Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
File:                     2C1A71D81A9B11EFA4886942C4F9AE02.roa (raw, json)
Hash identifier:          VzT8WNwEWPiFxIQS9l/GW9AAHpB6UIAG/VXpaI8+LV8=
Subject key identifier:   C5:C9:91:53:1D:E2:6B:9C:76:3B:A0:71:39:17:71:A7:03:BD:C8:E5
Certificate issuer:       /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial:       0BA2
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
Signing time:             Sat 25 May 2024 13:32:03 +0000
ROA not before:           Sat 25 May 2024 13:32:03 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     135037
IP address blocks:        220.247.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
                          rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2978 (0xba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
        Validity
            Not Before: May 25 13:32:03 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6651e853-ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8b:0c:9e:55:c0:9b:3c:c8:78:cb:e9:54:d5:
                    cf:ea:30:87:c9:b9:3a:cc:d7:84:e7:f8:9a:0c:42:
                    5e:a1:9c:66:d1:2e:0f:d6:c8:68:b3:e7:b0:5e:1f:
                    89:3f:40:b3:f6:51:cb:7f:0b:ed:ac:59:fc:bc:a5:
                    6e:a7:72:a2:52:13:9b:e6:df:28:b8:a0:d7:df:8a:
                    46:d3:62:3c:08:37:47:af:4d:dd:c4:02:cf:c6:d6:
                    6e:97:9d:f9:5d:7b:2b:54:d4:31:5a:80:e9:99:27:
                    74:dc:b6:4f:9d:b8:46:00:0f:f5:29:a3:94:ab:50:
                    b4:57:f8:de:04:cb:1a:fb:a5:47:a8:f2:8e:e5:34:
                    b6:1c:ce:c2:29:28:6a:2d:28:ca:b1:71:9c:e0:f3:
                    13:63:36:16:da:23:7e:50:5d:f7:ae:ef:cf:c8:5f:
                    cb:b0:04:04:34:db:b8:64:fa:07:4c:2b:66:12:3d:
                    3e:56:ae:39:83:4e:db:dc:53:46:96:96:e3:99:61:
                    a8:3f:8e:bf:62:bb:3b:58:35:f4:80:1d:69:48:cc:
                    4b:59:fa:44:f5:45:06:69:0c:55:15:cd:71:9f:11:
                    55:99:ae:27:c1:83:cf:ea:2b:8f:67:69:45:ba:9f:
                    f7:20:fb:92:ad:00:41:07:02:17:59:83:bf:14:23:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:91:53:1D:E2:6B:9C:76:3B:A0:71:39:17:71:A7:03:BD:C8:E5
            X509v3 Authority Key Identifier:
                keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:79:66:0d:75:0d:07:49:c6:6a:0f:b3:9b:a2:3b:43:dc:10:
         1a:6d:7f:29:dd:3a:1b:fe:a3:c4:27:6e:d9:d2:9c:db:40:79:
         6b:b4:cd:16:ee:75:47:bf:38:e0:b9:9a:38:09:78:9c:af:94:
         3e:ec:42:de:d9:2f:44:51:ad:51:e8:d7:3a:0a:06:2d:e1:0b:
         27:12:0e:2c:1e:ac:2d:a6:cf:dd:a1:ee:27:a4:5f:15:c1:6d:
         30:e2:00:91:c1:af:63:83:8c:0c:f1:64:48:ce:da:46:4e:0d:
         ac:ab:37:e0:6c:0d:95:92:9a:96:2f:ed:c5:d5:57:9b:53:3d:
         ce:9d:06:e2:a6:21:f0:ba:42:d9:a5:c3:90:d5:e1:3b:0d:42:
         ed:cf:ae:bb:94:53:0e:7d:5e:c0:74:01:c2:5c:99:46:bd:d0:
         ec:03:5a:01:13:ec:cd:e6:f7:c2:dc:27:93:fb:79:ad:ed:33:
         ca:74:b1:50:1b:e0:40:2d:4b:44:11:91:5a:f1:6b:35:9d:f5:
         0a:71:9a:eb:8d:12:45:48:47:28:cf:67:6f:8d:43:dc:2e:2f:
         cb:88:97:a8:52:fa:9b:76:8c:4f:34:06:ee:98:f9:1c:cc:c3:
         c1:4f:e3:94:1f:10:3c:f4:ea:cc:47:08:79:41:48:aa:bf:3a:
         c5:83:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org