Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa
File:                     7BDC977E0AF011EF87265E12C4F9AE02.roa (raw, json)
Hash identifier:          Vm/sPmIab/U9OiYVa9+A5YsRVFrpJm56x8WhE16vn+E=
Subject key identifier:   0B:8B:F6:D6:9F:18:26:DA:EA:12:73:08:54:53:87:53:7A:A0:74:F6
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       78
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 05:49:01 +0000
ROA not before:           Wed 25 Sep 2024 05:49:01 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     139859
IP address blocks:        2403:ad80:8004::/48 maxlen: 48
                          2403:ad80:8008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep 25 05:49:01 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f3a44c-7ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b0:8a:2d:9f:97:b3:5f:0e:4e:be:64:ad:12:
                    0c:a0:80:55:d5:79:36:08:7f:c5:14:5a:e9:b8:c1:
                    c8:0e:7b:f8:08:d4:17:29:6b:34:9a:51:0d:e1:e7:
                    56:d0:60:5c:28:9c:44:a9:aa:e7:e9:0a:e3:bd:c0:
                    02:7c:30:3a:78:07:ae:1a:bd:f9:2a:11:6f:93:eb:
                    2f:f6:04:e1:8f:80:de:d3:da:65:24:9d:93:d0:e6:
                    ec:1d:c8:e1:ad:eb:75:7a:95:ad:e9:30:80:c6:1f:
                    ab:ea:8e:28:17:d6:a2:6e:83:5a:e6:23:92:9c:a0:
                    ad:6d:84:e7:aa:64:a2:72:d9:20:de:79:3d:ef:17:
                    c3:5b:a1:b8:59:83:97:9d:b1:2a:a5:ff:31:77:88:
                    60:f1:1e:ed:6a:94:b9:88:e9:71:78:af:a9:84:0d:
                    09:31:da:e8:00:67:62:45:3f:1d:0a:d6:24:21:c8:
                    7d:a6:d7:6b:d1:37:2c:f5:49:81:02:de:ac:ee:69:
                    77:7e:d5:96:67:1b:d9:c8:62:b6:6f:6e:ed:26:56:
                    90:f2:47:91:7c:ef:2c:97:93:16:89:c7:d3:e2:1a:
                    b5:2f:09:ca:d9:43:a1:ed:da:d4:24:89:9f:db:2f:
                    e3:89:d1:d7:10:13:b7:87:1b:f1:20:be:8f:23:ed:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:F6:D6:9F:18:26:DA:EA:12:73:08:54:53:87:53:7A:A0:74:F6
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/7BDC977E0AF011EF87265E12C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:8004::/48
                  2403:ad80:8008::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:13:b6:c5:df:f6:62:c5:71:42:a7:5f:95:5e:31:78:76:26:
         ba:8c:1d:a3:0e:1b:6f:df:2f:14:a0:aa:e0:40:6b:92:b5:35:
         72:3f:ed:89:c3:25:da:3a:37:11:28:10:95:7c:a1:0f:32:99:
         0a:45:29:57:01:4a:71:b6:05:d9:70:3f:4f:72:2d:3b:31:b4:
         39:ab:6b:3d:ec:94:42:b5:98:be:17:b1:85:f2:a0:01:f0:9d:
         77:55:cf:b9:3f:37:40:f2:9a:55:18:ba:30:36:4f:c5:a2:1a:
         1e:ff:a6:d7:b9:0b:9a:30:0e:54:dc:b5:96:03:6f:93:f6:7d:
         c0:ee:c7:c7:4a:86:c3:fe:3e:30:c5:90:fe:2f:13:e1:7f:6f:
         eb:d6:e7:89:d8:c3:61:14:fc:e1:4d:e6:9e:9b:10:a9:9e:f4:
         9c:1b:8f:1b:8c:a9:e0:00:ac:16:d0:57:87:ed:ff:09:fd:6f:
         ff:06:d5:45:ee:b2:98:09:4f:68:59:45:13:18:06:43:e7:e6:
         63:46:a3:b0:f3:ef:98:65:1a:51:5e:7f:5e:84:0f:4d:04:ed:
         b0:3c:cf:b9:f4:e9:6d:a1:d5:98:1a:39:b8:08:32:e5:23:cf:
         b4:58:98:89:93:7a:2d:26:b6:62:d2:65:0c:6a:c8:86:24:72:
         71:ad:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org