Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
File:                     8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (raw, json)
Hash identifier:          gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=
Subject key identifier:   D3:AB:43:D4:23:1D:76:60:72:A4:75:C8:CF:2E:7A:54:C7:F5:1A:58
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       31
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
Signing time:             Wed 09 Oct 2024 06:49:45 +0000
ROA not before:           Wed 09 Oct 2024 06:49:45 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        192.206.156.0/24 maxlen: 24
                          192.206.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Oct  9 06:49:45 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67062789-0f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:56:d7:ab:54:be:ea:53:ed:53:82:48:1a:
                    94:4c:23:80:b1:44:90:61:28:7f:b9:78:45:ae:72:
                    04:ed:ff:00:a4:b0:37:cf:4f:43:b9:c5:bf:e7:fa:
                    47:ba:96:50:cf:eb:43:27:fa:38:3c:80:1f:67:65:
                    21:f9:57:35:f9:b6:22:6e:87:c7:87:27:d5:ac:bb:
                    59:16:77:f0:86:32:7c:69:a0:d1:cd:08:ba:50:17:
                    df:64:7d:5d:98:14:33:0f:17:b7:74:d9:e3:66:3d:
                    12:3d:55:cd:6c:5c:e2:0d:ce:9f:51:9e:1a:fc:6c:
                    df:ff:ae:d9:85:99:9b:61:1d:df:b7:24:6f:01:fb:
                    d0:50:92:5d:f9:4d:5e:68:35:bf:b3:ac:2e:3d:7c:
                    5e:f6:4e:43:6f:02:86:bf:96:7c:2e:19:e6:33:9e:
                    b8:4c:c4:25:72:27:76:2e:70:17:d4:9d:36:ca:8b:
                    5d:ad:f5:cd:9c:d6:60:25:9f:a4:b8:0b:72:6e:a2:
                    5d:79:31:01:c1:eb:d8:81:a1:33:c8:62:e9:67:03:
                    93:03:d0:45:95:4d:3a:00:15:aa:04:3f:bd:52:ce:
                    9e:c5:6c:ea:8f:70:93:70:81:e0:af:50:b8:94:19:
                    28:82:de:94:cc:92:8b:8c:98:1b:95:b0:79:be:d5:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:43:D4:23:1D:76:60:72:A4:75:C8:CF:2E:7A:54:C7:F5:1A:58
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:e1:4e:f0:50:58:3a:6f:1c:d5:85:ef:05:db:21:96:47:5c:
         07:c6:13:7b:81:8a:6e:e7:aa:5a:1a:fa:a7:37:d8:d3:4e:0e:
         db:93:4a:2e:eb:e5:ed:07:d0:f0:90:3f:a3:f5:8e:85:20:09:
         14:75:0b:8c:40:74:5c:ce:ac:c4:e4:0b:6c:d0:c4:02:fd:e0:
         05:4c:4b:33:b4:88:52:86:27:19:71:f3:c4:f7:91:e2:ee:ab:
         d8:15:dd:52:94:6f:0c:fe:5b:b7:29:32:cf:48:12:4f:97:74:
         f4:2f:b3:4f:54:97:86:26:ea:dc:53:92:a7:fe:ea:43:8d:bb:
         c7:24:64:b1:1d:12:d2:33:84:30:df:65:fc:6f:c9:f5:fb:24:
         90:d4:14:15:fa:c7:1b:e9:bf:73:23:59:82:1f:bb:0f:16:50:
         0c:81:e0:ee:8d:97:7a:05:fc:5d:89:6b:07:f4:2e:cb:39:8a:
         1c:67:ac:17:36:b7:3d:d4:07:74:8f:0f:1a:96:9c:09:77:7d:
         ff:ee:8d:f3:31:ff:64:b7:ee:ca:14:36:81:8e:05:17:8c:97:
         3f:99:93:d8:a6:57:b9:aa:41:a8:8b:eb:ed:57:7f:4b:49:9b:
         99:67:02:80:ee:f7:23:2b:a4:8c:d6:f2:69:99:e0:a5:59:9b:
         d4:5b:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:55:35 2024 by rpki-client on console-fra.rpki-client.org