Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa
File:                     A08711E2366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          TWpk8DoUqQF/8iOz+PKjMIg0Nh067E7GVCT+hwUz+LY=
Subject key identifier:   87:80:63:A4:C6:F5:E8:2F:6F:70:24:E1:FC:EE:3D:8B:37:CC:99:2B
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       08
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:02 +0000
ROA not before:           Wed 09 Aug 2023 03:20:02 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     138003
IP address blocks:        161.82.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:20:02 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305e2-2da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:61:3d:b7:a7:6b:5d:d4:11:cb:d0:e7:7e:
                    e7:23:c6:2f:52:7e:8c:e1:4a:a9:ea:07:d2:05:f5:
                    58:fd:c5:cf:9b:2b:f0:14:20:40:ce:e8:69:b7:60:
                    f4:e7:9d:8c:a8:ea:59:89:91:b0:6f:88:5c:bc:85:
                    52:2b:69:a9:a1:09:d3:a2:e0:ab:c0:1d:2a:e0:c2:
                    83:65:b8:e2:37:46:26:14:62:06:21:8a:70:28:b7:
                    05:48:b7:b0:43:1c:01:7a:ec:6b:b2:41:c5:1e:93:
                    82:32:96:26:23:6a:24:c3:2e:b8:78:eb:01:be:a3:
                    81:ee:96:27:3a:68:3e:df:98:9c:ca:54:ba:b7:4f:
                    c5:6e:bf:48:c3:4d:06:52:c8:c6:d8:5e:0b:38:dc:
                    ab:f3:88:9e:e0:63:e1:f6:20:62:e3:75:0e:b8:5e:
                    f0:40:b8:3b:15:3c:4b:36:01:37:82:98:f6:31:a3:
                    10:5b:cd:46:62:db:74:0b:8b:08:75:2c:ed:68:77:
                    ca:9e:3b:25:dc:85:de:25:a8:e7:a1:8e:47:84:e3:
                    0d:fc:b9:fd:be:27:9d:c8:10:23:c9:71:7b:81:f7:
                    45:18:7d:6f:55:c5:2e:cb:9f:14:73:c9:e9:ac:e3:
                    ed:bc:a6:07:92:f1:7d:0d:7e:51:d8:a9:ed:d7:bb:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:80:63:A4:C6:F5:E8:2F:6F:70:24:E1:FC:EE:3D:8B:37:CC:99:2B
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:ec:73:3c:88:fa:07:dd:ec:f1:63:2f:f4:21:cd:f3:3b:
         56:13:55:b5:2b:b1:51:97:8f:18:4a:c3:c6:a6:45:e0:c3:24:
         70:74:70:e7:3b:05:1e:62:fd:32:b2:af:a1:df:38:7f:87:0f:
         22:81:16:3e:cc:63:15:23:c9:f5:43:54:6a:7e:d6:88:7b:d3:
         8f:eb:a3:e3:61:77:6c:31:5f:a3:6f:4f:a1:42:09:54:82:35:
         67:0a:4e:2c:5b:ef:86:ed:1d:6f:72:4f:52:5a:ad:25:f5:e1:
         e3:6d:e0:53:a7:24:7a:dc:61:18:79:ee:a9:a2:d4:5e:84:cb:
         9b:9a:a0:44:15:51:b9:75:76:36:ca:e1:77:2a:9d:30:5e:82:
         af:92:5d:e8:ae:b7:a1:bd:9b:ad:c9:ac:3c:84:82:11:e3:55:
         62:c3:f4:60:28:cd:e3:38:45:b1:82:e3:b4:32:9c:87:d6:b2:
         22:aa:37:78:8c:e7:0c:4a:4e:76:17:5d:26:a0:f1:9e:dd:aa:
         33:71:fd:a4:1b:17:bf:d8:e5:23:d6:3b:f9:f9:a2:0e:b9:e4:
         04:08:a5:b0:ac:21:33:66:3d:1e:02:01:99:7c:fd:f0:1f:73:
         d9:df:a8:44:ea:49:7a:8b:3b:03:17:f6:41:08:ab:56:77:be:
         43:47:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org