Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa
File:                     A3744A28149A11EDB9CF2F70C4F9AE02.roa (raw, json)
Hash identifier:          owavO0XDzj500YGpyqbmjhYipEKAfrWBHBWdBUgrtlU=
Subject key identifier:   8B:A3:34:EF:5C:06:CD:E6:DB:70:7F:B8:E4:9C:C2:D2:F4:E4:9F:BC
Certificate issuer:       /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
Certificate serial:       06B5
Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa
Signing time:             Mon 06 May 2024 16:53:51 +0000
ROA not before:           Mon 06 May 2024 16:53:51 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     132819
IP address blocks:        185.251.172.0/24 maxlen: 24
                          185.251.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032
        Validity
            Not Before: May  6 16:53:51 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66390b1e-83a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:31:0e:e7:a2:d8:bd:4f:63:da:04:ac:7c:
                    11:05:be:0c:a0:b5:a9:f6:af:d3:cc:3b:b0:ad:cd:
                    75:ed:9e:f0:ad:77:1b:e3:bb:69:df:1d:c3:8d:fb:
                    88:57:af:8c:3b:d2:17:30:2a:a7:51:a8:b7:a7:be:
                    3c:0b:d8:a2:92:a3:9e:23:f5:4c:00:cf:c8:eb:43:
                    2d:49:a9:5a:34:c2:84:ea:0c:c8:c1:55:e9:d9:88:
                    fc:fe:32:72:c2:f8:5e:a2:7c:21:c7:4b:cd:fc:13:
                    53:ed:60:de:ad:d4:67:78:3a:18:ce:a2:7a:1a:83:
                    e3:89:d7:8e:a1:1c:5c:f0:a2:f4:73:82:24:c6:79:
                    73:43:a5:21:70:fc:05:20:6c:19:20:e2:0c:1a:e1:
                    c9:ad:8b:be:c1:8c:95:87:57:96:18:8f:e8:3f:fa:
                    bd:b3:0c:9f:77:94:43:72:7a:b9:96:13:c7:96:73:
                    3c:48:95:5f:68:43:c2:d7:82:07:f0:b3:03:aa:b6:
                    c3:36:cd:11:3e:ce:38:92:f3:de:67:a8:41:4e:6b:
                    1c:95:9f:6b:5a:bc:96:13:66:77:61:bb:c0:e5:de:
                    1f:83:f7:b3:c3:62:83:dd:77:72:d9:8d:54:95:de:
                    82:95:86:4c:18:0b:18:e4:18:4b:9b:c4:99:e5:f3:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:34:EF:5C:06:CD:E6:DB:70:7F:B8:E4:9C:C2:D2:F4:E4:9F:BC
            X509v3 Authority Key Identifier:
                keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/A3744A28149A11EDB9CF2F70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:d3:c9:29:82:59:1d:49:d8:74:8a:28:e1:cb:d5:31:b7:6a:
         69:1b:3d:22:25:30:f2:c6:da:ed:fd:0c:f3:79:04:90:3e:c3:
         8b:7c:e2:eb:40:a1:33:55:ad:5a:67:02:e2:4d:b1:bd:27:a3:
         e0:e8:38:b2:94:43:02:3d:c6:78:10:13:d4:34:c5:2a:e9:75:
         16:ff:05:4a:85:25:30:b9:50:ea:05:7b:d5:52:a8:bb:43:4b:
         a6:33:fb:85:91:e4:36:df:57:f9:dd:36:df:18:7f:05:cd:b7:
         37:b0:bb:da:56:e3:0f:db:20:f1:90:9a:35:c9:17:99:d7:59:
         91:0a:32:0a:52:81:87:bb:60:3c:9e:c9:cf:a0:af:66:d8:b4:
         46:18:87:ed:fe:f4:cd:ef:77:72:f1:92:f3:26:15:a4:75:cf:
         c6:df:bd:12:d7:0d:32:95:79:14:12:ca:96:f5:f7:3d:af:e5:
         f4:4d:87:d2:03:33:9e:58:03:30:3a:de:94:fc:37:08:3e:44:
         15:a9:33:d4:3e:d3:66:dd:73:ef:05:82:e7:34:c1:10:90:e8:
         28:aa:ff:bb:4e:00:77:50:7a:ac:73:5c:aa:94:46:40:31:ff:
         a7:fa:f2:6e:3e:e2:a0:fa:c7:bc:82:c2:03:44:3f:79:d1:37:
         62:e4:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:09:17 2024 by rpki-client on console-ams.rpki-client.org