Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/266ABA161E5811EF89038F3BC4F9AE02.roa
File:                     266ABA161E5811EF89038F3BC4F9AE02.roa (raw, json)
Hash identifier:          7rdPpViHW9wTkDJYYLlg2J2z9SjsfKNVBZSmWKul8RM=
Subject key identifier:   FD:05:BB:A8:D9:72:AC:36:A1:B1:1D:64:FB:5B:44:BB:04:27:B7:43
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0CD4
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/266ABA161E5811EF89038F3BC4F9AE02.roa
Signing time:             Thu 30 May 2024 07:48:54 +0000
ROA not before:           Thu 30 May 2024 07:48:54 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     3758
IP address blocks:        151.192.0.0/18 maxlen: 24
                          151.192.64.0/18 maxlen: 24
                          151.192.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 14:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: May 30 07:48:54 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=66582f66-3643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:aa:0a:98:2a:d6:71:ed:df:07:14:c0:de:
                    ca:27:66:43:11:1e:e9:af:cf:6f:d7:fc:a7:8b:3f:
                    67:8d:ba:f6:69:c8:d6:c7:d0:c1:9a:58:26:67:2d:
                    8c:8f:de:2d:a5:d8:97:44:97:04:93:1b:57:c9:f1:
                    e4:f3:5d:82:21:d2:98:49:88:2a:ad:81:6a:05:78:
                    b7:ab:d7:d0:c4:5e:08:34:95:3a:35:64:58:fc:6c:
                    cf:a0:42:74:56:37:75:6e:91:68:8b:65:a6:93:65:
                    79:35:c8:70:6c:72:0c:b9:59:eb:f0:ae:68:fb:d7:
                    6a:56:95:8b:1b:1c:77:81:49:d4:b9:32:8a:b0:2f:
                    a9:39:80:5c:76:af:d4:50:7d:ff:df:81:cb:81:d5:
                    4a:5b:eb:a0:48:44:06:f8:f1:0d:23:30:57:7c:c5:
                    b4:90:b0:bf:20:fd:b6:07:34:bd:32:42:23:b2:38:
                    10:9a:ed:4d:d7:9c:6e:e3:7e:f5:42:1c:56:a4:08:
                    57:fc:92:0a:dc:2a:54:b4:18:90:2b:c2:8c:67:3a:
                    30:fa:26:9b:4c:c0:a4:c8:f3:58:14:38:3a:69:84:
                    28:f5:8f:73:98:a2:d9:83:c8:6c:5b:8a:54:c8:15:
                    7c:8b:24:79:7e:2f:14:e8:17:d0:e2:86:a9:94:9a:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:05:BB:A8:D9:72:AC:36:A1:B1:1D:64:FB:5B:44:BB:04:27:B7:43
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/266ABA161E5811EF89038F3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:67:8a:77:77:16:3b:4e:21:cc:22:31:f4:f9:54:17:b0:d1:
         b2:04:e1:0f:ef:e3:5a:ca:aa:13:83:32:e5:12:75:9d:d7:f5:
         ce:de:ef:78:52:a2:a2:89:b9:6d:82:b7:ef:10:91:05:dd:a3:
         ef:a8:76:f0:3d:c4:4d:b1:6a:68:53:67:df:ff:c5:31:47:c2:
         49:c9:56:4b:8f:10:05:4a:55:d5:3f:31:9c:72:f1:11:53:2c:
         42:c1:f1:16:6f:07:ce:80:23:e7:cd:17:e5:18:d5:50:5c:ee:
         13:e2:83:33:85:31:74:52:e1:e1:b5:56:81:f1:a2:96:6c:40:
         65:b5:9b:8d:4c:9c:00:7b:1d:e4:e7:42:7c:f5:6c:a4:d7:63:
         eb:e2:1d:92:be:56:c6:2d:b8:00:0c:6b:f8:b0:44:9a:1c:76:
         ff:64:28:11:d5:b3:c6:81:c7:16:de:f1:5f:2d:9b:49:9a:2a:
         a1:57:f4:49:7b:6b:f3:71:02:f1:7d:5a:32:22:4a:a6:3e:07:
         4b:26:f7:8b:26:9d:95:d5:0a:fc:0e:9e:98:8a:5a:ec:7c:b5:
         d9:d3:30:42:f5:2b:47:dc:a0:6e:0d:f0:2f:13:0a:1f:4b:8d:
         0d:06:f4:d1:f9:d2:45:47:64:ef:6a:57:b8:21:55:00:bf:32:
         3a:0d:96:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 16:29:10 2024 by rpki-client on console-fra.rpki-client.org