Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
File:                     6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=
Subject key identifier:   E1:48:85:0E:03:BA:EC:73:9E:F2:49:99:E2:0B:9C:BC:EA:C0:F6:34
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0AC6
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
Signing time:             Wed 06 Nov 2024 19:38:22 +0000
ROA not before:           Wed 06 Nov 2024 19:38:22 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     15412
IP address blocks:        45.125.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758 (0xac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  6 19:38:22 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=672bc5ad-ca47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:c5:59:a9:31:e9:b6:d9:37:88:13:01:cc:
                    9a:9b:f5:55:5e:38:0c:a1:d6:9a:0c:79:a2:5e:eb:
                    d7:ff:25:ea:69:7a:82:09:35:53:cb:ea:48:cb:05:
                    28:fc:fb:2c:b5:37:2b:cd:29:d0:dd:07:be:e3:7d:
                    d9:f2:13:14:7a:f9:14:2f:53:92:ca:1f:0e:b8:2b:
                    b1:49:10:05:ed:0c:81:89:10:b6:41:24:83:78:87:
                    1e:a2:75:bf:27:88:ab:eb:d3:a1:c4:d5:33:4c:e1:
                    aa:76:6e:0e:43:1e:12:51:2d:c0:e6:e2:65:3d:5c:
                    e0:e0:0d:dd:1c:5b:99:ee:d8:38:d4:0a:b9:61:e2:
                    a5:30:9a:01:d3:0e:ac:02:ab:1d:15:8c:5e:f9:bc:
                    74:60:43:51:25:05:a1:dc:00:37:74:3a:3d:8f:07:
                    23:ac:98:68:b5:9e:eb:df:d2:4c:55:ae:8d:bb:64:
                    12:d0:e2:4e:f2:fb:03:09:cf:49:96:d6:75:92:31:
                    b0:88:ae:a0:ed:72:57:e1:ee:f8:27:4c:45:4e:e6:
                    10:21:59:e8:bb:81:ab:90:19:f2:db:6b:25:ea:72:
                    1b:94:41:d7:84:9e:c7:1e:ea:c0:82:29:73:ea:6f:
                    17:c3:f9:62:8e:12:e0:00:41:62:29:f4:14:b0:b1:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:48:85:0E:03:BA:EC:73:9E:F2:49:99:E2:0B:9C:BC:EA:C0:F6:34
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:89:c0:90:d3:ef:22:c9:57:aa:23:ec:a0:b5:72:b9:ba:40:
         18:37:48:ab:2b:c7:30:32:9b:91:14:6e:ef:9e:ff:f5:33:2e:
         59:48:cd:5f:05:36:e6:8c:3b:a0:f4:b2:df:5a:c8:91:a4:d7:
         dc:0e:cc:ab:57:3c:87:c7:bd:15:24:33:7f:be:61:61:e9:e0:
         1f:c3:0b:81:2f:10:a7:f6:71:ce:c4:c0:fc:97:b6:fa:03:fd:
         5a:0c:70:24:c2:0e:0f:0a:bf:dc:9d:53:29:e1:b8:12:7f:cd:
         bd:c4:d9:80:ab:48:f4:81:e0:fa:99:fc:0e:23:6a:4e:f4:f6:
         20:0c:b7:71:65:8d:5f:73:8f:b3:e3:5b:4b:44:cf:a4:74:ea:
         c9:a0:b3:ed:df:85:a5:24:9d:50:57:15:9f:19:6b:e4:15:c7:
         7c:54:98:d4:28:15:98:17:a1:40:26:45:29:c3:af:57:75:cd:
         e6:8f:3f:ca:f1:bf:fa:f8:9c:bb:3e:b0:d5:e7:18:ca:cf:7f:
         31:ef:50:19:75:24:c4:db:69:bc:21:24:b3:ae:e3:ce:09:47:
         2c:8c:8a:8a:15:db:42:7e:e1:e1:3c:34:23:0d:ae:af:38:3f:
         f6:09:d5:f9:59:54:8d:65:e3:93:8b:d6:29:68:81:17:f3:04:
         23:da:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org