Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
File:                     E7F77E5E42E711EF8B9EF861C4F9AE02.roa (raw, json)
Hash identifier:          2lKk6v8L+otxkXH3Z6ztUescMpEPEHQiPb/n8LYQ7iQ=
Subject key identifier:   CD:E0:06:D6:86:B2:66:DA:87:7C:A5:39:35:15:C1:1E:8A:9F:69:C1
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       79
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 05:49:02 +0000
ROA not before:           Wed 25 Sep 2024 05:49:02 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     207338
IP address blocks:        2403:ad80:102a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep 25 05:49:02 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66f3a44e-2614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:5e:58:4f:21:9b:6f:fd:7f:db:27:cf:06:
                    40:ac:d4:ec:8d:9e:a5:bc:ff:44:10:51:02:82:5a:
                    84:4f:cb:6d:38:c9:19:a9:49:b1:02:5d:89:5d:67:
                    9b:85:ab:c4:83:7c:04:a4:2f:59:38:20:bb:93:eb:
                    6f:f1:31:14:da:15:e6:2c:ab:39:aa:8c:2b:19:11:
                    14:31:e5:30:2d:9d:8c:d5:42:05:2a:17:11:72:d6:
                    f5:e2:97:c4:84:50:ea:e0:6f:9f:37:24:d5:13:30:
                    aa:be:dd:13:b1:84:3a:d7:90:56:d0:7e:af:d0:61:
                    94:4b:f6:a2:6a:5b:b9:72:0e:4d:11:09:09:a8:02:
                    37:ca:04:f7:db:30:af:21:3a:50:b3:cd:38:e0:17:
                    9c:be:28:8b:7b:7c:11:1e:37:95:4c:69:ac:af:df:
                    dc:d3:e5:3a:d4:be:44:9a:19:64:05:00:58:e5:a4:
                    f6:9a:c5:47:c7:71:0e:53:e1:1d:e8:5d:cf:e1:77:
                    72:23:82:2a:0e:2d:ce:be:5c:6b:d3:6c:85:f1:c9:
                    21:e0:44:5a:57:cb:98:13:f1:af:cc:02:da:f1:bc:
                    a3:b1:13:da:6d:44:78:c6:f8:39:44:46:fd:14:42:
                    95:6c:b4:72:e4:ed:78:77:e6:a3:05:91:56:b2:ec:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E0:06:D6:86:B2:66:DA:87:7C:A5:39:35:15:C1:1E:8A:9F:69:C1
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/E7F77E5E42E711EF8B9EF861C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:102a::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:85:d6:01:8d:69:2a:47:25:10:79:ed:71:c8:0b:d6:3e:
         c4:98:29:66:05:54:51:5e:e3:ed:5a:26:b8:47:20:84:d6:f6:
         54:e1:d7:68:84:e6:55:16:27:90:57:42:59:8d:42:aa:3a:4b:
         22:25:27:a5:2b:e5:ae:8a:02:fc:7b:50:2b:f2:27:cc:29:24:
         cb:8c:3d:41:bd:f1:88:fe:2d:bc:f9:1e:e4:d0:31:ed:7e:69:
         e5:d9:63:b8:8c:c5:4e:92:ce:4a:1e:56:1f:f1:29:a7:d2:f6:
         bc:98:80:7a:9b:05:bd:c8:78:57:72:c6:6b:ab:b6:b0:2a:c0:
         4f:dc:15:80:93:e3:66:7a:27:66:97:7d:46:51:ef:06:8e:5f:
         e1:ed:ee:8e:39:5b:d1:0a:9c:84:ce:34:f4:b9:e3:f5:34:14:
         ac:01:18:8f:df:fa:ea:cd:67:99:53:e9:cf:31:ba:32:d4:da:
         6b:22:a5:4a:32:3f:96:90:05:5f:8a:9f:e9:04:8f:bb:2a:f0:
         ec:7b:c8:01:97:d3:c1:aa:50:e8:e6:96:8a:6e:ed:f6:87:c7:
         61:b4:04:9a:d5:8f:be:70:c3:ab:64:72:96:c6:77:d3:20:0a:
         ff:45:04:5e:74:48:bc:e7:35:89:23:d9:1b:0d:29:ae:ec:1c:
         45:4b:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:50:47 2024 by rpki-client on console-fra.rpki-client.org