Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/CB7265EA9A2611EBA0D24E4AC4F9AE02.roa
File:                     CB7265EA9A2611EBA0D24E4AC4F9AE02.roa (raw, json)
Hash identifier:          v+8jxQo82K3QCMxK0rtPynb0FPvOLNAofuOPi3g4KHA=
Subject key identifier:   96:79:EC:51:93:62:94:97:19:E5:01:02:6F:73:29:A5:C9:77:AF:12
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       052A
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/CB7265EA9A2611EBA0D24E4AC4F9AE02.roa
Signing time:             Thu 07 Sep 2023 00:11:29 +0000
ROA not before:           Thu 07 Sep 2023 00:11:29 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     134540
IP address blocks:        14.96.64.0/20 maxlen: 24
                          14.96.80.0/20 maxlen: 24
                          14.96.96.0/20 maxlen: 20
                          14.96.112.0/20 maxlen: 24
                          2406:e00::/48 maxlen: 51
                          2406:e00:1::/48 maxlen: 51
                          2406:e00:2::/48 maxlen: 51
                          2406:e00:3::/48 maxlen: 51
                          2406:e00:4::/48 maxlen: 51
                          2406:e00:5::/48 maxlen: 51

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Sep  7 00:11:29 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64f91530-0d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:58:9e:56:81:85:14:38:e0:4a:3e:93:c1:
                    bf:ed:fa:44:89:66:27:cf:a3:4a:77:87:bf:61:10:
                    db:cc:5c:54:97:81:3e:64:49:e3:9f:24:f9:51:68:
                    e9:82:ac:bd:d1:56:95:1c:30:5e:12:2d:2d:32:5e:
                    2f:7a:05:84:12:c2:f9:d6:0b:f3:a4:c3:4b:f6:7c:
                    12:37:d7:95:41:4d:26:c5:b5:2a:c0:f2:94:3c:52:
                    54:c4:bd:dd:b3:6b:f9:27:96:55:aa:89:4b:d9:07:
                    b0:88:2d:69:4e:68:a2:75:2d:9e:fc:24:e0:d7:48:
                    98:db:61:20:74:aa:6c:5c:83:39:08:a8:ca:6b:23:
                    7b:d2:28:b0:9f:ba:eb:11:94:d4:95:3d:91:9b:bf:
                    93:7c:7c:68:25:2e:0e:9b:bb:b9:7a:89:22:c3:ea:
                    3e:2b:e1:cc:29:de:ea:1d:24:21:c6:88:bb:a4:28:
                    06:a0:1e:cd:39:01:13:56:c1:be:7d:92:49:b4:b2:
                    e0:d2:53:c1:96:e6:e3:1e:44:4b:1a:7e:63:f8:b0:
                    e7:77:b1:90:7d:20:7f:e5:a3:e2:46:7d:a7:0d:74:
                    33:c0:bd:30:2a:e4:41:ad:bf:17:b4:4a:e1:fe:ea:
                    a6:3a:a9:73:12:44:96:59:9a:fc:ee:2c:a8:0f:d5:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:EC:51:93:62:94:97:19:E5:01:02:6F:73:29:A5:C9:77:AF:12
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/CB7265EA9A2611EBA0D24E4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.96.64.0/18
                IPv6:
                  2406:e00::-2406:e00:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         31:db:0a:b9:bc:70:ea:dd:7e:92:73:6c:a9:85:17:84:8b:6c:
         2f:c5:78:05:5e:97:ed:73:5a:d6:31:0e:9c:fa:62:0c:ce:b1:
         19:54:4e:30:ce:1b:cc:1b:25:a7:c4:45:1d:ee:6a:3d:ee:dc:
         c5:84:1a:5a:df:a2:12:7d:db:41:7e:f1:f4:54:5f:eb:d5:80:
         cc:b6:43:24:71:a6:77:67:15:92:cd:12:3e:b2:dd:56:4e:af:
         39:49:ac:40:00:de:5e:80:8c:1d:d0:bf:04:0a:ab:1b:a1:80:
         bd:3b:88:53:e9:ab:42:11:c2:3d:51:5c:a1:95:ac:fe:45:3a:
         a5:43:d1:ad:a0:2e:27:7a:fa:9b:42:8f:86:6e:48:57:7c:ef:
         2a:20:3e:3e:0c:40:23:cc:70:49:63:70:9a:85:49:ac:c8:30:
         60:a7:d0:22:98:50:80:cc:00:5f:d9:d7:ac:b2:aa:57:be:96:
         27:2e:4f:a4:82:dc:2d:71:bf:00:d3:3c:2f:1f:ce:04:54:49:
         bc:97:8b:17:a4:9d:dc:64:22:d7:41:85:38:4c:7a:ff:a8:43:
         be:11:1c:ee:c3:16:eb:51:a3:68:ef:00:d2:95:18:38:05:bc:
         48:1d:ae:6e:60:af:37:fe:0f:62:95:53:34:62:24:0e:ba:9a:
         91:68:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:03:24 2024 by rpki-client on console-fra.rpki-client.org