Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
File:                     DD0545F6324A11EFA615F80FC4F9AE02.roa (raw, json)
Hash identifier:          mcClfxKa9uWF/j7dnojdzff39MRT3F+Ocj/LoLSS9jw=
Subject key identifier:   84:31:1E:CF:D9:64:15:4F:C7:94:2E:7C:3D:BB:A6:FF:A6:30:3B:0E
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       7A
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
Signing time:             Wed 25 Sep 2024 05:49:04 +0000
ROA not before:           Wed 25 Sep 2024 05:49:04 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     215084
IP address blocks:        2403:ad80:101a::/48 maxlen: 48
                          2403:ad80:101b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep 25 05:49:04 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f3a450-5cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:a4:f5:a6:38:69:50:7b:a1:39:e7:2e:6a:
                    49:bf:d3:f1:34:7f:c1:fd:2d:ba:f3:0b:53:8f:10:
                    34:a9:a9:05:2d:e0:19:f1:41:ef:d6:17:d4:51:a4:
                    1a:de:24:17:95:09:c5:c4:c3:24:e5:fd:c2:69:c7:
                    6e:b9:7a:03:50:f4:99:34:16:9c:e5:b2:0b:e1:06:
                    3d:20:5a:b7:ce:d5:05:56:7e:09:d5:df:67:61:b7:
                    f3:8b:92:46:f7:f3:4c:e9:61:e1:32:69:17:d3:d1:
                    5d:4c:e6:25:9f:99:7b:bb:eb:03:62:f2:c1:61:17:
                    ce:e3:6e:28:d0:00:38:0b:2a:e6:4e:ec:02:46:ba:
                    89:29:e8:4e:5e:44:b3:22:4c:67:4c:65:01:75:20:
                    fe:53:d5:2f:2e:6f:88:c6:0a:46:6b:f8:34:51:a0:
                    d6:13:df:b5:62:12:46:7f:ea:75:fd:e5:ed:ec:c5:
                    93:2c:04:0c:d9:f8:2a:ef:df:3f:ff:dd:d0:fd:2e:
                    2b:b4:2e:fe:f8:ca:c9:0a:ff:8a:b4:92:ac:5a:00:
                    c0:fd:88:0e:a9:e0:77:47:1e:d5:ae:28:67:c1:3e:
                    66:f4:a6:0e:0a:89:64:22:46:97:13:05:9e:4a:8c:
                    9e:42:3f:36:61:f6:f4:41:65:41:0b:e1:79:33:21:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:1E:CF:D9:64:15:4F:C7:94:2E:7C:3D:BB:A6:FF:A6:30:3B:0E
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/DD0545F6324A11EFA615F80FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:101a::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:5f:50:43:8b:eb:16:a0:55:97:bb:2b:19:1e:36:cb:5b:
         8a:a0:fe:a3:03:8a:c3:73:ab:36:69:ea:aa:3d:c6:c3:a5:8f:
         14:1b:f4:0a:0f:04:f5:45:4c:2c:86:57:2e:53:d0:a0:ae:43:
         2a:1d:31:16:06:b5:a7:74:33:b2:09:0b:9b:33:62:f9:b5:17:
         8d:e4:08:47:50:bf:5f:ce:c3:54:24:39:97:4e:00:26:c7:4c:
         67:8e:85:38:41:79:35:96:5a:04:33:ff:76:8d:5e:16:9b:d9:
         63:05:a6:3c:4f:00:ea:e7:d5:8e:96:58:14:75:e0:ab:ad:91:
         72:3d:ff:18:7b:1e:4c:e4:ad:5f:c2:94:5b:7c:aa:60:a7:80:
         74:27:77:cb:66:d3:44:f6:67:44:f5:93:86:c7:8f:a4:9b:ab:
         1d:61:c4:20:27:56:65:2a:20:76:92:ed:6f:83:05:09:4d:e0:
         3e:18:5f:97:fe:9b:31:f1:cc:71:1c:90:0f:31:f8:ae:fe:46:
         95:72:52:09:6d:e7:3c:04:c5:d3:65:55:ac:b8:ac:e1:3b:ea:
         c3:3c:6a:e1:d6:0c:11:8f:d8:1b:50:96:38:d3:2f:a4:32:a8:
         d6:01:73:3e:c5:40:12:9b:7a:e0:fa:6b:41:7c:61:c3:f1:a8:
         be:57:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org