Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa
File:                     A108D60CF92E11EA8946AD6AC4F9AE02.roa (raw, json)
Hash identifier:          P+ojUz12doT6YBWDAEohI7M/ZBVLVfv2zRK1JgxRWZI=
Subject key identifier:   D6:FD:D2:58:A0:34:0B:87:35:E6:3B:EA:1B:5C:BE:38:6A:52:50:1E
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       17FF
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa
Signing time:             Fri 02 Aug 2024 17:06:57 +0000
ROA not before:           Fri 02 Aug 2024 17:06:57 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        116.90.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 15:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6143 (0x17ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Aug  2 17:06:57 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66ad1231-c28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:fe:97:d3:27:72:c2:0d:48:c7:05:5a:5a:
                    a6:12:58:10:1d:f3:63:a0:2a:7e:c4:65:be:4e:5e:
                    48:27:ad:70:a5:20:2d:01:79:35:92:7f:db:5f:36:
                    4f:15:23:bd:e8:24:3f:0c:25:2a:e9:1d:20:ce:f0:
                    d4:9c:ac:2e:29:c3:38:99:bb:f4:09:a5:f3:6a:c1:
                    16:a6:03:30:b5:38:c6:4c:b5:32:28:98:c9:59:e5:
                    22:b1:c1:84:c8:9a:80:47:86:46:02:f5:c0:b2:94:
                    8e:e0:0f:ca:bd:1d:b9:47:f9:72:a4:a5:53:c2:fc:
                    b2:3e:6e:8a:7c:a6:ac:ef:34:2d:29:2d:e7:94:66:
                    1c:20:ee:c3:35:ea:a7:0d:0d:6a:df:7c:c4:b8:1b:
                    bf:18:82:17:d0:0e:e4:d3:c7:93:a3:f0:64:44:f0:
                    14:1e:d4:8a:8d:62:66:39:9f:8e:ea:ca:90:21:51:
                    e3:bc:68:de:d8:b2:4d:0d:d6:83:51:5e:0f:cc:40:
                    e6:f2:c3:62:a4:df:0e:13:bc:82:85:60:c7:22:df:
                    c4:fb:1d:6c:21:9b:d3:64:34:a0:b9:1b:57:f0:dc:
                    b8:0d:9a:b3:89:44:ff:c3:de:b0:e8:ac:d9:b3:71:
                    4c:35:7f:be:b5:b7:5b:ee:f1:24:a2:10:2b:3e:b3:
                    da:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FD:D2:58:A0:34:0B:87:35:E6:3B:EA:1B:5C:BE:38:6A:52:50:1E
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         f1:33:66:88:ef:36:4f:84:51:7a:56:a9:d3:a5:b2:0c:a3:38:
         51:7c:e6:04:ad:d5:7e:b3:e7:0d:82:8d:a5:65:85:be:dd:53:
         68:fc:52:a4:95:11:48:e6:96:5e:82:08:cb:8b:f1:89:e3:f8:
         8b:2b:cc:38:03:dc:1e:c1:13:5c:30:c9:cf:05:89:05:66:4b:
         d0:68:a9:a7:f6:94:e2:e5:ab:93:a2:1d:f3:e3:a0:3a:d3:9e:
         27:f6:cd:5f:a6:d7:21:5c:ce:c5:ae:c6:ac:7c:14:37:da:7c:
         5a:e9:14:03:e9:f1:3d:c2:70:79:59:25:49:a3:86:92:44:c2:
         1e:0d:99:30:9f:49:1f:7d:30:1e:23:37:3c:0b:c7:1d:67:1e:
         4a:5f:a2:5d:1e:dd:e3:fb:54:45:58:83:3b:af:9e:f7:9d:26:
         70:5f:cc:54:98:c7:28:48:37:34:59:61:0c:77:ee:eb:49:e1:
         f7:c3:1b:90:9a:11:cd:a0:81:58:4d:97:83:77:02:b8:ef:e7:
         d6:40:06:47:76:a8:4a:6b:66:29:f8:f7:02:fc:7f:24:5e:d3:
         b5:0c:c2:56:a3:aa:2f:0e:f5:32:2f:40:b3:0a:82:11:ba:cf:
         0e:b5:a4:ae:2e:8e:22:67:9f:47:32:b1:4c:da:49:c9:35:eb:
         49:27:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:07 2024 by rpki-client on console-fra.rpki-client.org