Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
File:                     66425D7E2B1311EB89CBB164C4F9AE02.roa (raw, json)
Hash identifier:          1qW8PqOKetCMk2x9xmkWWa9Gzva1wDC2Cgrt+Bc+QO8=
Subject key identifier:   CC:01:17:61:54:27:4E:88:97:0B:09:81:8B:4A:A5:C7:46:44:FA:85
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       0F65
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
Signing time:             Thu 30 May 2024 18:51:47 +0000
ROA not before:           Thu 30 May 2024 18:51:47 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     141362
IP address blocks:        203.159.77.0/24 maxlen: 24
                          2405:3340:e000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3941 (0xf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 30 18:51:47 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658cac3-62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:52:a4:75:27:ff:21:bd:f5:08:02:23:06:
                    61:7f:f9:e3:8e:32:19:e9:41:59:d4:ee:72:b7:a2:
                    b1:91:ee:b9:39:81:c4:1a:d4:b1:17:fd:d0:a2:e9:
                    fd:f0:6c:c8:63:9c:0e:91:05:74:12:51:8a:58:27:
                    4f:48:65:6e:bf:29:ca:c8:9c:b5:fc:53:db:99:3b:
                    75:98:c3:bd:56:bd:07:5e:4f:20:20:bf:57:80:01:
                    e3:e6:c0:ec:4e:bb:37:dd:c4:96:0c:17:1e:dc:eb:
                    a8:23:0e:01:b9:98:ab:fa:58:95:94:f1:a3:36:dc:
                    ef:ab:40:1f:0e:66:b7:08:fa:12:72:66:9e:f3:7d:
                    b4:cd:c7:71:df:05:ef:b3:6d:b0:7d:b5:1a:f7:78:
                    d8:47:41:6b:8b:16:6f:af:a3:67:18:94:00:b7:d5:
                    4c:34:4e:e8:68:ed:af:06:42:24:7e:d9:c3:2f:8e:
                    85:e6:4a:c0:71:d6:d6:a4:51:7f:43:ba:52:5a:a3:
                    34:f5:35:a0:03:d3:7a:d3:53:16:e2:9f:2f:87:81:
                    f8:9e:d7:9c:64:45:98:4d:5a:aa:85:98:9e:b4:b0:
                    03:57:9b:89:7e:18:fd:d3:72:3f:17:96:c8:48:f8:
                    bb:df:ad:7d:27:e0:0a:81:c7:58:7e:01:d6:89:75:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:01:17:61:54:27:4E:88:97:0B:09:81:8B:4A:A5:C7:46:44:FA:85
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.77.0/24
                IPv6:
                  2405:3340:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:d2:36:34:57:70:16:53:a9:ae:d3:f2:f5:ae:e7:ab:b3:
         ee:88:cf:91:de:56:a3:7c:5d:9a:ab:4e:97:15:14:5e:3f:d6:
         8e:a6:5d:30:56:eb:e2:bf:f9:c8:a8:6a:10:0a:a3:6c:f3:c0:
         62:c9:81:b1:db:23:9d:fe:f1:eb:98:1c:06:9b:6e:f5:53:bd:
         a1:95:2f:2d:75:84:31:e5:a3:27:48:88:38:9f:81:78:a1:3c:
         d1:18:b3:66:4c:15:b1:13:ff:11:7c:da:0d:0f:73:4b:d1:f2:
         05:1a:96:54:ed:bc:92:19:5b:9d:d1:77:49:d3:a2:10:0a:54:
         41:2f:db:33:e9:d1:08:59:12:53:c6:78:a3:fe:8a:07:57:35:
         37:c8:2d:63:82:d5:6c:9c:1e:01:a3:87:a1:41:9a:b3:d9:0f:
         f2:2f:e0:fc:0f:a7:b2:18:eb:d1:98:e1:26:74:8c:c2:79:51:
         4c:6b:b3:ac:91:b0:34:13:dd:fb:7d:d7:84:40:f9:bf:34:79:
         04:b5:40:75:6a:a6:27:ac:a1:3d:66:bd:57:c9:17:4a:bf:33:
         c9:9c:8c:6b:55:1e:f3:99:63:53:02:68:4d:c5:a0:a0:b2:c9:
         16:5c:e6:72:c9:fe:70:b6:09:89:89:f8:41:f8:61:c5:23:e3:
         f2:c1:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org