Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa
File:                     75A05C926E8211EFA843807EC4F9AE02.roa (raw, json)
Hash identifier:          MjTh8AW1DZ7u20XYuEekJB2oVk8O+HGzspm35tkqSi4=
Subject key identifier:   C1:06:75:E6:D5:0F:37:22:FD:27:86:54:75:A7:BF:8B:36:37:2B:25
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0107
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa
Signing time:             Mon 09 Sep 2024 08:06:47 +0000
ROA not before:           Mon 09 Sep 2024 08:06:47 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     133956
IP address blocks:        83.118.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 02:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Sep  9 08:06:47 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66deac97-91b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:10:9e:1d:3f:12:13:30:3e:8d:98:11:77:
                    51:3e:cc:35:09:e6:eb:c1:44:19:6f:14:05:d1:9c:
                    b7:f3:75:07:a0:38:96:e6:69:4f:7c:7b:8b:8f:19:
                    3c:89:66:e8:c5:08:47:ed:b4:2b:44:0a:b0:ed:f5:
                    e6:f9:0a:35:46:09:0e:3b:e9:93:b4:e4:81:95:5d:
                    af:17:6b:6e:e6:90:87:61:69:88:e6:1c:3e:91:8e:
                    4a:d3:4c:af:cc:7d:87:6a:e6:a0:54:80:1d:53:2b:
                    7f:e3:9d:1f:a4:79:45:c1:d1:e1:96:b6:16:ed:6c:
                    a7:ed:58:2f:86:73:c9:b3:01:30:fe:94:49:b1:f4:
                    74:27:13:35:5d:f8:9b:49:19:35:88:c2:4d:2e:3c:
                    2d:5f:ef:4a:08:3a:24:56:94:68:99:96:47:cd:08:
                    75:aa:1d:24:7e:7b:a5:1d:0e:91:71:0e:f4:3a:71:
                    94:8e:71:fc:53:51:f9:25:f6:90:3c:50:77:58:88:
                    26:56:51:25:fd:98:45:da:5b:a8:1f:f7:13:fa:39:
                    c8:4a:d5:d4:50:50:e3:ad:7d:e8:90:04:d9:02:b8:
                    bd:6b:5a:a0:56:21:af:40:bb:ac:b1:63:f7:49:d1:
                    ba:d5:5f:3e:2a:d0:4c:d3:57:e5:cb:cf:e1:70:42:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:75:E6:D5:0F:37:22:FD:27:86:54:75:A7:BF:8B:36:37:2B:25
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/75A05C926E8211EFA843807EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:23:74:24:db:17:3e:19:0b:a8:c1:06:3f:18:71:80:a0:
         af:96:17:ae:98:3e:79:ba:fa:eb:b6:55:7a:d7:f3:a9:a4:36:
         22:2e:be:b7:47:a3:26:6f:f0:4d:8f:b9:92:f2:9a:3f:9f:3d:
         14:45:fe:ef:60:2a:81:9a:dd:5b:39:dd:45:fe:2c:9e:d7:41:
         25:49:aa:ba:39:56:3c:35:73:73:82:a1:cd:37:56:9c:9f:a5:
         e4:04:06:07:b4:e8:b0:48:c0:62:fe:f6:fc:2c:06:52:c0:19:
         7b:1e:5d:3f:43:73:3c:19:cd:c6:c9:1e:fb:e0:7f:82:45:33:
         78:53:c4:71:df:71:8e:a4:5b:0c:65:17:2f:46:c5:5e:32:c6:
         4c:cc:1e:3c:14:78:c3:b4:b9:b3:79:a7:f7:4f:c1:96:b2:41:
         ce:60:56:f7:d8:57:97:a3:13:6e:94:c3:bd:d8:cb:a0:98:6d:
         7c:ee:5f:28:c6:bf:9f:2d:18:7c:11:e9:b8:d2:ed:0c:29:e2:
         b2:c5:e5:03:b5:2e:a1:b2:06:e1:42:8c:72:c9:d6:4b:b4:bb:
         68:0d:87:d9:7b:69:7f:ce:0b:79:f0:14:47:1a:71:b2:6d:d6:
         dd:ab:25:78:3c:0a:ff:5c:29:c3:b1:48:19:e6:a7:2f:da:66:
         0d:2b:c0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org