Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa
File:                     61E919B60C8D11EFA97EC809C4F9AE02.roa (raw, json)
Hash identifier:          6ePvq7R+VevTRBijwhsSbY7s0xfysrtCLdJS1Hrf1fw=
Subject key identifier:   A8:9B:1A:D8:18:DF:F6:5F:4F:DF:84:0F:E8:23:A3:25:D7:45:F0:3F
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       125B
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa
Signing time:             Sat 10 Aug 2024 17:44:46 +0000
ROA not before:           Sat 10 Aug 2024 17:44:46 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136169
IP address blocks:        203.117.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4699 (0x125b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 10 17:44:46 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66b7a70e-171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:bb:e7:b6:43:2a:12:6a:d8:1b:fb:b7:6b:
                    8b:1c:20:b5:a6:32:38:b8:3e:84:18:96:8c:47:cd:
                    00:4c:7b:0d:be:1f:55:25:ab:aa:1c:ed:20:e4:ea:
                    23:90:ee:8f:77:93:84:d7:8e:fd:9d:4a:78:98:6f:
                    36:b1:02:ff:bb:4c:ad:b3:d6:f8:28:84:06:82:55:
                    64:59:53:b5:3d:d2:9e:36:0a:23:26:da:d9:e4:2a:
                    ac:cc:df:b0:e4:a8:39:8a:5b:26:a8:da:88:a2:32:
                    5d:f9:6c:1f:56:a8:39:e2:a8:b1:26:16:4f:8d:9a:
                    7e:dc:36:cf:6a:87:35:e6:79:bf:4b:c0:da:c3:f8:
                    56:47:3f:5b:f7:ff:70:5c:86:6b:51:09:d2:45:20:
                    47:9a:61:20:ae:48:be:c2:76:7d:84:81:d0:4a:60:
                    8c:5f:f6:b6:2c:9e:5d:46:9c:03:02:19:e0:53:aa:
                    3b:09:ec:7a:26:d5:00:05:99:d2:81:4a:3e:ff:fb:
                    64:d7:73:07:48:37:fd:2c:93:48:ad:59:ea:72:d4:
                    a9:82:e4:cc:b1:1d:dd:c2:32:f4:ff:5c:b8:c3:14:
                    a4:3d:e9:09:d1:2a:85:c6:f6:bb:b5:75:8e:36:0f:
                    b4:46:20:8c:ee:50:c0:1f:b2:7d:bd:68:59:f4:f5:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:1A:D8:18:DF:F6:5F:4F:DF:84:0F:E8:23:A3:25:D7:45:F0:3F
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.117.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:d2:c5:00:6e:7b:31:bc:47:b6:49:5f:2d:19:1a:52:7e:
         fe:12:fe:e6:41:08:4d:91:be:2d:3c:f6:55:0c:ac:bd:9d:88:
         65:75:06:10:ea:d5:12:41:d9:be:06:73:7c:03:db:7c:fb:34:
         b8:b4:2d:79:e3:39:a1:52:47:24:c7:e9:56:66:8c:ca:c6:c8:
         7a:ae:72:08:24:2c:fd:a5:1d:e9:41:fa:30:c5:be:04:98:57:
         3b:f6:8e:3a:ce:6d:59:f8:ac:d2:0d:a9:a0:19:39:0e:ee:e5:
         2c:67:b3:25:ce:c8:a2:93:13:cc:1b:81:ed:35:1e:86:bf:35:
         e6:37:59:26:b1:96:1d:2b:6c:69:42:63:1c:95:a2:60:18:dc:
         7e:90:b9:b3:0f:fc:80:55:a7:34:99:49:c5:26:fc:db:57:a6:
         eb:3e:a2:46:6c:f7:fd:66:a5:54:53:0b:5e:a4:35:53:b6:0b:
         a3:52:fc:ad:00:a0:57:8f:ff:a4:e5:1a:a2:95:89:ed:c8:49:
         3c:8a:47:72:b4:80:dc:38:51:16:3d:3f:4d:30:48:66:a8:1f:
         09:4b:b8:c7:6d:65:87:87:52:f3:a8:0d:d9:59:ea:ab:75:5e:
         bd:ee:7f:a6:04:73:1c:ea:fd:81:b7:f8:ee:54:ed:af:88:bd:
         11:57:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:51 2024 by rpki-client on console-fra.rpki-client.org