Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/A80B40921A4211EE83C49C1CC4F9AE02.roa
File:                     A80B40921A4211EE83C49C1CC4F9AE02.roa (raw, json)
Hash identifier:          WfFbSIs229LsheBXvRJJsQtKrDoyp4qPEJeE0KfuasM=
Subject key identifier:   3A:58:C9:92:9C:7F:50:DD:7C:E6:E3:A8:F3:74:F2:0F:53:30:DB:62
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       028D
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/A80B40921A4211EE83C49C1CC4F9AE02.roa
Signing time:             Sat 11 May 2024 04:10:42 +0000
ROA not before:           Sat 11 May 2024 04:10:42 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     134428
IP address blocks:        157.119.21.0/24 maxlen: 24
                          157.119.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: May 11 04:10:42 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=663eefc2-955d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:0b:c6:8f:43:8a:92:d1:3c:f5:ba:eb:8a:
                    7b:26:13:4e:f2:58:74:0c:72:32:55:83:df:ff:cd:
                    03:46:db:d0:32:57:d6:1e:f2:f9:77:15:00:50:c5:
                    ec:b9:3b:8c:5e:3f:7d:ef:d1:a5:61:f4:e5:e7:48:
                    22:af:90:ed:9c:e1:ea:80:49:aa:9d:b3:34:19:90:
                    00:b1:d9:7d:05:d3:33:7a:55:9a:cf:cd:c6:dc:53:
                    fb:c4:15:01:c7:a4:82:07:8f:c7:5b:d1:2b:d0:c8:
                    e4:92:d0:c5:ee:f3:be:67:6f:48:46:51:7b:b8:dc:
                    a7:91:f4:07:56:45:f4:b1:df:04:b1:2c:98:02:1b:
                    32:ad:39:35:3d:b8:12:0d:bc:6e:cd:38:35:14:c2:
                    e5:29:7e:a8:1a:c9:29:f8:f4:10:2d:7b:51:ed:57:
                    f4:20:01:d6:f4:e9:a5:0d:de:c6:00:c5:fe:56:f9:
                    eb:da:fe:e1:11:e1:78:19:24:3c:0e:dc:33:5b:c4:
                    c0:2f:1e:27:d0:48:f6:be:06:ef:b5:5e:0f:16:71:
                    6a:51:fe:b4:6a:47:f7:d3:16:c4:60:74:09:a6:49:
                    c4:0c:7c:c1:25:62:c0:21:26:4d:f7:82:1e:00:1c:
                    8c:38:78:2a:86:2f:b2:16:7c:71:6a:0f:29:b7:47:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:58:C9:92:9C:7F:50:DD:7C:E6:E3:A8:F3:74:F2:0F:53:30:DB:62
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/A80B40921A4211EE83C49C1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.21.0-157.119.22.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:5f:b8:04:e8:c1:68:ad:2f:23:9b:2e:9f:50:67:d2:9d:
         a6:ad:cf:15:df:5e:12:f3:ea:27:86:ad:4d:f0:cd:b0:14:04:
         8d:82:3c:1f:f5:7c:ff:37:5d:6f:64:0f:f9:bf:91:f4:e1:48:
         66:23:36:7c:57:b3:f9:7f:64:eb:a1:b7:7c:3a:9f:ad:c6:43:
         08:13:f0:71:f7:1f:76:8a:db:c9:2d:9e:15:0e:9e:2c:95:73:
         d6:dc:68:c8:fa:18:18:9b:57:0f:c7:63:76:bf:21:f2:91:0e:
         03:0a:ac:97:3e:f0:ff:0a:81:4c:2b:97:dc:a6:90:06:fe:40:
         1c:dd:05:5c:d7:f9:58:fa:bc:ce:d9:3b:34:b9:08:05:6e:f4:
         c3:e5:6f:2b:b8:0e:81:33:87:68:d2:39:24:02:5f:c9:bb:41:
         44:1e:3b:3b:78:21:3e:37:dd:c2:b5:4f:16:f2:7d:8a:35:27:
         c5:5f:64:09:98:bb:45:04:b5:09:07:35:67:35:6f:69:73:19:
         74:19:74:74:e8:05:15:ca:6a:23:58:da:8f:59:72:8a:50:b7:
         69:b0:15:b9:6b:83:81:08:20:60:1a:57:22:0e:b7:ac:41:d1:
         3c:ed:26:b5:aa:a7:fd:b4:08:ab:41:6c:34:82:eb:69:60:19:
         2c:ad:e9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:20 2024 by rpki-client on console-fra.rpki-client.org