Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
File:                     9FE1BE90366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          hIcEiGJ2a4OVzLsXtVkwEhPxu5xaUEycLTVFqEClbUI=
Subject key identifier:   EE:BD:91:6E:C8:B9:74:5D:88:58:92:35:F7:EB:C0:D7:1D:18:48:47
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       07
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:01 +0000
ROA not before:           Wed 09 Aug 2023 03:20:01 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     137885
IP address blocks:        161.82.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:20:01 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305e0-51c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:ae:07:d2:09:78:59:a8:f1:a4:c2:3f:17:
                    a8:9c:a0:8e:3f:39:49:2d:a1:6c:3c:f7:fa:d6:8e:
                    2b:02:01:e1:95:66:51:a4:67:ee:32:cd:99:cb:b1:
                    75:a0:ad:9b:5c:96:98:ff:ef:8d:db:7d:24:04:40:
                    57:b8:72:f0:07:d6:8e:fc:04:c3:fa:e6:77:e3:8b:
                    f2:e2:e6:42:ca:3e:61:4a:1f:4a:2d:da:af:a4:a6:
                    b4:68:1a:5d:4e:a7:5f:77:ab:4d:eb:55:c4:8e:8c:
                    dc:8d:b2:29:25:1f:e9:82:f6:c6:89:1b:69:ee:1b:
                    fc:dd:53:6b:b4:c8:e9:5f:94:99:5e:80:83:f4:6e:
                    94:4c:15:0c:b4:8b:05:ac:a7:de:4c:72:ab:c0:ef:
                    d0:58:68:3b:80:24:92:5e:68:09:a0:6a:c6:8a:5e:
                    13:dc:d9:5b:d9:fa:1d:e8:40:b6:ce:66:44:6c:3f:
                    92:39:47:50:5d:90:17:83:ef:44:c7:09:86:d6:ec:
                    34:d0:28:39:a7:4a:d3:f1:66:79:e3:d1:dc:f6:97:
                    68:20:6d:43:71:c3:3a:35:13:49:f2:8b:2c:56:7b:
                    a5:bf:5a:d1:92:77:6d:2b:37:3a:40:3f:b1:8d:82:
                    20:0d:cc:f1:df:21:29:68:44:ac:5c:68:ac:5b:b8:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:91:6E:C8:B9:74:5D:88:58:92:35:F7:EB:C0:D7:1D:18:48:47
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:95:fc:5c:bf:1c:af:67:1b:50:7f:4a:3b:4a:8b:a7:36:4f:
         3c:1e:f0:6d:38:10:96:c6:f4:26:d0:dc:80:2a:24:a2:be:97:
         18:50:f0:89:30:85:0a:e9:9c:31:23:35:aa:43:12:34:24:9d:
         cd:10:9b:d4:3b:f1:94:25:2e:c6:42:b2:73:70:de:61:3c:1b:
         78:3d:ba:20:82:a9:7a:a3:dc:8a:18:a7:c4:b3:7c:d7:58:66:
         a6:7d:08:e2:7c:0f:4f:42:ea:ba:a9:52:41:26:c0:0d:b8:a8:
         14:40:93:89:af:04:98:aa:fd:63:53:56:2f:f6:eb:5f:2c:d3:
         7b:de:6e:76:49:c3:b5:98:91:0b:de:c4:01:ea:7e:3e:d4:40:
         43:98:17:d3:c2:ec:b0:52:55:ca:e6:f7:17:7e:a3:e9:69:3c:
         e9:37:89:42:36:ec:c0:4d:90:be:9f:77:c3:e3:f9:5f:14:f7:
         92:27:b1:e0:bb:cd:5d:7d:12:80:53:00:56:69:cf:1b:ba:a6:
         25:a0:b3:53:d6:a3:d3:bb:8e:85:90:cf:9b:41:45:bd:e8:09:
         16:de:48:15:e8:b1:e0:17:cc:89:52:2d:7b:14:7f:67:c2:02:
         6a:4c:ea:54:63:14:12:c6:24:74:c9:6b:5f:b2:7b:19:45:b9:
         42:68:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org