Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/F2257AC0289011ED8AEEB43CC4F9AE02.roa
File:                     F2257AC0289011ED8AEEB43CC4F9AE02.roa (raw, json)
Hash identifier:          sKV2eGEext52b6NpcOslSejCbxrUp+YfCYflHj/DULw=
Subject key identifier:   EE:19:03:4B:C9:81:78:E9:AA:81:8A:25:53:96:37:ED:A6:1B:E3:9E
Certificate issuer:       /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
Certificate serial:       F3
Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/F2257AC0289011ED8AEEB43CC4F9AE02.roa
Signing time:             Thu 07 Sep 2023 03:53:57 +0000
ROA not before:           Thu 07 Sep 2023 03:53:57 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     19855
IP address blocks:        2400:7160:2000::/44 maxlen: 44
                          2400:7160:2020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl
                          rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E
        Validity
            Not Before: Sep  7 03:53:57 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64f94955-711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:10:ca:8a:6b:15:ec:76:cd:1a:49:0b:61:
                    c1:78:43:d4:be:b6:9b:84:35:17:83:82:13:21:d3:
                    9e:c4:1a:a4:05:60:fb:91:eb:55:66:57:9f:4c:8f:
                    a3:05:0a:f3:86:53:1d:61:c1:f2:01:ef:82:0c:8d:
                    4d:80:83:8e:80:a2:70:25:1e:84:62:08:fa:3f:42:
                    3b:d1:f0:c0:f7:71:cd:14:44:c3:5a:4b:43:6b:79:
                    4e:25:59:af:b9:6b:b9:ef:d7:4b:24:99:c0:29:c6:
                    51:3f:df:44:68:39:86:67:16:7b:8c:5a:27:91:a3:
                    d6:40:e9:65:78:56:a8:69:1b:dc:29:46:b5:59:4c:
                    cf:01:f4:6a:75:e5:01:7c:b1:b1:7e:15:9d:6a:56:
                    f2:a5:14:a0:0e:b5:6e:d9:49:31:89:db:cb:12:97:
                    eb:e9:1f:75:56:06:58:6a:b0:aa:09:06:02:87:e5:
                    56:2e:9a:4c:93:ac:3b:f1:b6:41:02:db:a5:30:80:
                    34:ad:5a:07:76:65:e1:4a:eb:63:80:9c:f7:e4:6a:
                    b9:e4:7d:75:26:19:8d:25:f1:34:79:dd:2f:c0:ed:
                    1f:80:c5:21:ef:a7:d4:81:ab:70:d0:8b:6c:b3:48:
                    3c:c2:89:b1:cb:76:cb:5c:20:31:36:96:8a:fc:76:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:03:4B:C9:81:78:E9:AA:81:8A:25:53:96:37:ED:A6:1B:E3:9E
            X509v3 Authority Key Identifier:
                keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/F2257AC0289011ED8AEEB43CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7160:2000::/44
                  2400:7160:2020::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:00:94:0d:3e:ec:69:c1:e8:a2:36:e5:f9:56:07:5d:0c:
         6e:35:bd:c7:52:73:b2:f9:0e:f7:a4:cf:78:29:fe:f7:da:b3:
         9b:30:35:bf:bb:4c:e8:41:e4:c2:b0:d1:1b:ae:15:32:34:1d:
         a1:d9:6f:56:e6:e6:5f:08:af:73:e3:14:90:2d:95:42:60:e0:
         74:84:08:44:fd:cf:26:e8:3c:f2:e8:fc:c3:90:3c:8b:27:37:
         45:32:58:1a:d8:3e:f0:dd:73:15:89:85:78:cf:c8:aa:34:ae:
         61:b5:01:63:12:ce:af:df:8a:67:bc:83:6e:f5:8a:a2:c4:73:
         e3:a6:e9:4f:95:77:be:a0:c5:04:13:1e:5a:11:da:33:38:7c:
         36:64:98:00:f5:a7:d8:91:40:ad:e6:28:3d:76:0d:08:3b:b6:
         a7:b5:6d:e9:71:8b:70:6f:ed:16:53:a8:88:18:ae:b9:b1:aa:
         09:ab:5b:10:0f:c1:aa:36:93:44:9a:a3:ae:00:12:7c:68:1f:
         b2:46:91:00:c2:38:24:15:82:77:08:f3:c2:b8:9b:7a:4f:25:
         57:db:3e:d8:11:57:90:af:21:4c:55:88:14:d5:45:34:8b:92:
         4d:c3:ab:34:a0:d6:31:e2:f9:50:a9:50:52:19:24:1f:43:58:
         f3:41:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:48:50 2024 by rpki-client on console-fra.rpki-client.org