Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
File:                     F4A77A06CED911ED9BC69385C4F9AE02.roa (raw, json)
Hash identifier:          1MxMwrXZk8ftJkShEH2HIRV8rrWEwvbLO8gTpwcAJdo=
Subject key identifier:   9A:0A:B7:32:A2:1A:94:35:99:86:F6:89:95:DF:24:03:9F:02:8B:45
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0AAC
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
Signing time:             Thu 24 Aug 2023 17:34:29 +0000
ROA not before:           Thu 24 Aug 2023 17:34:29 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     55990
IP address blocks:        94.45.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2732 (0xaac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: Aug 24 17:34:29 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64e794a5-0e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:1e:d4:b0:43:5e:04:c4:d4:96:ee:f0:03:
                    7a:c7:2d:8a:94:d8:5c:15:77:48:12:5b:73:f6:bf:
                    2a:cd:5f:af:02:dc:15:fa:f5:4f:5c:b4:c6:33:3f:
                    af:4f:6a:c3:08:d7:e7:0f:dd:35:36:57:dc:5c:4e:
                    b9:21:d7:10:4d:01:d3:98:32:aa:23:38:7b:07:5d:
                    78:9f:73:54:9a:5c:e4:a3:74:e8:87:df:1c:10:f5:
                    21:32:36:8b:b1:60:87:af:5e:29:fa:2a:1a:9f:3c:
                    4f:fe:56:5c:85:8a:e4:bc:f5:a1:0c:11:a0:58:1d:
                    2b:a0:4a:06:ed:d4:f9:c2:f2:77:b8:1e:f3:a3:b6:
                    a1:8f:56:63:7b:72:87:34:b8:a8:a0:64:be:94:40:
                    7f:4a:cf:c4:6c:80:7b:7e:57:69:69:f6:ae:7d:38:
                    72:61:1a:1a:9f:21:54:52:d5:db:1a:16:11:a8:0d:
                    7c:62:45:41:16:29:e8:ef:06:41:a9:9e:de:5d:97:
                    e2:1f:23:ea:c7:ea:aa:df:e0:f0:df:96:65:85:48:
                    6e:7a:fb:11:a4:35:ac:32:70:dc:54:54:81:28:3e:
                    6d:c9:d6:17:42:7c:5c:59:dc:d6:79:00:c9:b2:d5:
                    ea:f3:c6:09:dc:5f:29:c2:d2:5e:be:07:f6:69:b1:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0A:B7:32:A2:1A:94:35:99:86:F6:89:95:DF:24:03:9F:02:8B:45
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/F4A77A06CED911ED9BC69385C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:33:d9:a9:97:60:93:f4:5d:ca:4d:69:b4:2f:0e:d3:24:85:
         3a:7e:f5:21:a9:1b:44:0f:a7:d3:e9:3f:ec:a7:a4:3b:27:0c:
         38:ac:45:b3:24:64:62:66:d4:bc:eb:6c:4f:4f:e9:0e:51:41:
         18:19:22:bd:7b:79:80:ef:85:97:14:d6:7a:e3:45:07:85:aa:
         e4:e0:83:e1:1a:98:dc:e7:d3:74:f7:da:b4:4d:82:a7:3b:eb:
         dc:fc:4e:71:f8:8e:fc:07:d2:ec:9a:64:56:42:ac:b6:d7:c6:
         31:55:4b:c5:79:6f:32:cc:c9:e5:5f:9f:d3:62:4e:de:9f:1b:
         3a:47:c3:fe:89:49:94:a6:e6:95:fa:32:d2:8e:1f:53:e6:d1:
         d4:00:b0:c7:78:61:97:db:03:83:4f:3e:b1:ad:f5:dd:78:57:
         81:fc:75:9a:0a:fd:25:29:8b:f9:2c:98:94:cb:d9:eb:d6:e7:
         a0:db:ab:e7:60:cb:da:fc:b0:1c:e1:44:39:be:0b:50:7b:94:
         e9:c8:c2:2d:fe:2a:5b:7f:bf:34:55:6d:be:48:dd:23:28:bb:
         25:9f:d9:d6:34:9e:be:92:42:c8:69:56:fc:06:3b:e5:c0:bb:
         ed:28:98:f7:d3:ae:3f:1e:23:db:3b:4f:0e:91:39:d0:e4:54:
         70:c1:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:06 2024 by rpki-client on console-ams.rpki-client.org