Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/EE8EAEDC377F11EE92674430C4F9AE02.roa
File:                     EE8EAEDC377F11EE92674430C4F9AE02.roa (raw, json)
Hash identifier:          4ZihWaiz0zd8ffyeV14cgNX7er0MJTfGdRltrv8K/dU=
Subject key identifier:   A1:92:F6:38:E0:AD:67:32:C6:75:CF:96:F6:B8:0C:FE:B2:F2:6B:EF
Certificate issuer:       /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial:       0270
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/EE8EAEDC377F11EE92674430C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 02:54:16 +0000
ROA not before:           Sat 09 Dec 2023 02:54:16 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     16839
IP address blocks:        167.208.0.0/16 maxlen: 16
                          167.208.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
        Validity
            Not Before: Dec  9 02:54:16 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6573d6d8-3102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:76:9b:34:15:a8:0b:6b:83:e1:fc:20:09:cc:
                    1a:8b:b0:11:d6:f0:c4:92:37:07:19:c5:c6:e4:81:
                    53:dd:47:c1:ee:75:79:79:ed:16:6d:c0:50:72:6d:
                    ef:56:17:1a:fc:78:f6:5a:0f:5f:7e:84:f4:1a:77:
                    5b:3c:ba:8a:07:c3:ea:e2:2e:d7:a9:b7:35:9e:c6:
                    ff:14:33:56:7e:05:d2:71:ec:20:e6:32:49:d4:b4:
                    ce:74:51:cb:3a:ab:8e:52:1a:4b:cc:84:0d:ca:63:
                    9a:10:fc:f7:e8:c4:bc:d2:42:40:8a:4a:76:a4:a5:
                    d5:08:a5:72:77:14:07:45:80:29:4f:1d:a1:5e:e5:
                    63:80:1e:52:95:05:47:cd:e8:00:10:11:4e:70:68:
                    f9:9e:27:3a:45:0d:1d:b5:4d:6e:d5:38:c5:45:3c:
                    8b:37:02:af:5e:8d:a2:89:7d:0a:fd:d9:e2:cd:81:
                    aa:82:97:b8:93:f3:6b:c3:af:92:5f:d2:bc:63:3b:
                    f3:72:d9:87:22:51:3b:bf:5e:db:22:c9:bf:3c:7c:
                    58:53:ea:2b:6b:6e:b3:2a:7d:e2:e5:af:d0:2c:a1:
                    96:86:96:79:21:f8:83:a6:5b:1a:66:9c:41:71:48:
                    b0:01:05:ee:7e:f6:7e:eb:c5:60:d1:bd:89:6d:02:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:92:F6:38:E0:AD:67:32:C6:75:CF:96:F6:B8:0C:FE:B2:F2:6B:EF
            X509v3 Authority Key Identifier:
                keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/EE8EAEDC377F11EE92674430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:c7:4b:b3:e5:61:ca:83:4d:50:86:84:ba:43:0b:8b:dd:
         c3:4f:86:af:0f:7c:11:7e:88:9e:57:16:ed:3f:ce:97:3a:be:
         85:4e:72:23:28:80:4b:c0:c4:36:6c:27:9e:09:09:04:e4:23:
         5e:63:cd:10:99:83:ef:18:0a:0e:38:72:d6:04:82:58:5d:e8:
         45:96:f1:d4:77:d3:ce:4d:32:a4:7a:df:cf:c2:a4:9e:1d:63:
         24:70:d1:e7:6c:8d:5c:ed:0f:fc:4b:cb:d3:c7:23:09:93:f9:
         ed:87:a7:b1:ef:fd:31:c6:fb:56:bb:19:c9:0e:5e:2b:25:c8:
         39:f5:f5:a5:c9:89:e7:4a:83:9e:c8:41:5a:ec:c5:eb:26:d3:
         46:b5:f7:99:af:b2:4e:f8:28:c6:7d:07:74:40:be:b2:19:48:
         c5:0c:63:07:04:74:3f:a8:6c:6e:07:7c:4d:d0:bb:0a:61:c8:
         af:de:07:46:22:70:1b:f2:4f:74:fd:5f:58:a9:ab:b4:b2:e3:
         44:39:f9:84:8d:ba:6c:e3:f3:17:a8:6b:d7:dd:3e:fb:cc:7f:
         27:8e:a2:e3:5e:07:40:08:61:78:da:49:2c:6e:c3:19:c4:ea:
         f5:bf:cf:23:82:27:25:f6:84:17:63:97:e6:09:dc:11:a4:f4:
         91:57:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:40 2024 by rpki-client on console-ams.rpki-client.org