Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
File:                     586B5D9ED9F811E9A6874F46C4F9AE02.roa (raw, json)
Hash identifier:          GEK6jcGIe//8LlsnmmOKojpjhgPgAdo098fH+Bv7usk=
Subject key identifier:   58:C9:70:90:79:97:40:01:22:14:21:A4:54:B1:74:06:CE:BE:6B:41
Certificate issuer:       /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial:       33E8
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
Signing time:             Sat 02 Mar 2024 15:21:02 +0000
ROA not before:           Sat 02 Mar 2024 15:21:02 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     45642
IP address blocks:        58.82.178.0/24 maxlen: 24
                          218.100.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13288 (0x33e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
        Validity
            Not Before: Mar  2 15:21:02 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e343dd-ece7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:66:e8:70:58:3f:00:02:71:3c:a4:9f:ea:
                    b0:26:45:06:e8:3b:2f:6f:f1:00:2c:80:7d:f3:da:
                    e9:06:7d:7b:32:30:b4:67:64:a9:bf:a5:ea:39:91:
                    f8:20:fa:94:33:4b:f1:43:25:ae:83:df:06:d0:2f:
                    9c:3c:ef:65:9c:bf:c2:28:d9:d1:4c:b8:4e:39:77:
                    80:35:e2:5f:36:49:34:05:a7:67:5c:ca:f4:c9:fb:
                    ae:ef:e0:31:6f:75:eb:bb:b4:37:62:be:5d:ad:4c:
                    c5:81:1e:98:f4:96:0f:0c:e3:71:b1:a7:d3:ce:c3:
                    28:d2:bf:a1:09:f3:64:53:4f:75:89:4c:23:8b:91:
                    67:6c:2c:8b:9d:d5:cc:68:3f:19:27:0e:4d:f1:ad:
                    a0:d9:29:ac:4a:a7:5f:c7:fe:de:92:21:ca:15:17:
                    51:0d:d8:ac:25:ae:0a:12:c4:74:27:1b:c9:b6:c7:
                    ab:de:e4:a8:5e:aa:81:44:96:9e:49:8a:b9:d1:da:
                    ab:81:9a:97:d1:e3:a8:a4:e2:db:ef:ec:69:f5:48:
                    b5:82:6f:96:1e:1e:a9:1e:84:ae:11:7b:9e:ce:97:
                    09:08:e1:19:fa:21:5a:84:9e:48:ab:bb:b3:b2:ee:
                    2f:bc:8d:39:62:dd:01:d5:09:cb:f8:82:28:88:27:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C9:70:90:79:97:40:01:22:14:21:A4:54:B1:74:06:CE:BE:6B:41
            X509v3 Authority Key Identifier:
                keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/586B5D9ED9F811E9A6874F46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.82.178.0/24
                  218.100.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:a7:fc:bc:5a:ad:b5:81:6d:27:20:ab:b1:aa:f7:34:48:0d:
         bd:06:68:23:80:20:33:2f:43:56:b5:9f:a8:3b:54:6a:91:b4:
         5e:35:9a:c9:59:18:94:21:45:25:e2:fc:1f:dc:ad:4d:ec:77:
         57:61:6e:56:47:58:cd:68:3e:11:56:b7:89:53:b1:37:aa:a0:
         09:ae:6c:e0:ea:3f:f1:c1:8b:b5:b0:12:8a:26:df:7a:92:f6:
         ae:5b:29:1c:85:e3:54:00:48:ee:a1:bb:9b:60:65:68:08:4e:
         d5:66:4e:ce:01:78:0b:e2:68:d9:8d:83:b6:8e:52:9c:0c:a8:
         9f:f8:19:02:97:ea:ab:18:4d:11:9d:3f:96:3b:d7:b9:8e:6f:
         52:8d:de:8b:60:25:ad:22:b8:c6:d9:d0:35:5a:f8:cb:19:b4:
         fc:1a:36:e2:e8:fc:76:c2:36:65:2d:98:61:f8:c5:b9:30:66:
         99:79:7c:a5:db:e0:b9:35:ab:7d:6c:29:6b:b8:e2:00:30:49:
         f3:ef:3b:b7:9a:31:8c:3c:f2:a6:5e:43:43:15:db:7b:e6:7f:
         31:c6:1a:e5:10:de:28:cd:42:8e:0c:ee:d6:df:5e:42:7f:ca:
         52:d4:d0:5f:b9:3d:94:a3:3e:28:b2:3f:77:b0:28:44:53:0b:
         5c:aa:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org