Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/47EEF6A24CB711EE86F6DB1CC4F9AE02.roa
File:                     47EEF6A24CB711EE86F6DB1CC4F9AE02.roa (raw, json)
Hash identifier:          BgVlg8JMnJl1AN4y1835aN7thI04/zmbyhw1v4lrVWI=
Subject key identifier:   42:B3:E8:8D:87:8D:43:97:62:5E:40:B1:EA:2F:48:A8:68:DF:2D:A0
Certificate issuer:       /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial:       1AF1
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/47EEF6A24CB711EE86F6DB1CC4F9AE02.roa
Signing time:             Thu 02 May 2024 17:04:31 +0000
ROA not before:           Thu 02 May 2024 17:04:31 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138985
IP address blocks:        116.206.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
                          rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6897 (0x1af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
        Validity
            Not Before: May  2 17:04:31 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6633c79e-f93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:ea:6d:c6:79:84:f5:21:aa:7d:a5:81:d0:
                    5b:99:a1:06:88:b2:0d:ea:3d:36:79:f4:a8:15:03:
                    f0:e7:d2:ae:98:20:b1:2f:05:41:58:8c:89:50:fb:
                    00:45:de:27:b8:e9:97:fc:90:c0:17:93:27:d4:5e:
                    5b:49:de:6f:c9:06:7d:6a:13:c5:60:14:e1:3b:f5:
                    2f:b6:18:33:6c:a7:7e:7e:89:69:99:0a:32:a3:0d:
                    35:6d:a8:1b:0b:25:93:c5:30:f7:c8:62:08:33:40:
                    98:68:f8:c7:b1:40:24:b2:03:17:4b:e9:29:4c:78:
                    29:16:67:c4:dc:db:8d:23:4c:58:69:7c:89:8a:58:
                    cb:eb:c9:89:48:f6:2e:10:ce:7a:50:88:07:62:52:
                    dd:4c:e7:55:ae:4d:69:77:29:82:e1:35:37:c4:38:
                    e4:4b:55:5e:77:80:a6:b2:89:f7:11:82:6c:b2:2b:
                    84:b0:15:8e:36:07:e1:bc:b3:86:52:b2:71:90:92:
                    ba:ea:23:b5:2c:f2:60:d4:8b:02:f1:81:11:13:3e:
                    9f:df:60:8b:54:43:9e:01:dc:6b:ef:09:42:57:05:
                    a8:2e:06:e9:83:19:0a:f2:71:17:d9:33:49:64:84:
                    1e:b1:95:04:7f:bb:71:f7:25:81:9e:28:e0:6f:2c:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B3:E8:8D:87:8D:43:97:62:5E:40:B1:EA:2F:48:A8:68:DF:2D:A0
            X509v3 Authority Key Identifier:
                keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/47EEF6A24CB711EE86F6DB1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:ff:77:04:f8:e1:05:0a:7e:f0:82:ec:fe:67:8e:c9:25:0e:
         b4:2c:a1:e2:4e:09:22:44:80:35:1b:d6:11:db:49:0e:72:74:
         71:28:78:1d:fe:32:98:f7:6a:d6:ff:95:a2:6c:06:c5:a5:a3:
         43:fd:74:9a:2d:1d:08:e9:e1:6a:78:16:9c:28:0e:35:10:2c:
         cb:4b:f4:d0:c4:b4:d9:0a:06:36:c9:4c:60:39:33:31:25:0f:
         91:52:35:4c:fb:45:7d:bc:46:b3:78:6a:0e:e0:d2:e0:b9:f9:
         ec:55:df:08:71:8b:db:47:1e:9e:f3:b0:3f:ad:fb:21:a0:2a:
         29:fa:c5:89:85:b3:6f:fd:6f:75:63:c0:9e:82:fc:3d:20:b0:
         e2:46:86:0b:12:74:a8:9a:62:bf:f7:b1:95:7f:f0:ba:86:74:
         0e:5f:72:28:96:d2:e1:3b:d3:9b:3c:8d:46:82:83:42:75:41:
         38:02:65:69:25:ce:df:e5:5c:11:e7:06:20:bf:78:02:ff:a8:
         f5:cd:54:86:24:21:41:e3:4d:4e:0a:d1:8b:f6:e1:dc:2e:ac:
         a3:25:40:74:c9:af:d6:a0:60:ba:85:28:b3:ca:b0:34:82:47:
         8a:f2:ec:32:cd:63:a2:52:bf:86:45:ca:af:ef:da:3b:7b:36:
         fe:6a:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org