Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa
File:                     AD94C92242BA11ECB1E8FF11C4F9AE02.roa (raw, json)
Hash identifier:          pu6dJPh07UcYd+mIMy5+Y6mbrncfU/s+tKgupfIo1HM=
Subject key identifier:   1B:8F:37:3C:0D:D1:6A:02:2E:F5:95:8F:09:CB:E9:C3:A9:B6:D4:AD
Certificate issuer:       /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
Certificate serial:       03C1
Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa
Signing time:             Tue 30 Apr 2024 17:25:31 +0000
ROA not before:           Tue 30 Apr 2024 17:25:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9287
IP address blocks:        185.54.88.0/22 maxlen: 22
                          185.54.88.0/24 maxlen: 24
                          185.54.89.0/24 maxlen: 24
                          185.54.90.0/24 maxlen: 24
                          185.54.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F
        Validity
            Not Before: Apr 30 17:25:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6631298b-4f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:68:4d:9f:ec:1f:89:99:cb:66:24:b9:43:
                    fe:15:54:37:2e:c4:76:fd:1c:31:c3:0f:f7:7b:27:
                    49:a6:b8:a5:68:33:a1:be:2d:14:06:7b:08:ff:6a:
                    26:60:5e:94:06:4b:74:bd:4e:69:b4:be:c8:1d:a5:
                    f7:61:81:71:ec:f4:0e:b9:2d:9d:cb:fe:e5:97:39:
                    db:54:be:02:d6:60:fc:47:4e:e4:fb:29:52:8a:66:
                    f0:f4:2c:de:a7:2c:8c:80:07:00:40:bc:a8:af:2d:
                    f2:a5:fa:0f:92:ca:40:86:c5:c0:e8:58:92:94:e5:
                    87:bd:fd:4b:4a:08:5c:24:ed:e5:fe:f3:b8:45:8c:
                    cf:9b:07:56:ed:89:5c:85:51:f9:03:c4:17:09:aa:
                    a8:68:74:fc:9d:4c:28:5a:cc:0d:af:9b:df:e9:68:
                    a1:ce:29:16:08:11:a5:84:ab:a5:36:b5:35:79:39:
                    80:3a:9f:b2:84:76:bb:a3:52:33:85:d2:4f:a0:71:
                    d4:17:a5:fa:5c:f6:c9:0d:ac:e6:04:57:f1:05:ac:
                    3a:97:b1:3a:f2:0b:73:c1:fe:5b:26:e9:e8:07:2c:
                    63:e3:41:55:aa:ed:3a:b1:76:14:e3:b1:c7:98:bb:
                    8d:09:d0:00:bd:25:d2:eb:61:a7:de:37:f7:9f:8c:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8F:37:3C:0D:D1:6A:02:2E:F5:95:8F:09:CB:E9:C3:A9:B6:D4:AD
            X509v3 Authority Key Identifier:
                keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:09:98:cd:a1:19:37:f2:87:7f:73:54:00:e8:2d:ba:ec:
         8c:0b:16:15:28:4c:a4:79:cd:92:d7:d5:f6:79:c4:6c:d3:2b:
         ec:5c:f9:16:eb:fd:a5:09:0c:3b:6c:4f:16:e7:9d:1a:4c:bf:
         bf:02:86:d0:a1:6d:45:d1:51:e0:6a:6d:28:93:ec:0c:d4:1b:
         6e:0f:4b:f6:d5:cf:86:13:d3:bb:db:9e:ca:88:d1:53:90:f7:
         5c:32:01:dc:4d:47:ab:70:44:e3:7c:24:fa:f3:a3:4c:56:85:
         66:29:0d:ff:06:d3:c1:51:41:61:60:3f:19:b8:c7:bb:54:d9:
         37:73:50:a2:97:85:56:a2:d6:39:94:b5:89:2c:6f:4d:91:e9:
         4d:07:c8:dc:3e:bf:e7:ba:aa:22:41:2d:62:67:65:ce:e8:13:
         2d:8a:88:1b:73:98:f0:74:53:83:e9:da:4e:62:09:9a:1d:88:
         c5:8b:5e:f3:15:8d:37:ba:56:b0:3b:22:a9:f3:a5:59:57:c1:
         11:d3:9e:59:ba:b3:de:71:c9:db:f5:18:4f:db:ff:cd:d9:f4:
         6c:af:e3:26:89:c5:7b:07:dd:08:35:7e:ec:45:c1:94:03:e9:
         62:8e:33:6c:b1:51:67:26:24:62:c3:17:ad:39:4f:b0:c8:bf:
         9a:3c:d7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org