Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
File:                     866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json)
Hash identifier:          3AqN5CbYpWEtnxWi7Et2B3/yQBF6JM8e4+/OE5L6X9w=
Subject key identifier:   B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3
Certificate issuer:       /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
Certificate serial:       07
Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
Signing time:             Wed 21 Aug 2024 14:49:10 +0000
ROA not before:           Wed 21 Aug 2024 14:49:10 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        64.251.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Oct 2024 06:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9
        Validity
            Not Before: Aug 21 14:49:10 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66c5fe66-5def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:65:5b:2d:78:d2:62:25:d7:11:4d:89:06:
                    3f:d9:53:12:8c:67:8d:99:a0:61:9b:3b:b1:e0:ef:
                    1d:f4:f1:40:a8:5c:e3:4e:c7:8e:d3:a9:52:95:8d:
                    1f:6a:43:8d:d8:25:ff:cd:2a:c9:fc:cb:2a:6c:11:
                    02:6a:68:73:c6:27:ce:56:67:2e:52:62:b3:6e:b7:
                    f3:ee:50:4c:01:5d:d2:39:52:7a:40:e0:bb:3c:42:
                    e6:4e:b5:ef:7a:2c:87:bb:46:5f:6b:0a:44:95:30:
                    30:b2:6a:6e:ec:29:92:e5:d0:a1:9e:2b:7f:42:87:
                    81:7f:f1:6a:9a:89:58:89:4b:ab:95:ab:b7:d0:e4:
                    ce:b8:38:5d:94:ed:04:c8:4d:8d:8d:30:28:a2:e3:
                    1a:6e:24:64:87:65:41:d4:92:dd:25:f2:83:78:9a:
                    3f:ec:03:b1:bf:5f:30:bd:23:90:e4:9f:1b:1c:39:
                    41:84:bd:10:71:d1:49:2e:aa:c3:2f:44:62:8f:d4:
                    0c:20:f8:8d:1c:58:ad:05:70:ed:d5:94:56:9a:67:
                    12:d8:bd:37:dc:59:9f:d7:ba:7d:7e:37:28:9b:fc:
                    d1:d5:e7:f4:d2:10:c5:53:8c:27:c2:0d:8c:42:db:
                    16:45:7b:86:dd:82:bd:74:2f:43:f6:ca:db:20:55:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:ED:48:34:0C:38:C0:4F:50:DE:93:8A:C3:26:C1:8B:D2:5B:E3
            X509v3 Authority Key Identifier:
                keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.251.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:62:8d:71:01:bd:f3:23:2e:db:72:a6:ca:ee:71:31:74:55:
         f1:6d:5a:04:df:1e:33:a9:61:48:d1:54:24:72:83:21:db:ad:
         24:4a:55:87:ef:05:8b:c1:ee:69:0b:f4:19:ba:d0:12:4b:9c:
         f9:d1:08:bf:60:e6:26:61:a2:67:f2:6f:27:be:cd:02:e4:94:
         04:b9:c4:1b:22:3d:9a:d3:7f:9a:e1:3d:e1:71:2b:62:de:da:
         c3:67:6a:16:33:74:40:7f:ab:a7:bc:4e:c9:68:bf:90:41:2d:
         2d:03:e3:78:d7:47:f3:5c:8e:d7:75:eb:3d:81:74:ba:2b:d7:
         00:78:99:e6:c8:a9:a4:97:71:4d:ff:7e:fe:50:56:ba:26:98:
         87:f3:86:51:80:3d:34:0e:96:e5:86:73:44:41:88:bb:30:29:
         0c:0e:be:b2:bd:61:10:a0:ba:64:e8:b2:57:64:d3:1d:f3:08:
         d5:ec:f2:c0:bf:6b:91:a3:3c:3e:77:2e:9a:b0:da:97:ce:95:
         b2:29:75:b8:74:0c:27:43:d2:23:3a:61:a9:53:dd:9e:2c:7e:
         ba:59:8b:4e:d1:38:28:de:e3:86:da:ba:0d:c6:ca:5d:56:f8:
         eb:eb:30:8e:cb:fe:eb:33:16:66:76:cc:09:e5:2a:7e:57:7e:
         f6:d1:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 07:54:14 2024 by rpki-client on console-ams.rpki-client.org