Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
File:                     F060FF0E720D11EDA84BE02EC4F9AE02.roa (raw, json)
Hash identifier:          M/OwMpKUcDGJmYk2FMUB/neSb4EJEBEin020M2YnlkI=
Subject key identifier:   FB:9A:94:5C:35:D1:DA:0E:2C:EE:60:52:13:FC:0F:AB:FB:AF:D9:EB
Certificate issuer:       /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial:       F9
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
Signing time:             Mon 18 Mar 2024 04:57:00 +0000
ROA not before:           Mon 18 Mar 2024 04:57:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     8220
IP address blocks:        148.109.0.0/16 maxlen: 16
                          148.109.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
        Validity
            Not Before: Mar 18 04:57:00 2024 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=65f7c99c-bd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:73:05:fa:af:32:4a:ce:17:89:7c:51:6b:
                    1e:9b:4c:ce:4a:cb:47:d1:05:45:d0:15:c8:ed:07:
                    d5:a8:30:db:0f:34:34:82:60:68:45:25:c9:6d:e1:
                    eb:19:d6:2d:93:de:6a:bb:49:d8:6f:97:c8:29:58:
                    c8:3b:28:b0:db:07:77:a4:0f:77:9c:0a:23:5c:3e:
                    eb:c6:39:d9:c7:ca:91:cb:06:03:93:20:0c:e7:3a:
                    86:54:60:ce:a9:0a:c3:a7:7a:87:9a:4a:fe:d7:83:
                    31:1f:6a:f8:bd:05:40:de:e2:6a:81:62:76:1e:b5:
                    d5:04:30:de:3e:1e:95:d0:4e:6a:f9:e7:16:1a:84:
                    ca:35:02:ab:b5:a8:60:b2:43:0c:55:d5:c6:a3:a9:
                    04:fa:61:80:6d:58:0d:4f:17:da:4b:d3:63:cc:50:
                    4a:5d:ed:16:c1:54:d9:97:94:5e:ce:59:d0:32:35:
                    39:8f:81:b9:70:af:67:8a:b3:83:9e:1c:be:5a:cc:
                    00:59:22:ba:84:76:73:68:29:dd:29:0b:02:50:12:
                    d5:f6:37:1a:05:67:f0:ae:de:a8:30:44:3f:88:70:
                    82:dd:20:5a:d9:07:dd:4a:3d:19:5b:29:b3:93:f8:
                    86:d5:ef:06:97:b8:ee:ff:24:55:43:61:50:88:33:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9A:94:5C:35:D1:DA:0E:2C:EE:60:52:13:FC:0F:AB:FB:AF:D9:EB
            X509v3 Authority Key Identifier:
                keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:c4:91:52:03:3c:39:b6:0a:d3:fc:48:c9:72:26:55:3e:14:
         92:76:30:01:ef:9a:2e:bb:3e:a8:40:af:ca:a7:33:bd:76:72:
         87:d0:10:be:ee:03:5b:b4:4b:47:33:4d:08:69:ac:1b:b0:7e:
         e8:42:8d:1f:39:da:89:20:6f:11:df:f5:60:0b:09:9a:c8:0c:
         a7:cd:93:74:af:dc:af:26:db:0b:a2:e9:d4:b2:b0:c5:dd:f6:
         64:d1:20:ae:bd:d5:00:c8:0d:31:f7:ae:c3:02:56:8f:3f:13:
         11:63:8e:95:0c:e3:2b:79:34:25:3d:8e:50:8a:a2:96:f2:dc:
         61:4b:e7:bb:26:df:83:cf:ca:f6:fd:37:6b:88:29:b7:cf:d4:
         bf:d3:c6:8f:80:25:33:04:77:93:8a:a3:3c:19:93:87:93:78:
         70:54:d0:50:39:62:3b:db:fd:74:88:a6:37:fa:c2:50:f1:b9:
         5e:24:f8:1b:7f:7d:57:f1:d8:6c:39:5b:fc:b3:5a:fa:ec:2c:
         a3:66:0b:16:d5:62:63:85:2f:c0:fc:fc:7e:e3:50:db:9c:b8:
         4f:66:9f:e0:dc:dc:ad:af:67:31:d2:50:46:42:04:f4:5a:fb:
         40:97:ad:8d:5c:f9:bf:03:f5:3c:c5:73:bb:27:e0:ad:c9:2b:
         67:dd:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 04:38:24 2024 by rpki-client on console-ams.rpki-client.org