Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
File:                     D694BD82DBBA11EEB4125A3EC4F9AE02.roa (raw, json)
Hash identifier:          jxyEyTXxNEt2ME9TFpCSQpKfhsVyiDSVl85O+pvZcGs=
Subject key identifier:   A8:4F:8B:1F:C1:B7:FA:05:4C:6B:4F:2F:7C:C2:FB:CD:43:34:A7:0A
Certificate issuer:       /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial:       0318
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
Signing time:             Wed 06 Mar 2024 13:10:01 +0000
ROA not before:           Wed 06 Mar 2024 13:10:01 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     147179
IP address blocks:        45.248.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
                          rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 792 (0x318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
        Validity
            Not Before: Mar  6 13:10:01 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65e86b28-5abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ba:b8:f1:02:6e:d3:1e:e5:bd:0a:9e:00:c3:
                    b3:5c:cf:50:10:8f:25:89:23:4e:dd:34:6e:91:b7:
                    95:a0:58:b6:67:78:eb:5a:e3:fe:4e:5e:49:16:fb:
                    88:6b:e4:23:68:a7:45:e7:04:54:32:7a:c1:ec:be:
                    24:9a:c3:c6:04:41:b2:8b:f6:8e:2f:69:60:3c:9d:
                    c3:20:36:0d:b5:99:46:57:af:5d:63:af:7f:7d:23:
                    b7:d6:48:cd:d7:7b:87:5f:1c:1a:1c:91:d0:0f:63:
                    fb:6c:72:db:a0:f5:b7:8d:47:6b:59:5c:81:42:21:
                    fb:17:b1:95:41:da:7a:7d:64:f3:6f:e4:13:61:f0:
                    1e:f2:61:f0:97:40:08:2b:b4:3e:c7:1d:b2:2c:0f:
                    66:4c:49:5b:26:13:f9:36:53:2d:f3:ce:3e:a9:b6:
                    e7:46:17:1f:64:98:a0:85:08:3b:c3:e9:f5:7c:f0:
                    7b:ff:95:88:cd:e3:84:ca:42:cd:0b:76:95:d5:da:
                    3c:e6:6e:2f:25:4d:a7:47:cf:b8:dd:a0:61:7b:4d:
                    86:e8:2c:17:e4:50:ff:8e:d6:aa:6c:12:5f:70:2f:
                    d7:d0:9c:ae:1f:b0:f8:4b:4d:33:82:88:87:20:e4:
                    85:c9:12:6b:00:93:60:81:b8:26:b9:4c:af:b0:e0:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4F:8B:1F:C1:B7:FA:05:4C:6B:4F:2F:7C:C2:FB:CD:43:34:A7:0A
            X509v3 Authority Key Identifier:
                keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:12:5d:d2:0f:2d:b7:be:1c:f0:97:4a:fd:b3:f8:0d:b1:
         70:1a:83:11:8f:4d:7f:94:e0:47:7e:65:a9:fc:60:fe:49:c0:
         24:c1:d2:99:fb:b6:bc:29:c5:4a:54:c2:a2:59:3f:94:ca:99:
         a4:54:af:85:ca:56:29:f8:d9:d9:d9:5d:81:1e:62:0a:1b:8e:
         63:80:23:6c:1a:59:8a:09:ff:23:42:b5:21:e5:29:38:db:ea:
         d8:ff:b7:03:f6:d3:10:d1:e7:84:3b:14:25:91:49:22:4e:22:
         e8:6a:09:40:be:2b:99:3c:ed:16:c5:88:fd:9d:bc:9b:b9:46:
         53:d8:a9:a2:af:34:8a:ef:1b:02:ed:df:a4:db:09:a0:09:fc:
         6f:29:23:6a:16:0b:a5:70:19:a8:b4:41:1d:82:e3:71:ac:b3:
         5b:fa:42:fc:e2:3c:c0:2e:d5:9a:48:04:c2:41:fe:8e:b3:c3:
         a8:cb:59:a9:2b:23:b9:c5:4e:15:47:ee:c7:ba:8d:a2:06:8b:
         c4:f4:0f:c1:59:bd:94:29:68:a5:32:80:ff:48:67:5d:5a:bf:
         80:6f:99:42:f5:f5:74:0a:be:68:8c:5b:81:1c:2a:2e:7e:e9:
         6e:94:d7:e3:a0:66:1a:43:ae:60:f9:44:b4:4c:d8:ac:2f:97:
         76:0f:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:18 2024 by rpki-client on console-ams.rpki-client.org