:d8:39:e0:35:91:b3:a8:cf:3f:bc:bc:
                    46:e6:51:41:b5:f8:a6:7f:11:ab:08:6c:3a:2a:98:
                    3d:7d:cb:91:83:17:f1:f5:e7:bd:e9:dc:14:e4:fc:
                    7b:c8:1b:3c:35:97:d9:d4:72:9c:3b:03:83:a9:f8:
                    0d:95:14:ac:86:02:e2:ca:1d:80:4c:00:59:86:98:
                    06:68:eb:e1:a5:2c:76:c8:a6:c3:8a:52:9b:37:4a:
                    10:f8:58:37:ac:8e:91:fe:87:70:c5:31:27:33:3a:
                    29:f6:52:9a:77:87:15:dd:44:7f:ef:d9:c5:6d:86:
                    6e:ca:bd:9a:ee:a1:25:1d:6a:9d:d6:64:62:8d:4e:
                    5d:c1:7d:fd:09:d5:ea:23:34:12:09:ae:3e:60:b6:
                    8b:b0:03:1d:4b:9f:64:c8:4e:8d:47:9b:b4:02:b0:
                    3a:cc:af:46:6a:44:26:6a:6f:d1:df:92:70:f7:87:
                    28:91:35:e3:ee:07:ce:05:56:39:88:a6:8e:b8:bd:
                    ec:c8:7c:ba:71:27:b1:da:a8:40:08:9d:84:7c:a4:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:45:18:BB:55:CC:A3:94:59:ED:5A:5A:49:61:D2:43:DF:68:89
            X509v3 Authority Key Identifier:
                keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DCE066622C7811EC97C8D979C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:25:72:98:b6:f2:50:c4:cc:00:bc:28:f2:03:49:51:0b:
         2d:cd:12:f6:f1:b3:06:5a:17:02:24:64:9c:65:ae:bc:63:cc:
         dd:cf:ee:ab:db:4a:07:4b:07:99:86:90:4e:77:d8:52:42:78:
         45:f7:88:a3:46:4e:d4:86:97:1e:bf:4b:ab:8b:51:d9:d3:8c:
         16:8b:2e:c5:5b:2c:05:8d:56:70:6f:40:eb:f0:5a:c3:2b:d8:
         f1:bf:81:e5:19:53:18:af:91:75:90:56:4c:f4:c8:6d:6a:89:
         8c:44:6d:ea:5e:c1:88:65:65:01:45:75:4c:89:63:a8:35:e0:
         fd:12:f7:3e:3c:b3:df:b1:21:41:f4:9a:28:40:95:6d:60:a2:
         a2:5c:c7:df:69:82:5f:ab:b1:4d:44:86:01:e1:57:97:0a:2a:
         ea:1b:b2:61:7a:14:62:6c:be:ad:a9:43:90:eb:e4:c2:fa:f5:
         18:d7:29:84:8d:74:8f:c0:03:90:bb:24:b0:7e:3d:a2:2d:7b:
         4b:ba:cd:67:39:81:f0:b2:14:b1:0d:c0:ff:fa:01:5c:3f:bb:
         f4:a5:55:a8:2e:d9:54:fc:83:02:89:24:38:57:79:15:64:c7:
         16:cd:59:4e:6f:32:d3:c4:be:df:82:29:94:53:04:8a:b3:f4:
         0e:08:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org