Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
File:                     D470449E0E4411ED9C0F5B45C4F9AE02.roa (raw, json)
Hash identifier:          9zqxhpOangW9769mdxLoJSN4Rv/Y8CMGWvMe+D0Ah7w=
Subject key identifier:   1C:64:7F:A8:9D:93:92:68:04:3B:7F:0F:6D:DB:7F:04:E3:7A:95:4C
Certificate issuer:       /CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
Certificate serial:       01E0
Authority key identifier: 45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
Signing time:             Sat 27 Jul 2024 03:55:18 +0000
ROA not before:           Sat 27 Jul 2024 03:55:18 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     3661
IP address blocks:        43.230.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl
                          rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A78A7/serialNumber=45337DC5E4839E49819129DEA2A9461B021CD190
        Validity
            Not Before: Jul 27 03:55:18 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a46fa5-5f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:e0:cf:d0:43:0a:2f:53:8f:f4:51:fe:a6:
                    78:65:33:dd:9d:fe:2e:75:66:d1:3c:b8:cf:77:68:
                    6e:07:b3:6d:df:1e:20:9e:a8:90:56:81:14:44:e9:
                    81:50:b4:0b:a8:a9:66:45:7f:5a:34:2b:87:1f:1d:
                    68:be:cf:ac:43:fe:e0:fe:99:9a:50:93:e5:8b:b2:
                    31:bf:83:0c:b1:df:c5:f9:46:97:c9:62:32:08:06:
                    4e:d3:eb:74:54:59:41:ff:d1:92:1a:69:20:e4:7e:
                    45:c5:16:17:0a:af:de:95:a7:41:92:77:62:67:01:
                    d8:97:6f:f4:b5:10:66:83:69:10:43:99:10:2a:d4:
                    1b:e8:17:7b:60:2b:26:d4:ac:1f:67:3a:27:98:9e:
                    23:c3:df:65:00:ef:97:26:8d:fe:15:de:d9:29:24:
                    6b:04:0e:ae:44:92:a7:e7:94:ae:88:ac:a3:a5:58:
                    50:1d:6e:84:a6:d1:8b:41:f4:e6:2e:ea:9e:b9:49:
                    ba:c6:50:a1:d3:66:5b:76:b5:b3:35:b8:b7:3b:df:
                    e9:de:44:dc:66:14:a3:2a:d7:b4:01:7e:30:14:24:
                    2e:a1:90:aa:b5:0d:7c:59:b3:f2:34:c8:f5:84:a8:
                    69:f9:67:f7:87:9e:af:c7:02:d3:cc:6c:47:1b:f5:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:7F:A8:9D:93:92:68:04:3B:7F:0F:6D:DB:7F:04:E3:7A:95:4C
            X509v3 Authority Key Identifier:
                keyid:45:33:7D:C5:E4:83:9E:49:81:91:29:DE:A2:A9:46:1B:02:1C:D1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/RTN9xeSDnkmBkSneoqlGGwIc0ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTN9xeSDnkmBkSneoqlGGwIc0ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78A7/104B19460CBD11EDAA77D12DC4F9AE02/D470449E0E4411ED9C0F5B45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:d5:76:eb:00:8e:bd:29:6b:24:10:0f:0b:9a:72:f7:b5:e1:
         ae:f4:46:18:22:ed:ac:84:48:59:6f:97:d8:92:3f:bb:63:03:
         9d:ca:11:6e:0c:05:e0:3b:e8:6b:b9:f7:e6:e1:ef:c3:7e:d8:
         cd:8b:eb:c2:d0:3c:32:15:40:43:d5:31:4e:eb:81:7a:eb:06:
         59:69:d7:6b:b9:60:f8:6e:f1:a0:78:8d:64:86:bb:b2:31:4d:
         81:da:ff:bc:7a:da:16:39:56:08:d0:07:e7:e1:95:23:88:00:
         71:3e:60:a3:51:0f:ce:ae:d8:70:a9:0a:f3:7d:41:80:2f:06:
         e6:7d:ce:06:d1:c0:4f:b1:d4:40:c2:d7:89:4a:f1:02:76:75:
         88:92:69:12:85:09:1b:7a:5c:a1:dd:2e:db:4b:cb:af:71:0e:
         bd:04:a4:1b:4f:ca:af:6d:09:62:74:1b:73:01:b5:be:50:47:
         df:aa:3d:8e:fe:a1:1d:5a:84:fe:9b:08:9f:51:fb:e1:7e:59:
         4b:03:0b:34:b2:d2:d7:af:78:49:3a:3d:b3:65:a9:be:63:cc:
         42:91:b6:f1:c3:f4:b5:aa:44:7a:6c:d2:01:ce:49:88:d2:72:
         82:6d:81:95:fc:7e:fd:ca:6d:06:99:0c:8a:1a:d3:85:fe:50:
         a1:d1:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:49 2024 by rpki-client on console-ams.rpki-client.org