Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
File:                     BE6B7B76337911EA8016C03DC4F9AE02.roa (raw, json)
Hash identifier:          H5yRhMu6t80UYJRJVYucUw4+J8lPE7EpA3H4jchV53g=
Subject key identifier:   B9:9D:4D:0F:00:75:42:8D:8C:F3:D9:40:3D:6B:97:D7:9D:A5:E0:15
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3349
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
Signing time:             Tue 30 Jan 2024 16:12:28 +0000
ROA not before:           Tue 30 Jan 2024 16:12:28 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     132651
IP address blocks:        175.184.236.0/22 maxlen: 22
                          175.184.236.0/24 maxlen: 24
                          175.184.237.0/24 maxlen: 24
                          175.184.238.0/24 maxlen: 24
                          175.184.239.0/24 maxlen: 24
                          2403:ba00:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13129 (0x3349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Jan 30 16:12:28 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65b91feb-9b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:85:ff:b1:20:3c:72:1f:33:b0:3d:7f:9c:
                    2a:23:15:66:77:78:d3:57:d6:67:8d:fb:e6:b6:fe:
                    b9:d6:80:95:40:68:1a:3b:2a:34:5a:29:8c:20:21:
                    1a:e5:6a:17:5c:bc:79:eb:05:b8:be:07:c0:bf:cc:
                    a3:8a:51:9d:b5:32:9f:72:ea:1c:11:51:9a:8e:13:
                    ae:89:92:42:ee:52:be:dc:4f:ff:7e:b4:10:28:c2:
                    f2:ae:92:25:43:b7:38:83:c3:ba:4f:a6:9a:6b:32:
                    29:08:5f:8b:c0:2a:3e:08:8c:dd:61:1b:4d:50:8e:
                    0e:d5:3e:a0:a3:53:01:b7:fd:ae:9c:4c:70:a1:63:
                    64:f5:54:ff:a6:76:b9:db:90:bd:11:98:a6:b3:e9:
                    97:1b:27:31:df:ea:76:31:ce:1f:96:30:4e:ff:7f:
                    b7:ac:ca:d7:fe:9b:97:f3:e5:7c:d2:ec:06:70:2f:
                    49:15:2e:27:5f:25:1d:5a:4c:29:b1:51:0e:a2:ed:
                    b8:92:fc:a8:42:db:32:be:da:13:7c:d5:59:b5:f8:
                    ab:93:fe:37:5c:ef:f4:8e:8f:46:18:50:3d:ae:94:
                    7c:d4:fd:40:67:43:72:f5:a4:81:a8:14:82:1e:ec:
                    db:5f:3e:bb:37:1c:e8:87:c1:67:7a:46:4e:75:84:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:4D:0F:00:75:42:8D:8C:F3:D9:40:3D:6B:97:D7:9D:A5:E0:15
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.184.236.0/22
                IPv6:
                  2403:ba00:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:2a:45:b0:9e:99:33:30:0c:16:fa:0e:9f:1b:fb:67:d6:
         4f:67:fe:93:17:92:10:55:1a:3b:d6:f3:6c:bd:ba:0a:4b:96:
         85:4a:62:5e:07:23:c2:03:4c:99:23:c9:c1:05:3d:d2:a9:fe:
         b6:a0:32:2d:b9:e6:2b:8c:c7:f8:36:39:3d:3d:8e:b5:cc:60:
         06:61:15:39:41:20:29:60:b7:9e:5c:76:84:5f:a0:76:ec:1a:
         2e:21:a0:71:c7:f3:6e:a0:93:41:51:fb:26:9a:e5:8f:31:02:
         bf:62:4e:ad:39:5d:6a:ab:cd:22:14:82:14:b4:69:13:6e:e7:
         b2:96:5c:d1:40:46:55:2d:56:fa:e3:f7:b6:04:b6:2e:24:22:
         ac:99:65:e7:09:15:64:78:e0:fa:d5:c7:db:b9:9f:c5:5f:03:
         ac:14:6e:b3:03:8a:a9:d3:2e:8a:c1:04:19:ae:15:9c:e5:ba:
         66:c5:1f:61:18:d0:84:80:fe:43:de:44:c0:b2:8d:1d:68:38:
         ed:73:22:6c:0b:74:85:26:31:c9:68:48:18:4f:53:5c:e7:4c:
         09:79:75:1b:61:28:d9:03:cc:a7:50:1b:44:67:4c:61:94:ac:
         05:2f:26:b5:2c:97:25:18:5a:38:a7:e1:27:a8:9c:40:5c:30:
         cc:8a:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:14:00 2024 by rpki-client on console-fra.rpki-client.org