Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/332821EE4BF311EAB4860A6FC4F9AE02.roa
File:                     332821EE4BF311EAB4860A6FC4F9AE02.roa (raw, json)
Hash identifier:          hyeyp4oVKRW4lvC5yQ7rRx3/jF4h9o6qj/FRYX9l6Zs=
Subject key identifier:   67:C4:2F:0B:41:94:6B:E6:23:6E:0F:AA:A4:6A:0B:40:63:D0:14:36
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       2EBA
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/332821EE4BF311EAB4860A6FC4F9AE02.roa
Signing time:             Thu 18 May 2023 16:09:11 +0000
ROA not before:           Thu 18 May 2023 16:09:11 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     56057
IP address blocks:        119.148.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 15:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11962 (0x2eba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: May 18 16:09:11 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64664da7-93f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:57:3f:52:18:ca:66:2e:52:5c:c8:34:c6:
                    7a:38:dd:68:c5:9b:9a:d0:b4:78:03:93:cf:f0:37:
                    bf:d0:3e:9e:b8:b0:81:81:ea:e8:99:00:e5:13:5b:
                    58:98:d8:95:3b:12:48:9b:49:a1:58:1a:b4:e7:54:
                    6b:3f:d1:95:d7:42:17:e4:73:67:f5:81:9e:66:d6:
                    f9:04:4a:4c:c9:36:4d:2b:d5:87:af:39:a3:04:db:
                    83:1b:7d:9f:6f:52:31:8e:f5:18:33:d2:fd:c6:f1:
                    a1:77:98:8e:dd:39:79:87:b4:fe:7b:2e:6f:21:9c:
                    a2:2b:90:b7:cc:3e:0a:ba:b9:f7:e0:22:df:40:fd:
                    eb:38:2e:86:ec:15:0b:ff:d1:ee:73:16:10:38:b6:
                    e1:8c:6c:20:c3:7d:5a:60:2b:bf:f1:b9:95:2b:51:
                    a4:e3:77:fb:45:df:42:f7:12:d3:7e:62:ea:a7:ad:
                    86:ba:26:b8:63:61:6a:05:bc:06:b0:ef:78:02:9b:
                    45:5a:51:c2:87:7d:ba:f9:05:32:5c:b5:b4:24:85:
                    18:5e:94:93:e7:3d:5b:00:d6:77:88:67:be:6d:1d:
                    5f:12:34:ee:a4:f7:c7:28:27:5c:6d:90:2f:da:ac:
                    0b:95:ac:cc:cc:f2:57:4c:67:ec:57:db:0e:64:7c:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C4:2F:0B:41:94:6B:E6:23:6E:0F:AA:A4:6A:0B:40:63:D0:14:36
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/332821EE4BF311EAB4860A6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.148.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:27:84:2f:a3:d0:d1:03:79:d4:e8:73:b3:58:8d:b4:e5:
         c8:16:1a:d0:d2:6b:32:92:f6:44:bd:a2:d8:a9:88:32:5b:4b:
         e0:24:21:cb:94:68:97:b6:6e:20:a8:f1:b1:41:d7:18:3e:62:
         3d:0d:c2:55:da:68:a9:48:e9:07:41:55:42:7e:ee:6d:f2:cd:
         c2:67:b8:48:41:ba:c7:89:f9:91:76:6f:d8:7a:b7:37:0e:ca:
         3b:c7:e6:fe:78:85:c0:d1:44:a2:75:6f:dd:04:b7:6c:cd:8d:
         71:83:1a:85:e6:66:3b:2b:70:4a:4a:e7:77:e1:63:ab:9b:75:
         3c:33:24:81:55:9f:a0:d6:e8:bd:3c:4c:17:d3:53:f3:5a:b4:
         92:0b:f0:d3:cb:b3:03:3f:d5:a2:8f:d6:29:83:29:19:01:99:
         40:43:36:13:8a:19:14:50:94:41:52:7b:46:c4:f2:b2:c1:b6:
         9e:e3:78:57:22:57:66:ff:a4:bd:94:a9:08:40:bd:fa:8b:3a:
         f4:c9:b4:aa:a9:a7:76:e5:20:b1:fc:43:91:39:b3:16:af:bb:
         52:9a:0b:44:62:5a:f9:9c:8b:d3:96:2d:c1:ed:33:28:cc:41:
         c8:6d:26:3d:ce:bd:4a:b0:a0:d6:16:0e:3b:cd:12:1f:9c:f6:
         40:58:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org