Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
File:                     F049853EF6D911EEAAB0053FC4F9AE02.roa (raw, json)
Hash identifier:          m0AuhnFOPaEo4LEAMWEx8QJiB9l9M7bGArGWia266rY=
Subject key identifier:   4E:21:A4:F9:3E:60:6B:4A:59:48:11:A6:2F:7D:EE:E3:1D:A8:89:BD
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       BA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
Signing time:             Wed 10 Apr 2024 01:30:39 +0000
ROA not before:           Wed 10 Apr 2024 01:30:39 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151917
IP address blocks:        157.66.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 10 01:30:39 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6615ebbf-9dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:e2:b4:b8:91:57:57:d2:dc:c7:73:b3:7f:
                    49:be:21:e4:90:5b:c6:ae:9c:a6:48:af:b4:3d:9d:
                    c7:9f:69:32:fb:ce:fc:28:40:c2:ef:24:9a:47:04:
                    75:ae:87:b3:79:7c:a9:72:10:a9:53:02:80:7d:68:
                    58:c3:93:53:e1:6d:8b:74:b9:ce:a1:ef:27:5e:e1:
                    42:47:6f:30:f4:90:9d:1e:c7:38:47:b0:79:b4:0c:
                    1f:d9:58:f2:bf:90:f1:2a:8f:dd:64:0d:9a:0c:9a:
                    8b:82:42:f5:0e:64:e0:69:9d:18:ae:28:1d:1d:cf:
                    58:83:07:73:01:dd:58:83:b9:65:26:73:9c:99:29:
                    c3:19:26:2e:3e:1a:4d:0c:ca:98:cf:f6:6d:3a:ca:
                    c8:fe:16:af:ec:52:e7:ba:f6:d5:ad:a6:a0:66:de:
                    37:1a:78:c8:b8:bc:b2:2f:63:fd:a2:83:f0:5d:11:
                    d0:ba:15:64:56:5a:26:80:a7:7f:39:d8:4e:fd:82:
                    c8:74:7f:de:76:58:e8:93:e7:af:bb:a5:8c:61:66:
                    59:86:d8:78:b8:0c:6f:ee:7b:a3:9e:dd:e2:c4:06:
                    6b:05:2a:68:41:e2:8d:6d:67:44:7e:b2:b8:26:08:
                    24:0d:b2:ac:0a:8c:7f:8b:b9:8b:bc:a7:d6:eb:6e:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:21:A4:F9:3E:60:6B:4A:59:48:11:A6:2F:7D:EE:E3:1D:A8:89:BD
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:fa:38:de:18:14:38:0f:f5:3a:d8:a3:be:ee:10:05:a4:8f:
         5b:62:e4:89:fd:d6:55:3f:73:d5:38:ed:13:e1:53:63:d5:14:
         6b:d6:1a:6f:48:ea:56:4e:e5:d9:1d:69:81:04:10:74:3d:20:
         8c:94:e7:4c:0c:a8:f4:1c:50:3e:d6:87:00:a6:bf:06:79:c5:
         2e:c6:3a:77:1b:f2:e3:5a:fb:c2:29:08:35:be:a2:c1:6c:e0:
         24:06:cf:67:4c:11:31:41:3f:a4:ba:63:ab:2d:fb:2b:26:a6:
         ba:4f:94:00:7f:6d:e9:f1:66:5c:cd:f4:75:fa:41:0f:33:0b:
         5f:83:ac:84:6c:7d:16:85:bf:39:6d:5f:7c:a4:83:cc:08:00:
         57:85:d1:d6:d0:c6:81:60:8a:85:28:fc:95:4c:a8:de:ca:f1:
         f2:1a:0f:06:a0:d8:fe:b6:7b:26:e9:0d:33:d6:0b:71:04:71:
         9f:17:9f:a9:b5:e0:42:28:55:36:f4:4c:84:73:5c:6b:6c:b4:
         19:86:ff:b5:83:8e:20:6a:ea:41:d2:7d:25:85:aa:ef:2e:ad:
         ee:fe:ea:ef:ce:77:61:ec:38:c7:e4:7b:30:a8:c2:68:11:df:
         86:54:49:9d:6d:4b:82:46:75:8e:90:d5:65:fe:d4:8b:b1:71:
         f3:cc:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org