Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
File:                     122F83AAC4AD11EA9E35F20AC4F9AE02.roa (raw, json)
Hash identifier:          aCjyEapN5RNEdBx43BF8hSE5Js6g7kyTOXpzPyF+n3k=
Subject key identifier:   4B:BA:BC:25:EB:E5:61:4D:4C:F8:9E:B3:C0:EF:EA:E4:D9:C5:2C:FF
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       0F7B
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
Signing time:             Wed 02 Oct 2024 17:55:47 +0000
ROA not before:           Wed 02 Oct 2024 17:55:47 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     4764
IP address blocks:        202.87.4.0/22 maxlen: 24
                          203.57.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Oct  2 17:55:47 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fd8922-d11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:92:4f:a4:c3:fc:cd:73:86:06:ab:ec:1f:
                    ac:ea:1a:ce:b0:eb:41:c4:f4:ba:fd:b1:7f:ad:04:
                    54:16:4e:d7:aa:cb:96:3f:f4:fe:5d:81:43:72:eb:
                    6c:e9:e4:5f:60:f3:f6:c5:18:92:18:4b:d4:db:24:
                    8a:ae:87:74:6b:f7:92:7b:07:cc:7b:51:fb:ec:8a:
                    c3:14:3b:bb:60:fe:8f:d6:70:fe:51:b1:4e:f8:8a:
                    b6:70:cc:f3:55:ef:b4:2b:30:16:7e:0d:35:33:15:
                    84:38:90:04:c8:bf:b1:e1:91:0e:c3:0a:f5:ad:09:
                    c8:76:05:3a:bf:32:77:41:e2:ef:03:d3:7d:ff:0c:
                    51:f5:c5:ec:f1:28:2e:3e:1e:46:cf:bd:05:bd:e8:
                    57:88:f5:28:32:38:2c:34:5c:91:de:05:d7:30:9e:
                    15:51:04:c5:f8:9d:8e:3e:1f:9e:5e:48:60:60:9c:
                    4a:af:4f:5e:52:68:8b:52:83:23:e8:10:35:96:69:
                    f1:72:96:33:3d:d2:30:02:4f:58:97:b4:71:05:84:
                    9a:06:10:aa:82:85:0a:a5:50:f6:55:bb:39:7d:84:
                    a4:07:f5:e1:7f:d5:ed:ce:ca:06:92:d0:66:ea:e3:
                    56:ac:6f:85:3d:95:c7:d9:fa:cf:3d:68:73:ff:37:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BA:BC:25:EB:E5:61:4D:4C:F8:9E:B3:C0:EF:EA:E4:D9:C5:2C:FF
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/122F83AAC4AD11EA9E35F20AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.4.0/22
                  203.57.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:12:fd:58:4f:97:23:03:73:d0:c7:50:98:74:c8:d4:df:17:
         82:25:b3:0a:e5:35:a1:85:bf:67:b4:ba:3b:6e:15:55:b1:c6:
         ae:3b:05:ab:8b:7f:26:e0:07:4e:c0:ef:c2:53:27:73:e4:1b:
         7c:87:81:44:85:cf:8b:06:da:3c:a2:e8:0b:e4:85:04:dd:38:
         7d:93:76:80:d5:d4:4b:8d:a5:19:07:63:40:26:0a:19:d8:ec:
         9d:2f:be:b7:28:d0:9c:2c:23:59:c3:d1:17:78:52:21:4a:17:
         38:a5:06:29:bd:91:f6:6d:e3:79:e2:64:44:90:42:7f:62:d2:
         04:bb:4c:b8:c3:40:93:50:87:47:75:85:3d:da:13:d4:68:89:
         0d:f0:14:c9:27:d7:a0:60:a5:41:59:ba:a6:a6:a7:d5:07:7b:
         74:be:38:3d:e8:58:24:dd:81:c2:bb:c8:62:dc:f0:07:6f:66:
         59:43:79:42:2c:55:74:f0:49:05:0a:96:18:22:94:44:50:4a:
         b9:67:da:9f:52:71:f1:68:4e:63:71:30:8a:58:49:c0:df:62:
         6f:e6:c9:9a:c9:01:46:0a:ff:04:cc:06:5f:90:44:32:55:70:
         fd:b6:f7:07:00:70:69:a0:69:48:18:d8:01:43:b9:15:52:2f:
         07:3c:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:01 2024 by rpki-client on console-ams.rpki-client.org