Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5B7026601E4E11EFB78F797EC4F9AE02.roa
File:                     5B7026601E4E11EFB78F797EC4F9AE02.roa (raw, json)
Hash identifier:          VkbpTl5R5Blk8+YgCnQAnOeLQzh2Qr/I2woJkizH8mg=
Subject key identifier:   CA:AD:39:8F:7B:4A:41:B2:D0:41:47:23:E8:9A:30:9D:FF:EC:3D:71
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       359F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5B7026601E4E11EFB78F797EC4F9AE02.roa
Signing time:             Thu 30 May 2024 06:32:17 +0000
ROA not before:           Thu 30 May 2024 06:32:17 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     152700
IP address blocks:        124.66.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 14:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13727 (0x359f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 30 06:32:17 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=66581d70-e604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:3c:85:5e:75:69:ad:cc:d8:4b:d4:be:9a:
                    d1:b7:53:db:dd:48:48:08:c7:7f:e9:85:3a:f8:9d:
                    ab:3e:56:21:b0:0e:da:1c:28:26:79:03:3a:66:46:
                    5e:c7:a3:20:93:9f:78:43:94:68:e6:44:5a:e9:e1:
                    97:bb:2b:b8:c6:3b:7d:1b:1e:58:6b:7b:bf:1f:93:
                    c7:12:ba:b2:44:29:a7:f1:61:35:b5:b2:5e:c7:a8:
                    d4:2e:40:7d:d6:54:dd:4b:5c:83:6b:e3:75:56:30:
                    c2:81:fb:84:c8:13:f5:d0:97:7d:32:55:11:d6:d9:
                    47:35:e5:d7:e3:e3:7e:8e:e5:21:33:8e:81:89:89:
                    73:93:1a:79:2d:91:6b:84:ca:7c:61:20:1d:98:61:
                    52:ab:01:08:fe:53:ae:ef:ac:0b:b1:93:c2:0b:f9:
                    23:53:26:6b:c4:e8:6f:fb:ef:13:3f:17:15:d3:58:
                    4a:00:a5:04:a8:43:44:68:7c:77:b7:98:37:ba:ad:
                    3e:9a:28:41:55:71:97:12:c1:79:dd:26:6c:54:40:
                    d2:5f:5e:ae:69:09:5b:70:a2:49:ae:af:75:f8:aa:
                    94:31:f2:a1:9b:ae:cc:87:52:30:56:18:53:10:55:
                    b1:c0:5b:7a:aa:34:98:9a:fa:4f:67:8a:b0:ca:63:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:39:8F:7B:4A:41:B2:D0:41:47:23:E8:9A:30:9D:FF:EC:3D:71
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5B7026601E4E11EFB78F797EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:52:40:9a:37:45:d9:79:b7:93:a5:28:e6:63:7f:72:61:
         b4:71:23:1e:06:42:fe:ed:32:eb:1d:13:88:a8:ee:1b:19:f0:
         7e:37:4d:fe:ad:6b:b9:00:0e:ec:55:dc:4f:05:bf:37:a5:df:
         28:44:98:05:2f:94:99:26:da:af:9f:41:40:4f:17:72:75:f1:
         38:8a:51:22:88:74:27:ef:61:ec:df:fb:26:83:82:dd:8b:82:
         58:09:0f:20:2a:e3:40:11:c2:a9:18:bb:0c:8c:52:83:b2:b1:
         03:3a:fe:5f:3f:af:40:a5:2b:ed:16:2b:20:04:c6:c9:65:92:
         e4:95:00:04:c2:0c:79:5f:e4:9e:a0:80:47:72:eb:0a:a6:84:
         6e:90:69:62:02:0d:fa:5f:84:29:1d:c4:d7:90:32:fd:21:a5:
         52:8c:5f:03:f3:16:4e:46:b0:49:f4:50:7e:cf:b9:43:91:e8:
         5a:66:b8:f6:de:46:db:6f:f6:f2:fe:44:07:b1:16:14:88:24:
         1d:44:a9:ed:89:7a:49:69:64:dd:f7:b1:53:eb:3e:c2:3d:5f:
         ff:8d:33:d3:75:03:84:ad:2f:88:73:30:a7:79:de:43:54:0a:
         bd:a0:52:39:99:69:fd:9e:48:e1:4a:7a:60:dd:08:97:e1:95:
         28:fd:c6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 16:02:21 2024 by rpki-client on console-fra.rpki-client.org