Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/A8827568116911EEBB241C32C4F9AE02.roa
File:                     A8827568116911EEBB241C32C4F9AE02.roa (raw, json)
Hash identifier:          Qc67Zl9xH5UQVVuJaiSmRCShgX4fnvxw7leOq59EYpg=
Subject key identifier:   F2:5E:0B:40:65:DC:FD:12:F9:ED:7F:62:47:15:91:FC:D5:71:A0:4D
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       0342
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/A8827568116911EEBB241C32C4F9AE02.roa
Signing time:             Sun 07 Apr 2024 03:05:01 +0000
ROA not before:           Sun 07 Apr 2024 03:05:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134134
IP address blocks:        116.204.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 04:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Apr  7 03:05:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66120d5d-91df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:0a:01:24:df:17:a3:31:1a:d5:51:ae:bf:
                    61:db:7d:7a:e2:2e:97:f8:f2:4d:74:9c:9f:93:d4:
                    c3:22:6b:9c:43:7a:fc:8e:82:46:e5:2e:a2:1e:8a:
                    15:99:ae:1b:d0:8e:c3:3b:0d:60:52:f5:1a:a5:b0:
                    fb:2c:28:4d:fa:a4:7b:d6:91:bf:32:f3:2d:86:e2:
                    f6:ab:9a:cb:16:bf:0a:3e:bb:8c:9c:46:e6:4c:b4:
                    01:37:4b:4d:1c:74:cf:79:09:b5:3d:17:a9:f3:50:
                    ec:34:44:a4:6a:d7:25:f4:8e:a8:a7:ff:c4:f5:fa:
                    f7:3a:cb:0e:ed:37:7f:61:a0:e7:67:87:b8:93:7a:
                    c2:a9:93:e1:e2:4a:ab:fc:8d:23:8b:40:4f:48:a4:
                    af:40:3b:7c:10:4b:88:ee:8e:01:11:4f:9e:27:e8:
                    45:bb:2d:39:1f:89:13:36:86:98:61:76:74:62:94:
                    27:2b:6b:e1:97:4c:14:a7:a6:e8:5b:b9:35:a7:3c:
                    fd:36:52:b2:fa:c5:c9:d2:1e:46:4d:0c:4e:2a:49:
                    79:13:6e:97:f7:72:21:35:0e:63:af:8a:61:45:c5:
                    88:f9:8c:c4:57:39:9d:f4:c0:29:44:cf:4f:bc:00:
                    de:b6:59:04:fe:df:13:b7:76:1a:6a:9b:f8:df:38:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:0B:40:65:DC:FD:12:F9:ED:7F:62:47:15:91:FC:D5:71:A0:4D
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/A8827568116911EEBB241C32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:02:fe:9c:5a:ac:0f:7f:d0:a6:1a:eb:9a:f4:2e:21:21:3e:
         77:72:cc:63:a7:7a:5f:e4:af:2a:49:d8:3c:b0:ba:34:ff:67:
         f3:99:ee:cc:ca:3d:72:2b:95:3c:c6:38:6e:de:78:c0:1c:af:
         ce:b6:8e:fe:71:e2:b0:60:33:84:ea:54:90:9d:e3:2f:56:29:
         7c:1b:5e:53:15:ee:94:2a:3e:af:e3:80:01:6a:cc:e2:19:f8:
         41:61:66:45:1c:6c:3d:f1:0b:2a:d7:82:23:08:d5:73:2a:23:
         02:11:47:64:6d:5d:c3:d6:30:59:60:c4:11:d4:b2:e7:5c:6c:
         37:1e:c4:73:02:98:58:45:8f:54:77:85:d6:53:65:69:17:c9:
         92:f3:86:12:0e:c1:75:bd:4a:51:0f:be:c7:57:0f:3f:3e:22:
         db:62:a0:ba:58:03:17:85:92:91:e5:b3:b2:38:89:f4:f2:72:
         1e:42:2c:e9:0a:38:2c:61:25:f3:c4:ab:60:b6:4e:71:e0:ae:
         e8:51:da:88:a9:85:d8:cf:88:6b:17:20:93:89:2c:a3:f9:42:
         7b:96:49:0d:9a:50:cc:3a:4b:e6:a4:29:fc:62:cf:4c:6c:ad:
         dc:a8:85:97:c4:60:3a:7e:ba:eb:11:a1:9f:0f:8b:52:44:3b:
         16:d8:5d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:07 2024 by rpki-client on console-fra.rpki-client.org