Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9F624142366311EEB376DC3AC4F9AE02.roa
File:                     9F624142366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          Q9Tb2O5ygm+wQndmZ7m1YCSjYxvgNqrLPM/NUOTh0b0=
Subject key identifier:   52:BA:9F:BD:4F:0B:0B:0F:B1:A5:FF:CB:94:80:80:60:55:2F:9B:B5
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       06
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9F624142366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:00 +0000
ROA not before:           Wed 09 Aug 2023 03:20:00 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     136393
IP address blocks:        96.30.64.0/21 maxlen: 21
                          96.30.64.0/22 maxlen: 23
                          96.30.64.0/24 maxlen: 24
                          96.30.68.0/23 maxlen: 23
                          96.30.70.0/23 maxlen: 23
                          96.30.72.0/23 maxlen: 23
                          96.30.79.0/24 maxlen: 24
                          96.30.84.0/22 maxlen: 23
                          96.30.100.0/22 maxlen: 23
                          96.30.107.0/24 maxlen: 24
                          96.30.108.0/23 maxlen: 23
                          96.30.111.0/24 maxlen: 24
                          146.88.36.0/22 maxlen: 22
                          146.88.36.0/24 maxlen: 24
                          146.88.37.0/24 maxlen: 24
                          146.88.38.0/23 maxlen: 23
                          146.88.42.0/23 maxlen: 23
                          146.88.44.0/22 maxlen: 23
                          146.88.52.0/22 maxlen: 23
                          161.82.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:20:00 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305e0-9847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:33:93:b8:53:59:f5:17:1a:0b:b0:e6:65:
                    00:ca:d1:e0:bf:b6:68:3e:69:78:d3:59:dd:e0:f9:
                    e6:14:09:cd:78:b0:ad:06:8f:ff:d2:77:26:bd:bf:
                    2b:fe:53:aa:e1:2f:97:fe:ae:17:44:47:a8:21:f7:
                    38:5c:9c:18:87:f7:ca:3f:10:25:28:5b:c2:d5:22:
                    69:85:8a:ac:64:b4:7f:ca:ef:c2:65:7d:ed:ff:fd:
                    09:ca:3e:63:13:ca:5d:04:ce:61:6b:a5:dc:6d:81:
                    1e:74:55:d0:70:26:60:bf:44:8e:67:d3:0f:24:72:
                    f1:9c:ca:a7:3e:39:5e:94:f5:75:d3:ad:12:37:1f:
                    fa:57:72:8f:79:8c:f2:b4:8f:f2:85:57:05:1e:75:
                    e7:64:d2:ca:7d:df:4a:5d:7b:3a:95:ed:0c:24:1a:
                    1b:00:90:45:cc:bb:41:56:be:a6:42:21:b2:43:51:
                    35:af:77:10:bc:d9:dd:d8:53:09:f4:4d:a2:e3:ec:
                    d9:43:31:2e:0d:55:8d:74:15:5d:82:97:89:d1:a7:
                    0e:a9:93:f8:bf:b5:96:a9:bd:da:8a:19:1f:eb:75:
                    13:e8:26:ca:56:1a:c4:d5:46:d4:69:46:74:e6:c4:
                    ff:d0:9a:07:69:12:12:26:cd:2d:93:91:0f:9d:20:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BA:9F:BD:4F:0B:0B:0F:B1:A5:FF:CB:94:80:80:60:55:2F:9B:B5
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9F624142366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.64.0-96.30.73.255
                  96.30.79.0/24
                  96.30.84.0/22
                  96.30.100.0/22
                  96.30.107.0-96.30.109.255
                  96.30.111.0/24
                  146.88.36.0/22
                  146.88.42.0-146.88.47.255
                  146.88.52.0/22
                  161.82.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:02:01:6a:a4:4f:5e:80:cd:9d:ed:e1:c8:ce:d9:84:17:
         dd:52:4c:69:8d:3e:17:58:a7:5a:52:b8:b1:65:a6:05:bc:06:
         9c:72:b8:55:7d:e9:7b:f0:8e:32:43:dc:c3:e5:26:86:9c:de:
         21:c1:5f:ae:f4:fa:58:8e:4d:3c:49:0b:dc:f3:5b:ee:dc:b1:
         a3:06:0f:32:52:fe:6b:25:69:cb:17:d4:31:c3:cd:de:e9:7f:
         e5:e3:89:d1:d7:4e:a5:ca:31:7c:fa:9a:d4:8a:b5:a0:f2:7f:
         d2:7a:eb:41:4a:87:c0:af:ac:54:b0:75:0d:7f:c2:2c:18:d4:
         82:f8:7b:91:39:e6:5e:b9:af:be:54:95:3d:61:e7:70:16:70:
         a5:5b:01:4a:6a:a4:46:bc:e3:aa:35:1b:e2:61:08:7f:6d:d9:
         b2:5d:87:69:24:f4:07:21:b4:58:49:a4:a3:0c:00:1c:c2:2d:
         9a:1f:40:6e:06:34:d8:18:90:22:e2:94:23:74:41:e3:ce:77:
         37:ba:7c:26:1d:fb:7b:fa:6e:7d:27:9c:25:c4:ba:e6:80:bc:
         22:c4:28:57:79:f8:3c:c3:78:f0:14:eb:5e:1d:5f:6b:f7:a0:
         e2:5d:75:dd:7b:6a:f2:a4:3e:6f:f6:e0:5c:40:4c:20:9c:1b:
         53:0a:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org