Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
File:                     0F123208FBA911EEA155441FC4F9AE02.roa (raw, json)
Hash identifier:          FXcLUM7nDChteXY/er5AHWxekNSMvnuB0D3IzRIKq1M=
Subject key identifier:   8B:50:90:69:55:72:B9:43:7E:FF:54:6C:84:76:23:B6:BF:25:EC:7F
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       34A7
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
Signing time:             Tue 16 Apr 2024 04:23:22 +0000
ROA not before:           Tue 16 Apr 2024 04:23:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     151872
IP address blocks:        117.121.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 14:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13479 (0x34a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Apr 16 04:23:22 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=661dfd39-73aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:ea:c7:42:38:a9:5f:12:eb:db:1a:96:c7:
                    e0:e2:b9:c0:38:12:07:18:b8:40:2b:18:82:ca:7e:
                    d3:a2:93:0c:af:17:8c:85:a0:b1:cf:10:66:ae:59:
                    b8:8b:b7:3f:52:d7:5e:23:1f:6d:39:11:0b:ad:7c:
                    81:5c:f5:de:19:eb:5c:70:95:5f:ec:e1:d7:97:ea:
                    7f:88:1e:a1:b7:1f:81:f0:00:36:11:61:37:f8:33:
                    ad:97:82:68:c1:14:16:a2:03:64:4b:04:03:ef:c9:
                    65:9e:88:7b:f3:76:68:d2:84:7d:70:cf:c1:69:c5:
                    d2:a0:37:8c:a0:65:e9:44:28:6e:82:81:a7:28:94:
                    29:d2:b0:04:43:62:fa:72:f6:3c:e1:8c:2b:da:6b:
                    01:86:8b:c4:fb:a8:ef:a2:fe:65:ad:92:f9:d6:a0:
                    71:5a:29:b8:61:fd:c8:3f:b4:57:31:59:43:e4:69:
                    9f:70:5b:6f:c1:e3:40:e4:dc:f6:97:63:0f:03:bf:
                    75:3c:f7:b4:28:cf:4e:18:78:7c:bc:c1:0c:b0:9c:
                    35:23:0f:8e:62:13:82:78:28:61:f8:26:23:e7:7b:
                    12:17:a1:33:1e:f5:6c:e2:b0:31:90:73:d2:05:59:
                    55:1c:f2:52:43:c5:58:b9:eb:e3:99:c2:a7:48:9d:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:90:69:55:72:B9:43:7E:FF:54:6C:84:76:23:B6:BF:25:EC:7F
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/0F123208FBA911EEA155441FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.121.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:4c:63:c4:38:c8:94:7f:b0:6f:3d:c9:e6:fe:79:ca:07:
         84:ba:1c:a7:ad:a4:23:72:af:29:4c:50:df:62:4b:df:43:2c:
         c1:86:db:6d:b7:7e:0b:8d:2a:64:99:06:03:ee:4c:09:6a:12:
         5d:47:17:cf:ac:f3:36:39:f4:85:56:ab:49:f1:7f:53:11:11:
         c9:8f:27:6b:f4:5e:4c:4b:c9:56:24:55:ed:6d:47:1e:82:70:
         7b:44:2f:11:bf:5a:a8:74:ef:eb:c1:b7:bf:17:14:62:e9:71:
         c6:f5:ba:8d:31:ca:ee:43:07:e9:32:cf:29:f9:06:15:f2:42:
         80:05:6a:4b:39:ac:fb:ee:bc:63:89:fe:6a:56:61:60:03:94:
         98:3d:7c:21:c4:5b:0d:a8:9c:85:47:d2:84:7e:12:b4:b4:e6:
         cc:65:e1:1a:ae:b6:bf:18:fc:c1:ac:80:73:68:ce:62:29:f1:
         8f:b4:d4:af:11:0d:67:a2:df:d7:eb:32:a7:14:9e:4a:c8:54:
         d1:80:fe:98:1b:eb:ff:c9:a9:ae:3f:80:56:52:6b:fc:48:aa:
         94:ac:d0:61:84:de:21:3a:14:77:8e:d3:53:40:b8:83:20:80:
         2e:e9:2e:42:af:00:d6:e9:18:43:14:86:80:c7:3b:7b:a0:84:
         b3:0c:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:53 2024 by rpki-client on console-ams.rpki-client.org