Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
File:                     146766F4A47B11E9867CBF58C4F9AE02.roa (raw, json)
Hash identifier:          fr8jc0OjrSAvapdmv6mLZQKQ3e4BFRuPxTXrBFPpD+4=
Subject key identifier:   7D:8D:74:2F:CA:7E:B3:F9:B5:21:06:BF:D7:B7:7A:5B:12:A6:71:AF
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       33A0
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
Signing time:             Mon 14 Aug 2023 14:30:20 +0000
ROA not before:           Mon 14 Aug 2023 14:30:20 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     9911
IP address blocks:        165.21.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13216 (0x33a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Aug 14 14:30:20 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64da3a7c-6e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:60:e7:aa:77:05:a6:11:ac:70:fa:d3:42:
                    64:fd:02:ad:42:e1:49:55:2e:3f:67:01:37:dd:f7:
                    c9:3b:9e:19:95:84:b6:20:ca:60:53:fa:e3:75:c3:
                    ad:15:af:94:24:86:56:14:3e:a7:6c:0e:8d:8a:23:
                    a0:2f:1e:f7:6b:2d:3b:32:f0:23:c3:02:66:50:fd:
                    3a:5b:b0:ce:e8:d0:00:06:4a:6d:b8:31:18:f4:da:
                    a1:3a:3c:6d:e9:45:1f:9d:12:3e:37:45:97:57:71:
                    e0:c6:a9:6e:ac:42:83:d6:90:e3:cf:ae:0d:f2:e8:
                    7a:0c:04:fb:06:2d:85:23:de:71:62:2a:7d:eb:0f:
                    16:b7:48:4a:35:5a:12:7c:38:23:99:58:f7:c0:9a:
                    1a:8e:8b:b1:83:f4:5a:85:79:03:85:b9:d1:57:52:
                    7e:5e:44:fd:9e:d7:76:8d:a2:a4:9d:e9:ac:09:c0:
                    7a:66:50:12:38:d3:e9:79:70:12:da:13:d7:03:1a:
                    98:55:14:18:80:a2:f5:76:e7:5f:92:7a:f2:e7:fe:
                    d9:21:1a:c8:ed:c9:f5:14:eb:96:49:50:f0:f4:eb:
                    45:0a:94:47:7a:e4:f8:d0:dc:57:9f:5d:a9:24:9c:
                    c8:d8:17:bd:c9:1c:e3:3d:4f:f6:f5:35:3a:cf:1f:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:74:2F:CA:7E:B3:F9:B5:21:06:BF:D7:B7:7A:5B:12:A6:71:AF
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.21.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:45:31:ef:f4:b2:d3:04:d6:d9:8f:9a:18:8d:ab:04:45:19:
         14:fb:2d:25:ee:c4:57:ba:e0:2f:15:64:ea:b7:e1:d4:e1:a8:
         39:b9:e5:19:10:f2:17:2f:16:93:b5:b6:64:1e:d6:9e:6c:47:
         3d:d3:c0:e5:50:cc:40:3b:b4:c8:c7:e1:77:dd:7c:dd:72:6b:
         a7:c4:05:aa:11:2b:27:38:12:77:a2:70:6e:4d:bd:92:db:83:
         ae:61:2a:f4:1c:60:ec:43:b2:6f:2a:81:44:0e:df:da:d9:be:
         03:80:4a:1b:cb:a3:02:3b:92:07:4a:41:64:37:22:f5:2b:6e:
         c5:46:52:ed:e7:a5:fe:6d:d4:79:59:14:54:f3:a3:44:d2:e0:
         1b:d2:cd:b6:61:58:d6:fa:2d:eb:04:e5:2e:c0:67:bd:40:16:
         c2:52:95:f4:5c:e2:55:16:b7:ef:0c:f3:c9:29:25:a0:4b:13:
         9e:9f:7f:15:a1:de:ca:30:a6:08:9e:3e:c6:a6:46:36:95:5f:
         22:ca:10:14:d8:3d:6f:3f:b6:f7:f7:74:e2:01:7f:c8:6a:99:
         fb:83:82:15:5e:0a:f9:11:e0:dc:4b:87:77:c0:2e:06:41:d5:
         72:42:6d:9f:0e:65:4a:f1:d6:29:b9:e4:68:5b:00:c7:8a:f9:
         f0:3d:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org