Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
File:                     349FE3280DA811EBB62F0126C4F9AE02.roa (raw, json)
Hash identifier:          QBu5e14nwyFTwvz4mYSGP3ZScgqsE/d2O6TgGIypyVQ=
Subject key identifier:   90:3E:E0:0B:1B:A3:C4:85:19:88:AB:32:12:5B:64:23:87:90:E9:74
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       11C5
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
Signing time:             Wed 02 Aug 2023 17:34:59 +0000
ROA not before:           Wed 02 Aug 2023 17:34:59 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        192.74.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 17:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4549 (0x11c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  2 17:34:59 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64ca93c3-2aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:c7:01:f8:dd:a5:56:87:5c:34:80:84:e9:
                    7d:a9:50:5f:e3:da:8f:14:11:1f:22:e7:65:7c:16:
                    46:32:61:96:c4:60:e8:7a:8c:0d:5e:0a:df:76:21:
                    9c:1b:4d:1b:cd:b2:5b:ff:65:dd:10:dd:41:04:6a:
                    80:f6:a7:f8:7c:21:8a:c3:ec:4c:cb:f3:eb:9f:3c:
                    77:14:12:56:87:cd:a8:0d:88:65:30:66:04:8a:45:
                    16:28:7d:24:66:51:bb:d3:b0:86:a4:13:02:b5:82:
                    9f:e4:40:39:9a:02:0a:24:e9:72:4e:e7:fb:c8:bd:
                    c4:2e:3c:cb:04:48:26:c2:54:2d:1f:a2:44:c5:f0:
                    55:c0:b4:b0:67:28:94:7d:6e:d1:b2:de:0b:d5:38:
                    58:80:78:f5:95:2c:cb:52:80:dd:a3:2b:42:c3:f8:
                    58:5b:90:32:4e:73:68:f6:17:79:9d:fd:51:43:71:
                    12:7c:f6:30:c9:f5:fe:15:97:50:0f:85:ed:1a:32:
                    f2:21:8f:8b:b4:43:cb:2e:cf:e6:01:6c:55:36:87:
                    ea:aa:2d:70:89:12:0d:96:24:5f:80:79:68:11:f6:
                    ae:1d:81:ea:be:b1:d6:0d:96:11:18:07:49:12:78:
                    4a:87:5d:00:21:ba:78:20:6c:10:b1:87:44:c3:51:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:E0:0B:1B:A3:C4:85:19:88:AB:32:12:5B:64:23:87:90:E9:74
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3f:e0:cd:77:f3:6f:63:e4:e6:cd:d7:46:30:b8:6e:1c:13:
         ee:3f:79:a9:c6:88:0c:c3:31:d6:e1:f7:c2:77:57:1b:88:04:
         f9:76:ab:97:3d:4f:71:20:0c:40:34:fb:16:46:d8:1c:a1:a4:
         e6:95:e3:d8:82:bc:c8:65:89:00:4c:09:2f:60:54:70:3d:16:
         44:7e:da:56:d8:2c:44:63:c7:eb:8d:9b:ce:d9:6b:ce:42:3c:
         2e:53:9d:00:f6:da:f8:15:1a:70:26:de:79:19:4f:49:1a:fd:
         d6:f0:e6:ed:46:77:2b:fd:7b:80:7f:5e:d5:b8:0f:9e:c6:77:
         f7:42:d9:51:61:f5:86:bc:28:c6:e0:da:db:e6:d0:72:d8:68:
         69:28:e0:4c:15:16:53:ad:b0:60:57:27:68:dd:90:6f:06:40:
         41:3d:dc:93:bc:a8:00:6e:a4:9c:30:ef:94:49:10:0d:62:b7:
         6e:23:08:25:bd:e0:2f:71:da:76:96:bc:75:fb:58:c7:87:c1:
         c9:3f:6c:b3:d9:16:b4:22:3b:3e:2b:0d:d9:bf:ba:fd:9c:ed:
         29:27:7f:47:14:f1:b2:45:ca:0b:8c:45:04:e3:01:39:df:2c:
         ff:bb:20:cf:97:d7:42:12:9b:7d:bd:50:ef:7d:07:4e:a5:61:
         a2:32:0d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:26 2024 by rpki-client on console-fra.rpki-client.org