Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
File:                     8BCB105015EA11EC86834E2FC4F9AE02.roa (raw, json)
Hash identifier:          OwotHwrsvHfL9c2xwdii3HVlS9hQiSq8fqoBsWtp67U=
Subject key identifier:   AC:4D:30:B6:73:BA:3A:2A:85:32:26:DC:C3:2C:88:81:58:20:81:B4
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       0F50
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
Signing time:             Thu 22 Aug 2024 15:52:38 +0000
ROA not before:           Thu 22 Aug 2024 15:52:38 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     56099
IP address blocks:        146.88.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3920 (0xf50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Aug 22 15:52:38 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c75ec5-0655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:f1:a7:7f:e3:34:ac:02:7c:bb:4a:e5:f8:
                    11:84:55:82:a7:f7:a0:c0:d7:a6:a4:62:b3:3b:b5:
                    97:59:59:37:5b:61:f5:26:f9:9f:4f:25:a9:97:1a:
                    31:8e:b6:2b:92:3f:3c:8b:27:0c:87:9f:3b:e6:8a:
                    5f:2d:e7:0e:85:03:ac:45:47:eb:57:30:84:df:3a:
                    bc:f2:f9:ae:58:bd:f6:8b:a0:51:a5:3f:19:27:71:
                    3b:30:04:44:b1:e2:29:52:f7:0a:2c:7c:e8:4c:0e:
                    25:53:36:93:4d:db:b0:59:33:11:b3:9d:ca:f6:75:
                    fb:d0:c4:05:df:1a:1c:21:65:4e:8a:a6:6c:3c:b4:
                    27:ff:37:6c:bd:3c:98:11:a0:8a:91:e6:80:ba:55:
                    db:0d:87:82:57:08:46:68:cd:b7:e4:3a:d0:3b:cd:
                    71:e1:9b:ef:d0:22:38:3c:aa:cc:f3:ad:1a:f9:8a:
                    54:b3:c3:83:9c:b6:9c:44:80:e9:62:9b:24:71:45:
                    64:ab:24:b9:30:a5:f0:7e:b4:78:e8:5c:2b:be:8e:
                    9c:61:ba:23:3e:74:20:7f:4e:2f:e7:d9:e1:81:ae:
                    5c:d9:bd:5e:f9:55:fa:fa:6a:f3:b8:aa:f9:b4:ea:
                    7c:21:8d:47:df:51:28:84:f8:2a:b0:1c:54:96:a7:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:30:B6:73:BA:3A:2A:85:32:26:DC:C3:2C:88:81:58:20:81:B4
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/8BCB105015EA11EC86834E2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:70:9c:a5:f0:ef:a9:67:96:c4:01:ac:d0:ad:01:da:50:
         73:7f:27:b9:5a:ba:70:0b:fa:b4:20:2f:b2:d4:9e:37:06:1c:
         43:54:e2:ba:cd:b9:1a:e2:e1:54:71:8b:4e:f0:e1:c3:4c:bb:
         88:55:80:80:40:7c:32:72:16:59:9f:40:64:38:0e:05:4a:3e:
         38:3b:75:de:02:c3:6f:15:c6:b9:f4:97:48:8e:c9:0b:89:15:
         84:cf:99:11:f3:8b:b5:1f:33:6f:34:07:ba:dc:18:f8:69:31:
         ed:6e:c0:cb:dc:04:3e:1d:58:e1:80:6d:df:39:98:da:a2:de:
         57:8e:ac:ad:1e:77:61:4a:f2:4e:eb:fa:8a:40:45:49:dc:20:
         de:9d:34:ba:0c:e2:4d:e8:0f:76:f0:e2:8e:98:4d:0b:39:f5:
         2a:05:62:37:59:ad:8c:7c:ee:20:aa:fd:8f:70:7c:e5:68:34:
         7f:86:af:98:08:2d:9d:c1:2a:db:c0:5a:85:7a:fc:ad:8b:31:
         79:3d:50:9b:ed:11:be:a9:92:11:21:6e:81:93:53:4e:51:e3:
         b8:57:ce:76:17:01:b0:c3:93:32:5b:9b:e6:a0:13:ef:2a:ca:
         bd:fb:d3:81:4a:d5:0e:86:ac:b5:2c:2d:99:ee:dd:34:a3:76:
         3d:88:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org