Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa
File:                     6D6692CAAA0211EEAADA3D32C4F9AE02.roa (raw, json)
Hash identifier:          CayamNnE7wETFTDD/NCIu0mz4XuwsUDXz4NCIpKnHG4=
Subject key identifier:   4E:72:52:40:B9:15:84:59:05:9A:13:15:EC:91:F0:50:EE:CE:36:8C
Certificate issuer:       /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial:       1265
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa
Signing time:             Sat 20 Jan 2024 17:44:39 +0000
ROA not before:           Sat 20 Jan 2024 17:44:38 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     10204
IP address blocks:        146.88.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4709 (0x1265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
        Validity
            Not Before: Jan 20 17:44:38 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65ac0686-f16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:12:12:b3:46:bc:46:dc:d1:5f:5d:23:7e:
                    8b:9b:e3:fa:30:03:b7:2f:1e:4b:fb:7d:28:93:6a:
                    3a:50:56:a4:38:e4:e4:c5:d9:86:e1:c5:1f:9d:c1:
                    a5:7f:4e:cd:26:ef:8c:77:e0:28:a4:4e:16:7c:77:
                    35:e3:aa:8e:eb:a1:5c:a8:20:29:fa:49:4e:6d:d1:
                    22:6e:d5:2e:05:73:5a:93:73:b7:60:df:bd:18:60:
                    f8:b4:74:bb:e2:49:61:f3:49:86:dd:85:a5:71:b8:
                    19:14:e8:39:16:4e:99:86:82:c1:6e:fb:3b:98:37:
                    06:f3:ab:48:0f:bf:26:dc:4a:fc:b5:a2:12:3e:a3:
                    be:b2:51:0a:92:15:7b:6c:cd:17:28:f4:17:57:5c:
                    45:aa:60:4c:7b:bb:66:66:90:fa:38:09:a6:5d:93:
                    c0:b7:53:1c:87:ae:3d:c0:8b:36:17:aa:99:08:c2:
                    43:78:71:80:77:53:29:a6:d7:ab:c5:cf:1c:23:e0:
                    dc:28:4f:6f:79:a3:c1:c9:8e:32:18:dc:a9:23:68:
                    a0:1b:7d:bc:31:3c:12:bb:90:2a:10:fe:48:ba:fe:
                    b8:5d:50:e4:c5:61:3a:c1:c3:6c:72:23:50:73:5a:
                    41:35:76:51:22:a2:fa:29:f3:e9:16:3c:54:10:c5:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:72:52:40:B9:15:84:59:05:9A:13:15:EC:91:F0:50:EE:CE:36:8C
            X509v3 Authority Key Identifier:
                keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:19:be:31:b1:f1:75:64:07:fa:70:ab:93:65:94:69:4d:aa:
         9e:b1:5d:08:3c:9e:32:9c:f5:8c:ff:a4:5f:a5:7f:4d:2e:54:
         ce:e2:86:5e:64:17:07:68:ab:ff:c5:49:15:5d:39:3b:cf:7d:
         33:c5:66:48:dd:5f:72:9c:21:d7:8c:c7:55:bb:0f:01:25:9f:
         9d:e4:30:b4:bd:4b:28:5d:9a:64:18:e0:93:94:a4:95:45:f3:
         b1:18:a8:47:ca:e9:d1:cd:f7:df:70:9f:a8:8d:bc:7e:20:ad:
         cb:85:93:0c:07:4d:84:5c:7d:18:bf:71:ce:6c:59:59:71:3a:
         f1:88:ae:32:5d:d7:bc:af:c9:5d:29:08:fd:96:29:2e:34:62:
         f2:85:cd:0f:ae:79:9b:11:4f:a8:13:8d:a9:25:82:cf:0f:99:
         02:63:f5:49:f4:90:91:c3:a6:a0:0c:41:9f:1a:41:ff:42:24:
         7d:dd:ed:60:27:33:cc:57:ae:53:dc:e3:50:a2:37:5b:31:80:
         73:3d:56:1e:74:3b:6f:3b:60:bd:36:a1:71:33:dd:54:e3:4f:
         f7:35:25:e1:b0:1f:87:5b:bf:ab:05:69:03:f1:e3:f1:76:33:
         49:d5:b7:b5:b8:77:86:26:81:3a:db:6a:48:29:20:26:1e:72:
         c2:8b:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-fra.rpki-client.org