Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
File:                     8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa (raw, json)
Hash identifier:          ulEoG77MrSiwSYhpxeW0HQs0UzURtgxGQwYkMWVPA0Q=
Subject key identifier:   6E:19:52:16:70:F5:8F:B2:DB:96:3C:4A:2B:1E:F5:C3:05:F1:11:35
Certificate issuer:       /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial:       082B
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
Signing time:             Fri 06 Sep 2024 21:41:54 +0000
ROA not before:           Fri 06 Sep 2024 21:41:54 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     198381
IP address blocks:        116.58.5.0/24 maxlen: 24
                          116.58.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 20:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
        Validity
            Not Before: Sep  6 21:41:54 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66db7722-65b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a9:98:10:b3:b5:c0:a0:0b:10:d1:b4:b5:83:
                    8c:d5:97:3f:7d:75:ad:73:79:6d:75:97:77:bd:84:
                    d6:ff:aa:86:b1:ba:ab:b5:20:74:25:6a:29:0c:ec:
                    01:be:26:87:e3:82:5c:6f:22:83:fb:52:f7:d1:89:
                    92:4a:b1:e8:08:0a:b4:6c:50:77:28:1b:4a:89:f7:
                    57:13:72:37:d8:e3:e3:19:26:fa:02:40:d1:29:31:
                    ea:44:48:fa:1b:1f:de:3e:2e:34:95:dd:37:23:73:
                    7d:0c:54:2a:7e:79:8c:ee:16:9c:e4:ab:5c:84:42:
                    43:4f:47:d7:a0:5f:80:2f:a9:48:ae:cd:af:e6:f8:
                    e7:81:d1:4f:ac:9e:8c:06:31:99:c8:6f:88:87:a2:
                    76:a9:86:53:dd:6f:fd:82:10:dc:7a:f6:db:3c:c0:
                    78:17:31:0e:2d:9a:2a:70:43:d6:19:29:0b:51:23:
                    3b:48:7b:a2:87:af:1a:04:dd:e3:3d:d4:55:27:fb:
                    31:92:09:af:a7:25:75:58:d5:ed:3d:ad:28:36:4b:
                    b3:2c:8d:a7:a3:7b:a1:bf:09:db:d4:e5:bf:18:43:
                    57:dc:0e:86:9c:21:03:5e:4e:ea:08:5d:68:45:78:
                    c4:e2:5f:eb:27:fc:6e:57:87:30:1c:87:cf:67:75:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:52:16:70:F5:8F:B2:DB:96:3C:4A:2B:1E:F5:C3:05:F1:11:35
            X509v3 Authority Key Identifier:
                keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8C51AEF8C4FB11EAAEAE7C1DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.5.0-116.58.6.255

    Signature Algorithm: sha256WithRSAEncryption
         49:3a:c5:12:17:6e:a0:68:a4:b5:e8:90:1a:64:de:34:bc:5f:
         3b:b1:6e:c7:fd:1a:52:57:08:90:eb:49:36:fe:24:96:b7:a7:
         ee:ef:a3:42:24:41:8e:1a:4d:33:29:d9:4b:6c:d7:9b:00:e3:
         8a:7c:4f:fc:0c:05:bf:a2:27:f6:9d:8f:41:5e:6d:d3:0d:71:
         51:1c:ff:11:a5:58:e1:a4:fc:d1:df:7a:e5:81:87:93:2e:8b:
         ae:5c:45:e6:72:c4:4e:36:77:8b:b0:8f:40:19:2c:a3:49:38:
         f0:ca:60:c0:07:f5:eb:b8:d9:41:9b:eb:b0:24:ee:86:ec:50:
         d8:20:42:42:05:65:34:5f:71:33:23:e4:a8:a8:10:42:26:47:
         76:37:96:b8:ff:45:fb:ba:21:96:a7:2e:32:0b:d1:3f:3b:83:
         89:70:90:90:c1:1d:fc:51:e3:86:92:cd:64:e1:50:e6:63:49:
         1c:d6:b3:57:dc:aa:89:4d:24:98:dc:d6:1b:be:23:5d:60:5d:
         ce:31:9c:41:a6:36:03:a5:72:77:d2:21:28:d5:e7:fa:c2:2f:
         9d:f2:b7:4b:86:70:e1:5c:30:82:ef:e5:8e:52:7e:34:62:56:
         b0:fa:28:2f:e1:04:03:2b:7e:23:20:2c:13:f3:3c:bd:ef:16:
         2a:76:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org