Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
File:                     F0B154E6085A11EBA6864D71C4F9AE02.roa (raw, json)
Hash identifier:          lS99nYEJf47mH+uz3vQLejaGLFETexj9dK3L1OTP7SM=
Subject key identifier:   C8:DE:8E:8D:36:A8:DC:1D:A6:82:F9:A2:F5:64:6A:93:11:51:1A:B6
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       06FE
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
Signing time:             Sat 04 May 2024 23:31:48 +0000
ROA not before:           Sat 04 May 2024 23:31:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7545
IP address blocks:        58.6.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: May  4 23:31:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6636c563-a2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:2a:30:53:7f:08:ab:ba:8b:57:c8:d8:ed:
                    f6:b2:6c:29:5a:39:64:6b:e9:db:9f:cc:72:e8:bf:
                    2d:2d:f0:8f:a1:2d:46:80:14:cd:6e:89:8a:a8:e7:
                    e6:3f:a6:be:e0:9c:30:6a:52:b2:5c:36:64:16:e5:
                    28:be:11:7c:ca:92:42:04:e2:57:3b:84:5a:00:33:
                    80:3c:17:8f:50:8f:ff:37:43:3e:9e:85:05:36:ef:
                    09:6c:b2:b5:57:19:87:77:80:a2:72:4e:ff:e3:4e:
                    a2:dd:a7:f2:8b:95:b5:35:6f:5e:a0:d4:f6:41:b4:
                    2d:04:89:d8:21:29:5a:ca:c7:5c:2b:94:79:5f:f8:
                    ad:41:ca:59:61:0f:06:03:dd:b5:44:51:98:ef:3d:
                    6e:30:01:0c:3e:41:1e:a9:cf:24:9c:ea:ad:b0:fd:
                    9c:f1:8b:67:47:04:4c:25:86:64:01:60:e3:91:c2:
                    eb:25:18:7a:77:ec:f7:de:8f:c4:e0:bd:d2:b2:c0:
                    f4:ba:e1:2a:d7:a3:e6:95:c8:1c:2d:1a:3f:b8:ad:
                    ab:6d:21:4d:59:50:72:d6:b3:a0:c1:b4:0b:04:8a:
                    b8:6d:1e:81:37:d9:5e:2e:22:b2:64:4f:43:a7:88:
                    ac:4f:be:15:72:f0:37:5b:6d:7a:9f:d0:aa:09:f9:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:8E:8D:36:A8:DC:1D:A6:82:F9:A2:F5:64:6A:93:11:51:1A:B6
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/F0B154E6085A11EBA6864D71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.6.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f4:c6:3e:83:cb:b2:3f:d3:cb:3a:cf:5b:14:28:ee:4f:21:
         18:02:eb:17:e5:7b:fa:71:08:77:cc:a6:67:89:de:04:53:f3:
         aa:e6:cf:3e:71:39:6f:3d:0f:48:7b:e6:c0:98:b5:2e:a9:5a:
         af:7d:3e:85:36:c8:51:f7:b1:a6:d1:89:94:7b:68:9d:08:3d:
         25:b8:22:47:74:9b:4a:56:45:0e:07:ee:47:d2:0b:c9:73:94:
         b8:f6:e0:e8:ed:fa:b5:63:b6:5c:d8:25:76:31:56:ee:8c:72:
         96:cf:b1:23:5d:19:d2:de:a4:39:fc:4f:8c:c8:e9:fc:d5:79:
         36:d9:8d:d5:a9:87:06:a2:fa:02:af:c9:64:08:c8:be:07:e2:
         53:78:b4:c6:1b:6b:85:34:39:f0:5c:4d:0f:d6:56:82:bb:09:
         ba:77:25:57:86:c0:34:c9:3d:95:67:4a:ea:c7:fe:bd:50:74:
         b3:7e:c6:ad:b8:d8:81:e3:b3:54:86:44:c6:6f:ea:34:f5:e1:
         cb:62:85:25:63:8f:e7:8e:f7:dd:23:ae:ae:23:4b:7e:1a:c8:
         e1:99:e4:8b:68:04:fe:24:23:31:64:73:1f:f3:1a:f4:82:fa:
         7a:8f:3d:74:00:a3:06:e0:3f:db:1b:71:a0:e9:4f:3d:0e:8f:
         7e:92:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org