Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/66891B80943011EA8988B883C4F9AE02.roa
File:                     66891B80943011EA8988B883C4F9AE02.roa (raw, json)
Hash identifier:          e8EsUIru5I+kvcxrClJSF0og6ruHigKw4K5qZx/355g=
Subject key identifier:   22:38:A0:B1:5C:A1:2A:8A:88:4B:D4:F7:BF:98:47:6E:DE:08:60:80
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1C5B
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/66891B80943011EA8988B883C4F9AE02.roa
Signing time:             Mon 28 Oct 2024 14:40:41 +0000
ROA not before:           Mon 28 Oct 2024 14:40:41 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     38713
IP address blocks:        119.73.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7259 (0x1c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 28 14:40:41 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=671fa268-34d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:c5:56:1f:d3:24:8d:b7:66:a6:24:f4:49:
                    97:70:18:72:01:78:8c:5c:02:cf:a9:9c:3d:7f:42:
                    97:86:f0:07:d0:50:c7:b0:2d:96:cb:10:49:4f:98:
                    84:bb:e3:a2:8b:b8:1a:d6:1b:67:5e:bd:e3:bc:3b:
                    54:7a:ac:b4:f6:23:87:b1:df:be:2f:8b:c0:32:5e:
                    bd:60:08:a8:0e:a8:10:5c:72:28:2e:11:22:ca:a6:
                    0d:62:6b:2b:e0:7f:e0:a7:d0:98:d2:55:48:69:8a:
                    e2:f1:e8:1f:46:74:e5:c1:47:5e:95:82:49:72:50:
                    d8:dd:44:14:36:a7:ea:8c:e4:d1:bc:a2:98:01:62:
                    0d:fd:7e:55:19:9a:b8:4e:72:66:6f:71:4e:7e:68:
                    c1:05:d9:65:8f:b1:bc:83:7f:23:7f:d0:68:fd:9a:
                    c3:8f:87:9b:47:9b:43:fa:c1:3c:8e:60:98:1a:3d:
                    2f:d8:c8:d7:e6:af:6e:fc:c2:c8:c1:a1:9f:bc:8a:
                    13:e7:d6:dd:86:d4:99:88:48:65:f9:5a:f6:48:fe:
                    27:37:4f:57:7e:4e:ef:04:65:71:03:b4:e4:20:eb:
                    ed:e7:d7:44:1a:45:ff:a7:87:33:25:c7:d4:80:f0:
                    21:6a:e2:82:75:fc:81:87:46:0d:ad:2b:15:d8:92:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:A0:B1:5C:A1:2A:8A:88:4B:D4:F7:BF:98:47:6E:DE:08:60:80
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/66891B80943011EA8988B883C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.73.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:54:2d:8e:73:ed:1f:d2:c3:1b:a6:c8:33:59:ed:44:43:8f:
         1f:6f:37:5a:ae:87:a5:d8:01:c2:fe:3f:08:1d:56:a3:56:b4:
         07:fa:42:00:fa:d6:40:82:89:ce:71:df:a6:c9:b6:f2:7d:a3:
         d4:70:56:a0:d1:f9:05:03:25:9f:2d:f7:c3:3a:7c:00:e4:23:
         03:53:2d:89:50:1e:f1:a6:7e:1f:65:4c:09:48:3b:2b:0b:ed:
         a5:e6:e8:45:4e:91:7a:08:00:d7:3c:04:11:09:f2:14:01:37:
         be:55:84:ab:e3:fd:ed:18:e2:be:02:5b:2f:b7:67:fd:ef:7b:
         a4:a0:db:2f:8d:1c:56:97:62:6d:b2:d6:9c:e4:d2:e7:59:db:
         34:de:5b:f8:4f:89:76:24:cd:f7:73:ed:1b:49:c7:57:35:3e:
         98:71:7d:ee:f7:44:d4:88:fa:b1:31:6e:2e:0e:e0:c2:bf:49:
         9a:d2:69:58:ee:19:bf:32:84:a8:bc:04:34:a1:b2:08:47:d2:
         80:76:07:5f:a4:02:0d:e3:98:fc:4a:d0:9c:1f:43:b1:72:f9:
         ef:d3:34:42:f6:5e:53:54:68:c3:bc:76:f5:e9:91:d6:3c:67:
         40:2e:db:5c:69:01:ee:56:55:32:25:d9:c1:04:d6:40:df:4a:
         a6:f0:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org