Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa
File:                     EED3285ADDB011EE9A15F138C4F9AE02.roa (raw, json)
Hash identifier:          kirKgYfhMq254S0hKXLz5pp8qjEEoW7Yye9Ij10DPaQ=
Subject key identifier:   75:52:79:8B:8F:90:71:C7:5C:1B:1F:14:AC:8F:08:A5:0C:7E:3D:2E
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       E7
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 04:31:31 +0000
ROA not before:           Fri 26 Apr 2024 04:31:31 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135983
IP address blocks:        157.15.86.0/23 maxlen: 23
                          157.66.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 26 04:31:31 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=662b2e22-7278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:e3:a2:13:17:c2:15:6f:0c:fd:3c:f4:36:
                    8f:c9:b3:bc:78:08:7b:0b:ea:40:88:d9:48:59:4d:
                    4d:98:fa:5a:b1:f8:3c:16:fc:88:d0:03:4d:b1:2c:
                    0b:88:39:53:31:88:3b:4d:8d:b3:53:53:17:33:57:
                    22:3c:14:1c:da:d1:42:af:d7:aa:2f:cb:a8:2b:9a:
                    75:91:6d:d9:6c:07:9a:ba:b1:f2:0b:f1:36:a7:da:
                    40:9a:a7:a9:58:6a:51:5a:85:72:28:ee:dd:54:b6:
                    43:e7:3d:6d:fc:67:d2:6b:c2:1f:e2:b8:36:34:53:
                    f5:69:ef:49:61:4d:a8:fa:e5:6b:e0:c3:2c:b0:88:
                    61:55:c6:79:e9:14:80:fb:33:ec:26:b0:01:e6:95:
                    fd:4a:d1:90:7b:58:1c:61:64:0b:17:1e:bc:c1:92:
                    46:21:a3:c3:8f:ec:07:39:e1:27:63:f3:eb:40:b8:
                    50:c2:7d:3c:7c:9f:7c:45:81:8a:ae:ce:91:bd:de:
                    5c:59:68:01:ac:1d:7e:41:7a:2b:c8:c7:22:7b:41:
                    82:a7:e3:66:47:01:93:55:4f:05:da:57:c3:df:10:
                    f0:12:55:26:94:88:ae:a0:2b:85:16:ff:87:ab:52:
                    49:55:e2:c5:38:57:a3:1b:cc:fc:33:d5:a8:3c:29:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:79:8B:8F:90:71:C7:5C:1B:1F:14:AC:8F:08:A5:0C:7E:3D:2E
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.86.0/23
                  157.66.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:44:b5:18:33:9d:40:b0:e1:31:fd:d8:1f:75:8c:d5:79:
         08:d6:53:e7:4f:30:0c:28:d5:25:79:08:76:06:f0:50:b2:a0:
         b4:c4:ee:5c:cf:13:fb:10:3e:8d:c8:16:0b:6f:68:43:b4:b3:
         74:64:50:90:f0:ca:c1:b9:98:75:f1:2f:89:cf:b6:fd:fc:c0:
         cd:8d:33:e1:13:23:fd:d1:b7:1a:cc:5f:b8:48:41:4a:2a:13:
         00:b5:96:f6:9c:73:7e:39:44:2c:8a:c0:e2:b4:84:8c:fb:08:
         95:fa:98:87:22:32:cf:ee:fb:24:ee:78:f6:03:cc:02:5b:86:
         47:33:67:f6:ff:f5:87:20:75:bb:6b:66:cc:1d:5e:85:84:99:
         d2:33:6e:57:36:d9:5a:0c:19:68:c8:73:e7:c1:76:1b:01:86:
         ae:43:26:96:b3:ea:f2:67:4e:1d:4b:31:62:d3:80:1b:82:51:
         c7:85:cc:a8:b3:17:03:e6:4a:4f:61:9e:50:41:9b:e9:ef:14:
         6a:df:0f:80:33:89:21:88:8b:dd:cb:03:da:a8:4a:1a:9e:f5:
         aa:80:05:12:31:05:bd:96:3f:7d:88:ca:1d:6d:e4:ee:fe:f3:
         b4:79:88:52:61:f1:6d:7b:83:79:4d:01:6c:4b:36:33:23:59:
         65:d3:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org