Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
File:                     C6618F98BD0511EB9BB8C97CC4F9AE02.roa (raw, json)
Hash identifier:          MpSwwr6a+AIoc+TObg4xTyGo2LybXSMxQRZJjtl6eX0=
Subject key identifier:   8D:27:ED:A9:D0:BE:46:E0:23:D9:4F:C4:08:DC:C6:1A:6B:DF:EF:78
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       1286
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
Signing time:             Wed 24 Jul 2024 17:35:11 +0000
ROA not before:           Wed 24 Jul 2024 17:35:11 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     4632
IP address blocks:        192.131.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4742 (0x1286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Jul 24 17:35:11 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a13b4f-c462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:85:79:8c:1c:00:6c:a4:ad:44:76:ba:39:
                    9e:62:75:dd:3d:04:89:10:e9:33:9c:8f:bf:37:a3:
                    5a:41:40:2a:ab:0d:01:67:3d:18:9f:63:fb:cc:a2:
                    41:f3:ea:46:67:e2:d0:7c:44:49:cb:1c:29:8d:64:
                    fb:fe:e4:c5:fd:c9:0f:f2:62:a8:bd:fa:2d:d4:e0:
                    77:d1:d1:cc:fe:d4:de:e8:06:da:8c:d1:a3:20:b4:
                    b1:e5:7b:27:2e:3b:3a:b5:95:3c:89:b2:b7:e3:e0:
                    7e:c4:cd:23:72:04:c6:41:84:d6:10:3c:cb:22:77:
                    68:cc:3f:bc:c0:fb:02:cc:d3:70:04:9d:67:42:00:
                    6a:82:3e:df:00:3c:e5:4d:d6:dc:ef:a6:cd:47:c9:
                    3d:99:df:38:c5:71:ea:ca:a6:49:5b:5a:c5:7e:6e:
                    08:03:0b:05:55:41:27:ee:ad:23:b3:f3:7d:4a:04:
                    0a:64:6e:cd:17:d6:04:ca:9a:7e:de:26:fd:8b:1e:
                    8b:c4:85:4c:9a:86:05:13:44:9b:5c:54:d6:48:27:
                    ab:f3:05:82:61:80:db:57:ef:14:e9:8f:aa:c9:db:
                    30:90:fa:05:5e:2f:bf:c5:f8:c6:cc:b7:a9:25:95:
                    a9:0f:b7:a8:49:97:94:6f:a7:a1:6e:4d:fa:62:8f:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:ED:A9:D0:BE:46:E0:23:D9:4F:C4:08:DC:C6:1A:6B:DF:EF:78
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:b3:a4:65:57:ac:d2:32:ff:9c:67:55:53:e2:01:38:82:
         c2:a4:6d:6f:04:f4:b5:0f:44:54:13:cd:ee:68:bd:26:61:39:
         38:c9:6a:ff:15:41:2e:6a:7f:89:91:92:84:62:55:9a:12:3c:
         4e:12:b2:7c:f5:f6:96:5f:c4:34:20:29:b5:95:f7:0d:40:02:
         1d:2a:cf:11:f0:8f:07:5b:e1:f1:a2:4e:54:24:ff:3b:c4:27:
         03:b2:31:0a:53:e3:68:62:e0:73:d3:19:ea:ae:4c:4c:4e:2a:
         ea:a9:3c:1b:e6:90:e6:2d:ed:98:24:23:88:92:0e:d8:5c:51:
         a1:82:5f:99:03:d0:b8:de:58:5a:38:12:01:01:5e:0a:7b:b4:
         a0:a9:e1:3f:6f:4f:42:38:1e:06:12:39:d6:66:1c:d9:71:b6:
         d6:f9:48:20:8c:86:12:6a:33:1d:87:00:25:93:b4:e5:56:84:
         dd:95:90:4a:61:59:d8:c6:f0:81:29:96:a7:60:84:8d:46:42:
         3f:c3:e2:07:c5:b0:ae:38:e1:17:52:b1:2f:d6:ac:ed:e8:69:
         49:6c:26:1b:a9:53:36:35:50:a7:88:61:5d:fe:46:62:03:c5:
         03:cf:7f:f1:bb:86:ff:c0:32:05:c8:68:1a:e3:f9:58:1a:56:
         4d:6b:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:24:15 2024 by rpki-client on console-ams.rpki-client.org