Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5E66667ED3AE11EB908D6529C4F9AE02.roa
File:                     5E66667ED3AE11EB908D6529C4F9AE02.roa (raw, json)
Hash identifier:          BQMNUmRe28V3TXqPHfb6OyHLsVMCwjRHcSKj/c+/mxU=
Subject key identifier:   C7:B5:4E:4A:27:2B:10:A8:10:30:FA:04:90:6C:DA:60:20:72:D2:E5
Certificate issuer:       /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial:       10FD
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5E66667ED3AE11EB908D6529C4F9AE02.roa
Signing time:             Fri 12 Apr 2024 17:55:53 +0000
ROA not before:           Fri 12 Apr 2024 17:55:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9902
IP address blocks:        146.196.88.0/24 maxlen: 24
                          146.196.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
                          rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 17:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4349 (0x10fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
        Validity
            Not Before: Apr 12 17:55:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=661975a9-2b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:72:3a:b2:85:17:bc:16:3f:71:89:90:47:
                    0a:3d:f2:db:e5:ae:2a:ee:ee:f9:ce:a3:e3:81:b2:
                    03:6b:4d:4d:40:a7:44:ed:2e:c4:ec:7e:a9:11:27:
                    f6:ea:37:f3:e1:84:06:fa:ae:5c:b8:67:73:94:c1:
                    3b:ef:59:39:04:92:02:4a:75:3e:19:0e:1d:28:e2:
                    41:03:50:82:b4:9a:1b:a0:ed:a9:56:f0:6f:ae:e8:
                    fd:11:7e:98:66:2f:c2:26:ab:86:ad:f3:3e:40:a9:
                    3f:94:fa:77:d1:06:53:7b:b3:39:01:4a:f0:93:8a:
                    c2:47:0c:5e:9d:cd:08:6e:d8:7a:9a:91:50:be:ca:
                    9e:ac:1d:9e:e8:3b:60:03:99:a5:a7:61:6c:1f:52:
                    c1:c5:4a:e8:ca:56:b5:93:f1:ef:37:c9:7f:a0:fe:
                    dc:06:3e:0c:10:c0:7f:e8:f4:62:2d:b5:3e:6f:f2:
                    d6:9b:54:0f:0b:fb:22:98:b0:49:8f:7f:d7:35:75:
                    c7:68:cb:e1:bf:b3:19:6f:ca:e8:f7:40:94:ae:ab:
                    db:08:dd:7d:d8:32:a6:3b:d2:40:ff:e2:b0:74:30:
                    90:67:b9:4d:4c:16:85:34:cb:40:d2:93:62:32:ad:
                    87:86:5f:a3:8b:fa:44:2e:ef:cf:01:51:50:48:21:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:4E:4A:27:2B:10:A8:10:30:FA:04:90:6C:DA:60:20:72:D2:E5
            X509v3 Authority Key Identifier:
                keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5E66667ED3AE11EB908D6529C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.196.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:6c:03:2d:ac:9c:47:e8:6e:4b:da:1f:3d:a7:f1:d5:6a:ce:
         ae:c1:6a:57:7d:4f:d5:5b:a5:f1:7e:8d:b1:b8:f9:26:01:b4:
         4f:df:96:14:b1:b4:52:6a:42:27:11:ba:5c:ce:a4:3c:93:b8:
         16:e8:5c:8e:0e:5a:d5:19:88:96:8b:47:55:1e:f3:d9:57:5d:
         86:7b:c1:5b:ce:89:b6:ce:8f:74:7e:3c:ad:a5:92:bd:7d:59:
         7a:2a:5c:47:68:8b:d3:37:b2:e7:7a:9f:8b:27:46:aa:df:7e:
         17:13:89:ff:e0:37:41:21:ad:86:bc:c3:7d:32:39:45:71:40:
         7c:60:eb:17:23:29:f0:1e:e8:a7:9e:55:a1:bd:84:b8:a6:ff:
         04:cf:bc:dd:3b:a6:98:3e:b1:77:10:08:a4:3b:d1:f5:b7:4c:
         81:37:13:97:ad:bd:b3:b8:64:a7:b0:99:0c:70:93:11:22:d1:
         53:67:25:00:4a:eb:8e:08:3f:1f:2d:cc:3e:8a:ab:0c:ec:c0:
         75:50:87:fc:51:bb:61:05:6f:f3:05:a6:65:a9:7b:0b:44:b9:
         07:4f:4c:7b:d7:44:09:8d:c3:ba:2e:6b:e0:f6:e8:58:b0:ba:
         ee:92:fb:5b:13:83:e7:8b:a9:94:1d:df:11:f1:eb:45:21:1e:
         18:90:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org