Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/F311F68E01C311EB898F2D52C4F9AE02.roa
File:                     F311F68E01C311EB898F2D52C4F9AE02.roa (raw, json)
Hash identifier:          VaB6pOWiJQ57BWYYsujqoAwA2X29FFnQlwvyPnBs8I8=
Subject key identifier:   93:81:92:31:D8:3E:C7:2B:6E:67:5E:BC:88:5E:BD:6B:F5:DC:35:60
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       30FA
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/F311F68E01C311EB898F2D52C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 15:52:42 +0000
ROA not before:           Tue 30 Apr 2024 15:52:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8966
IP address blocks:        59.160.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12538 (0x30fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=663113ca-6f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:a5:00:ac:72:23:b3:8b:6a:c3:d8:78:2e:
                    6e:39:58:67:e2:a3:87:1f:ad:63:a2:bd:4f:98:ad:
                    62:89:8c:50:77:f5:f5:de:99:a1:27:44:c1:54:a5:
                    e2:fc:16:9f:04:02:fa:2b:d3:40:4d:f9:24:34:0d:
                    ed:d2:96:25:6a:e2:50:9e:0e:8c:2f:f0:23:22:5c:
                    03:ae:60:42:fa:e0:04:80:3f:d1:c9:00:bc:d6:79:
                    ec:57:6a:c0:bd:a3:37:b2:0f:dd:9f:25:ba:fb:dd:
                    78:d8:9f:18:44:87:1b:a4:8d:c5:73:bd:24:68:6d:
                    15:e3:85:33:8f:ed:40:7d:40:a9:14:18:fa:d4:13:
                    59:22:86:8b:83:52:e8:4c:c1:d9:9a:48:9d:98:af:
                    c8:0a:a4:1e:77:c7:73:a4:1a:f1:36:b3:7f:7c:a2:
                    8a:74:02:b4:31:a3:85:db:99:8a:5f:5f:10:8f:b7:
                    62:43:bb:31:13:df:f9:b7:dd:fc:ab:7e:21:47:a7:
                    43:af:97:5b:be:95:a6:a5:d0:74:24:60:d1:61:46:
                    48:14:13:4d:2b:fb:fd:11:8a:3f:91:80:74:63:9a:
                    e7:bf:43:3c:79:74:a9:8d:fe:b9:5f:1d:e1:c8:ad:
                    87:8c:57:ba:78:ae:ed:d2:27:c9:f3:47:76:64:30:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:92:31:D8:3E:C7:2B:6E:67:5E:BC:88:5E:BD:6B:F5:DC:35:60
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/F311F68E01C311EB898F2D52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.160.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:dd:38:bd:84:63:54:11:b9:79:af:cb:89:6c:e2:b7:1b:
         94:24:c4:ce:bf:e5:d7:93:85:3d:e0:e5:b9:82:07:96:d3:c8:
         65:42:35:b4:cf:e4:f6:b5:c8:28:cb:b3:10:d1:b0:cc:cf:23:
         f4:ee:e5:68:f4:56:50:96:60:95:17:cd:1d:c5:f9:06:c7:db:
         3e:1d:4a:7e:8a:21:c7:9b:bc:ce:dc:cf:1d:78:74:48:99:39:
         cf:21:26:4b:53:72:72:fa:b8:c2:1a:55:1a:a0:39:3a:13:da:
         b8:1d:dd:65:9d:c4:a2:d3:50:00:c7:d7:af:02:7d:af:f1:8c:
         82:84:36:f7:06:6d:a6:41:6e:e8:f2:97:e5:60:4b:0f:1e:e4:
         2c:36:6b:83:38:af:86:cc:f5:fc:05:83:2a:67:a3:2e:6a:72:
         bf:3e:21:2b:39:29:b3:5c:37:e3:b6:38:89:76:e3:e8:b7:2a:
         6a:5a:c5:fa:33:73:64:ae:d0:98:1d:58:2a:59:66:76:3e:52:
         f0:6d:ec:b1:8e:d3:af:7b:7f:8a:23:47:66:c6:10:40:1d:0f:
         47:a8:5d:ea:7c:47:be:8e:e9:5c:f9:cc:51:17:0f:d0:e1:93:
         ea:7a:fa:c5:b0:87:1c:fb:ed:fa:b8:af:53:5b:44:7f:fc:48:
         e1:2e:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org