Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
File:                     9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (raw, json)
Hash identifier:          EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=
Subject key identifier:   0D:53:E1:69:D7:FB:66:BB:9A:6B:14:E3:1B:21:3F:80:4B:38:C8:9F
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       3458
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
Signing time:             Wed 18 Sep 2024 15:00:38 +0000
ROA not before:           Wed 18 Sep 2024 15:00:38 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     58655
IP address blocks:        182.252.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13400 (0x3458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Sep 18 15:00:38 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66eaeb16-b9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:48:56:ad:3f:ca:f1:90:07:d7:ef:34:c3:
                    aa:2d:e2:08:59:5c:9b:bc:b6:15:40:0a:18:f8:08:
                    64:d9:07:5c:1d:32:16:f8:bf:89:0a:12:30:e9:67:
                    be:d1:d3:1d:b8:d2:c2:d1:b0:43:89:d6:74:a4:e6:
                    4f:00:dc:d0:4f:69:81:7f:ee:1e:17:74:69:11:19:
                    36:8f:62:50:24:c1:b8:15:a8:ed:63:85:cd:a7:d5:
                    8e:eb:ab:96:0a:89:d0:d2:62:07:91:c3:4a:6a:b5:
                    6f:e2:59:ad:51:39:49:bb:5a:21:8e:c9:74:fa:98:
                    b1:3e:96:55:65:d2:e0:c5:e7:86:c0:1b:6e:eb:1f:
                    af:cd:30:10:b4:a1:0d:3c:ad:25:e3:b7:a2:20:93:
                    07:bb:08:07:4a:71:87:9d:68:d4:dc:59:08:45:05:
                    ca:01:ee:57:6f:89:5e:4c:d0:00:e4:b5:0d:07:24:
                    e9:6e:62:bd:e9:9c:9b:4d:7c:2f:64:82:e1:f2:c2:
                    84:f1:cb:77:d8:9e:86:b8:89:82:0a:25:06:e1:05:
                    50:a0:df:f6:f2:d0:31:ac:1d:ff:0e:00:03:c8:03:
                    98:f7:50:54:d0:f5:bb:f6:d8:88:a3:f4:0f:b7:8c:
                    d6:10:d2:92:c7:a7:77:d2:71:2d:72:21:53:76:5b:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:53:E1:69:D7:FB:66:BB:9A:6B:14:E3:1B:21:3F:80:4B:38:C8:9F
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.252.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:53:75:e3:0e:56:95:40:2e:0a:03:d3:0b:66:04:18:90:91:
         0e:ee:c2:68:aa:73:ff:fd:28:84:4c:f8:81:21:de:11:01:98:
         2d:94:e7:e6:ba:18:1e:b4:24:59:41:32:d1:80:bc:e1:b8:49:
         1d:78:34:ae:ff:92:58:78:77:62:44:84:56:0d:9b:ad:90:ee:
         2f:80:b9:23:03:97:39:49:61:a5:27:93:ab:f4:c5:d3:f7:46:
         67:7a:56:96:a0:db:93:fd:ec:18:97:9f:2b:c2:8c:bf:cf:ce:
         67:ab:19:b4:67:53:6e:29:0a:f9:27:3d:8f:b7:52:64:3f:3c:
         23:7a:9b:ed:13:e0:7f:f1:5f:4d:c2:a4:74:66:ad:a1:ab:df:
         b9:1f:51:42:eb:e7:83:24:2c:c5:d1:e1:34:51:ce:38:2e:d6:
         89:3f:6f:ad:b0:1a:6d:4c:58:d8:6b:e2:5b:f6:4f:a1:d3:ea:
         b8:f7:da:6a:b2:dd:7d:e3:48:82:f4:6c:6b:9a:2d:3a:5c:35:
         ce:9f:eb:94:e7:43:d4:cb:32:b1:fd:45:c6:aa:52:ae:34:65:
         4e:f1:ed:09:45:ef:c5:3a:a1:60:6d:60:fc:2b:29:d7:57:24:
         53:24:8a:29:20:36:62:77:c2:8e:5f:f9:39:b2:8f:0c:2b:81:
         f5:6b:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:58 2024 by rpki-client on console-ams.rpki-client.org