Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
File:                     B3087E32CE2F11EEAF078018C4F9AE02.roa (raw, json)
Hash identifier:          ZksUYGAcB3L+kUumgikeHffV7i9h1cHbRPb3hxzqu1A=
Subject key identifier:   D0:26:4B:44:EA:9D:AA:81:62:BA:7E:D2:3F:B0:FE:03:54:51:D3:2C
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       3327
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 16:01:10 +0000
ROA not before:           Thu 14 Mar 2024 16:01:10 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     1239
IP address blocks:        122.8.32.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
                          rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13095 (0x3327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 14 16:01:10 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f31f46-1c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:c6:4b:df:c8:22:58:d6:5c:6e:47:68:66:
                    d8:14:b0:38:4d:f8:8c:46:df:16:86:6f:cb:2d:ca:
                    bf:23:18:7a:b4:91:43:00:7a:f0:72:64:40:fc:77:
                    0d:22:35:5d:89:98:f7:06:94:17:7e:d7:1c:7f:ec:
                    05:46:5b:bc:0a:7d:07:0d:e9:34:fe:51:af:6d:53:
                    17:71:e1:d0:05:23:21:2a:3c:07:25:e1:71:30:c2:
                    0c:51:79:d9:f7:24:0b:dd:1a:d8:16:c3:81:ed:a4:
                    b5:e6:0f:9c:7a:ab:6a:65:b3:5f:83:53:4d:e2:99:
                    c8:f4:89:ce:eb:3a:ce:71:6d:4c:4e:a5:60:14:6c:
                    29:e9:d2:8e:a9:65:f5:a7:1a:a5:b0:49:86:5e:8b:
                    d2:97:e2:dd:a0:69:06:96:a2:15:f8:0d:4d:ae:a3:
                    f7:8c:3c:aa:0d:17:7c:e4:21:2e:80:64:e6:e5:99:
                    bd:99:64:72:6b:d8:3d:67:47:cf:88:e0:7e:f5:cf:
                    6d:90:0e:b3:96:8b:25:31:d2:1f:30:a0:99:af:16:
                    f7:45:c0:a4:f6:b4:d5:3b:00:2f:25:86:b8:f4:2a:
                    29:fd:f2:bc:c7:d4:34:26:61:30:4a:82:6c:73:0f:
                    6f:0e:f4:a2:e4:dd:4c:21:8e:93:2a:1c:0a:2f:b4:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:4B:44:EA:9D:AA:81:62:BA:7E:D2:3F:B0:FE:03:54:51:D3:2C
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B3087E32CE2F11EEAF078018C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.32.0/22
                  122.8.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ee:64:89:a4:9d:79:89:f0:a5:8d:ac:73:59:31:87:ce:5a:71:
         dd:12:23:fc:36:df:58:37:af:95:0a:07:49:3a:e8:7a:02:17:
         a4:6c:aa:78:1b:6f:45:b8:cc:7b:21:b6:4f:52:f9:53:c3:6b:
         f4:88:76:48:22:4f:44:5f:60:db:07:84:0e:8f:7a:bf:a8:3f:
         03:13:1a:c6:c1:e5:2b:a2:90:0d:9f:ce:3f:d6:bd:d7:4f:31:
         8b:78:a2:10:24:cc:66:fa:7c:95:55:3d:a8:61:29:ca:c3:6c:
         3b:63:cb:61:87:24:7d:9b:2e:c8:7c:8b:0c:6f:89:57:9d:43:
         c6:e8:63:d5:04:13:73:09:0a:f3:9f:ea:c1:b7:4f:4f:be:c1:
         cd:c7:a2:0e:21:f8:a1:05:bc:22:3b:c2:59:f2:e9:e0:6b:c7:
         61:27:e0:3b:9e:30:bf:18:0b:e3:be:db:69:32:e4:b1:85:7e:
         9f:ee:3c:b4:ae:87:f5:75:03:a9:83:35:4d:06:fc:cb:7d:7e:
         6d:f0:08:5b:3a:93:4f:01:84:f8:99:ab:f8:b5:c6:be:56:d1:
         75:b0:dc:dc:82:31:ba:b0:49:1e:fc:69:f4:9b:5d:19:8b:a3:
         ca:85:71:f9:d1:50:b9:22:4a:aa:d0:27:c0:ce:12:4c:d8:61:
         fc:73:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:13:57 2024 by rpki-client on console-fra.rpki-client.org