Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9EBF44EC366311EEB376DC3AC4F9AE02.roa
File:                     9EBF44EC366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          ybrHY7tqvISNr1jWGzlVCMiSS4kkQr8URzMMIWkYhoc=
Subject key identifier:   F4:B4:21:62:B5:81:98:2D:B7:96:AE:B9:C2:B5:5A:56:6C:5A:16:05
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       05
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9EBF44EC366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:19:59 +0000
ROA not before:           Wed 09 Aug 2023 03:19:59 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136255
IP address blocks:        146.88.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:19:59 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305df-fb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:aa:f6:27:33:ab:4f:b3:f2:a6:1c:73:1c:
                    e5:58:68:36:b5:2c:31:37:ad:90:46:70:7a:9f:52:
                    87:09:7c:33:84:32:a6:0c:19:d2:12:e4:79:d8:83:
                    54:31:eb:84:1a:b7:30:2d:8b:b6:4d:6d:5b:c0:ee:
                    a1:89:f7:ed:18:2f:31:89:c2:ba:64:09:93:a3:6a:
                    ec:3d:75:a8:c0:3f:50:7c:59:4c:70:05:37:0c:16:
                    94:e7:2f:db:70:7e:38:9e:af:09:cc:df:89:b5:b7:
                    7d:c7:1b:a4:b9:81:49:45:b1:2c:a3:c5:4b:6e:5f:
                    57:47:1e:67:54:e2:16:39:29:6b:fb:d7:ca:13:c0:
                    a8:ef:65:bc:10:a8:be:ef:1d:0c:c1:6b:a2:f0:51:
                    05:af:3b:a8:01:8e:5d:39:cc:19:ed:3b:8f:1f:dd:
                    f1:ca:46:cc:c2:21:ab:e3:d9:5b:8a:c8:8f:f7:4e:
                    15:ab:c9:1e:57:20:34:29:04:17:6e:b9:49:0d:49:
                    8a:1d:88:c0:06:31:89:5b:d9:19:f6:74:6e:fb:59:
                    b5:b3:07:d1:87:c5:38:22:aa:7d:d2:85:09:61:17:
                    ab:80:8a:17:85:6a:32:c1:76:da:a3:ac:8b:9b:c4:
                    73:11:2f:25:05:4d:03:89:33:b8:f2:6f:bd:e9:2f:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:21:62:B5:81:98:2D:B7:96:AE:B9:C2:B5:5A:56:6C:5A:16:05
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9EBF44EC366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:47:e6:c7:50:f5:7e:37:3c:8e:c8:b0:19:df:bd:6e:37:
         49:d9:4e:e5:08:49:86:2f:a1:39:e9:bc:4b:9e:ac:a7:6a:4f:
         cb:a2:61:d8:8d:9e:00:1a:5f:26:98:9c:62:bf:fb:29:64:73:
         85:b0:08:9e:29:fd:7a:38:e1:54:64:b6:7e:5a:d7:f5:42:20:
         e5:ef:4b:2a:11:a4:74:5c:ec:46:97:d3:d8:6f:1b:ca:45:c1:
         ab:b6:01:cb:8f:2d:d0:22:2f:70:ae:93:6e:8e:82:71:22:ba:
         54:e1:78:aa:cc:ad:7d:ea:ef:88:b1:bf:92:e5:05:e6:cb:36:
         6e:ae:47:ae:09:fc:c4:cf:4a:5a:69:54:ea:19:c2:ee:05:37:
         90:e0:13:ba:f3:95:5e:04:bb:46:56:ab:d0:77:56:57:f6:2e:
         34:d9:7f:bd:af:24:73:d0:07:dc:9e:91:61:d3:91:3e:1c:5d:
         18:fb:26:ac:de:f4:d1:d4:fc:d0:b0:12:6f:e0:9d:d3:08:6f:
         5c:66:9f:1d:cd:9d:d8:a6:ae:ba:e8:64:3c:80:3c:ff:2f:ef:
         12:7c:72:dd:ce:ff:40:36:7c:65:52:e2:f4:d1:e0:e4:db:a9:
         13:3b:3d:69:7e:31:16:13:ce:09:05:f7:2e:9d:16:a6:ef:9f:
         43:58:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:21 2024 by rpki-client on console-ams.rpki-client.org