Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/EEEC4B6ABD9D11EE9839661CC4F9AE02.roa
File:                     EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (raw, json)
Hash identifier:          VbbJAFeEANc5xpg56kqLWx6ph7v6NQjlCgiwAcE8S0I=
Subject key identifier:   B4:06:D2:9A:96:66:E4:51:A2:A7:7F:45:D9:D4:FB:3E:C7:2A:8E:42
Certificate issuer:       /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial:       08
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/EEEC4B6ABD9D11EE9839661CC4F9AE02.roa
Signing time:             Sun 28 Jan 2024 05:29:27 +0000
ROA not before:           Sun 28 Jan 2024 05:29:27 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     152304
IP address blocks:        157.10.80.0/23 maxlen: 23
                          157.10.80.0/24 maxlen: 24
                          157.10.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
        Validity
            Not Before: Jan 28 05:29:27 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65b5e637-720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:24:12:7f:ad:cd:75:80:6f:2d:49:c7:ea:
                    d3:93:fa:b0:54:75:51:26:78:87:50:4e:db:4e:0d:
                    7e:7c:e8:1e:42:c2:7c:7f:cb:fd:c2:64:ab:22:78:
                    f4:c5:9c:5b:48:5b:be:7d:d8:47:35:ac:b6:ed:6a:
                    c5:47:4f:b9:78:c3:b8:0e:74:28:38:73:8f:be:2d:
                    3e:8c:b6:e0:44:9a:21:14:a4:0a:41:e5:68:1a:8a:
                    d8:62:57:23:dc:83:79:3c:1f:e9:a6:ab:f4:d5:6f:
                    ce:6a:8d:5e:f4:73:eb:cb:ba:54:9a:9c:e2:7b:a2:
                    e0:da:0f:97:8d:81:b9:8f:57:fb:a9:8f:24:b8:63:
                    9d:7c:dd:bc:54:10:9c:82:89:6a:29:73:9e:77:92:
                    ca:70:a0:44:4f:b9:ce:cb:29:5b:d5:6b:72:48:68:
                    35:e1:aa:cf:23:30:c3:8e:b9:63:6b:58:a4:c6:e8:
                    0c:2b:24:e3:1a:48:8c:d8:dc:94:23:b9:40:7c:87:
                    4a:29:6a:d0:75:09:de:aa:a8:df:1a:45:1b:28:87:
                    bc:e7:bd:dd:69:54:39:84:da:30:21:a3:51:15:4d:
                    4c:be:1c:12:9d:99:22:76:3b:f0:ba:8a:a3:d4:94:
                    29:d8:95:a9:66:0e:74:e4:30:5a:17:bb:0d:eb:85:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:06:D2:9A:96:66:E4:51:A2:A7:7F:45:D9:D4:FB:3E:C7:2A:8E:42
            X509v3 Authority Key Identifier:
                keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/EEEC4B6ABD9D11EE9839661CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:99:75:57:fb:a3:e4:9a:96:20:79:32:d2:c7:a7:be:1e:
         70:61:2e:5b:47:8b:0b:0e:56:cc:59:d0:2f:3e:0e:e0:29:eb:
         8b:1c:8a:01:27:77:32:27:08:47:dc:65:9e:95:34:c5:98:dc:
         c9:d7:e8:b8:42:43:ea:96:70:2f:2e:86:00:5a:80:d5:48:3f:
         cf:55:54:8b:d4:d1:01:fc:c3:82:54:0a:88:cd:6b:e8:fc:b1:
         8e:b2:cd:48:d4:c9:c7:fb:cc:43:a0:02:ed:1e:dc:64:c8:14:
         e8:c2:f0:53:6d:01:f4:01:d1:de:e4:5f:90:64:57:9d:fb:05:
         e0:d9:bd:45:c9:70:05:de:d2:08:5b:a0:2d:83:19:f0:d4:5a:
         88:17:bf:21:c5:b1:b2:c9:7d:58:6a:97:38:02:bf:8c:af:2d:
         82:36:7e:fd:e3:b6:c7:d3:40:2e:3d:6d:dd:96:3b:4d:ef:fc:
         69:a2:c0:29:0d:d5:3b:0c:68:fc:9c:fd:1f:96:a2:56:bf:7e:
         09:d6:5a:04:f1:b8:8b:b7:e7:a8:67:ab:b1:a7:36:92:07:31:
         4f:53:e8:d3:41:e5:09:2e:af:91:ff:f1:1c:b6:fc:15:55:6c:
         4b:7d:ce:d9:ad:4f:36:9f:99:c5:18:63:41:bd:9d:cd:0a:3d:
         5c:e6:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org