Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa
File:                     8EEE648AE63811EB91D48033C4F9AE02.roa (raw, json)
Hash identifier:          111OPhlzIppCmmUPC8h75s/hcIvEG2YmBXDNwGyQ9pc=
Subject key identifier:   38:3A:9D:AF:58:38:E9:65:CF:B9:46:91:68:3C:68:AE:5B:0F:68:E7
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       3381
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa
Signing time:             Tue 04 Jul 2023 14:40:14 +0000
ROA not before:           Tue 04 Jul 2023 14:40:14 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     17974
IP address blocks:        36.91.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 14:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13185 (0x3381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Jul  4 14:40:14 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64a42f4e-83f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:8d:57:4a:37:0a:38:9c:e7:06:9d:03:15:
                    32:55:63:4f:3b:55:50:a0:a7:08:b1:02:07:97:48:
                    98:a0:63:58:8b:4b:af:cd:8e:21:1a:70:da:bd:79:
                    04:38:cf:f0:d4:bd:bb:a4:eb:c0:8e:a3:9e:fe:9a:
                    e5:3a:81:ec:54:af:cf:7b:ac:de:cd:74:a4:40:0a:
                    45:1e:30:b6:97:b8:c1:4e:16:b9:4b:e0:79:7e:cd:
                    bf:c3:82:be:4b:26:6d:32:7f:1c:bb:c3:36:ea:52:
                    87:72:df:df:2e:54:08:c9:bf:4d:1b:83:0f:2b:1e:
                    d0:8d:28:0b:fc:86:87:d6:b3:35:7c:ce:9c:44:e4:
                    42:0c:20:fa:7c:ac:f2:bc:ae:4f:6f:42:ad:30:49:
                    d6:e8:80:bc:48:1c:7c:af:8e:12:6a:e9:d2:bb:5e:
                    db:37:53:51:09:54:dc:3c:a9:c7:ff:1e:03:36:6c:
                    4e:c1:49:14:fd:41:b4:5a:99:ec:ff:97:e8:99:55:
                    0f:de:9e:20:f2:cc:a7:a6:e3:bf:34:e1:73:36:c1:
                    4d:1a:d0:c7:e5:2a:1a:80:31:c8:2a:44:a0:d8:b4:
                    6a:c8:6a:55:da:b6:1b:a2:02:29:9c:fc:11:2f:4e:
                    ca:ea:ee:59:4f:5b:b4:49:eb:30:e6:4f:d5:9c:a3:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3A:9D:AF:58:38:E9:65:CF:B9:46:91:68:3C:68:AE:5B:0F:68:E7
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:69:e8:a3:5b:2a:a7:a9:4b:64:3d:bf:8b:20:18:93:87:ac:
         a2:ac:40:08:39:b8:ac:c9:98:49:43:15:e9:d5:67:35:59:ee:
         bb:8c:87:5f:e2:e0:60:70:a1:45:1e:fe:1e:34:4a:05:65:71:
         55:65:6e:90:aa:46:58:12:1e:93:f6:76:d6:8e:dc:3d:e6:eb:
         aa:39:27:3a:fc:e8:33:d6:24:42:70:ec:57:2a:28:3f:94:8e:
         ab:32:e8:e5:b2:57:e7:59:6a:bd:2d:cc:96:88:ed:b6:f2:54:
         e3:74:88:e2:f0:39:8e:65:8f:a8:8d:2d:13:9c:ae:dd:4d:24:
         bd:fb:d0:61:38:01:2a:f9:87:7e:f6:8f:bd:89:33:a0:35:d7:
         31:80:ff:87:f0:33:22:89:c6:69:92:13:19:9b:ff:2b:5b:cc:
         92:37:b0:44:9d:31:36:29:28:eb:62:52:2d:6d:2d:67:19:f2:
         62:b0:14:49:de:dc:5a:6f:27:3e:cd:d6:c3:6a:b0:78:c2:ae:
         f4:da:55:21:5c:46:af:90:86:0d:9e:7b:17:0b:21:3a:76:32:
         f0:bc:18:ac:50:ba:94:8d:34:8e:19:ec:c3:78:ad:9d:fc:24:
         cd:18:9b:ce:e7:19:a5:af:c6:89:74:65:30:6a:bd:f3:68:23:
         e5:d6:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:11:13 2024 by rpki-client on console-fra.rpki-client.org