Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa
File:                     A1C2C588366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          q89V2avvhB7Iwplh7NyUyrL6aq+UrYnzPqsGrW4jEQY=
Subject key identifier:   B7:12:77:A4:00:5B:EB:3B:42:C2:D8:8A:BA:49:E4:DE:E7:96:2D:57
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0A
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa
Signing time:             Wed 09 Aug 2023 03:20:04 +0000
ROA not before:           Wed 09 Aug 2023 03:20:04 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     140660
IP address blocks:        161.82.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 03:20:04 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d305e4-ddd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:c6:ef:e1:d5:f5:2d:18:e9:50:39:ad:3d:
                    cd:33:73:bf:73:c5:7d:a6:3d:d3:28:bb:41:20:6a:
                    d9:0a:c7:ea:a4:d1:a3:92:1e:03:71:55:67:11:32:
                    1e:3a:a4:2d:9d:6f:ac:d2:09:78:27:97:9a:92:d0:
                    54:49:70:0b:16:b8:77:24:1d:dc:8e:35:2d:3c:c5:
                    8e:55:83:b4:9f:a5:ab:d3:f9:c4:a9:db:93:7c:79:
                    15:4f:87:4a:97:37:70:48:1a:a9:d7:95:41:6e:b0:
                    0b:70:9f:b0:dc:9c:2f:77:00:e9:de:c7:e0:f8:ac:
                    f4:87:fe:39:61:30:94:89:70:fb:e1:09:17:72:c1:
                    2b:33:7f:3d:da:a7:d4:31:89:47:76:0d:dd:2f:1e:
                    52:bd:dc:b4:61:8f:d1:63:ae:7b:26:11:0a:73:a2:
                    23:29:c8:cc:e4:7f:c9:d0:b4:70:ea:4f:22:21:e4:
                    e4:c0:61:22:97:da:3e:4d:e1:90:b9:28:75:71:0b:
                    3d:d9:ee:79:d7:a9:95:6d:d8:17:8b:0c:a4:6f:3d:
                    49:44:91:b1:2d:f8:82:1b:1c:0d:d4:27:79:65:e6:
                    8e:fd:12:cc:67:27:fb:fe:4b:de:83:f4:88:e0:b3:
                    4b:a4:f1:41:fb:54:95:69:6d:4b:8d:85:07:38:18:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:77:A4:00:5B:EB:3B:42:C2:D8:8A:BA:49:E4:DE:E7:96:2D:57
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A1C2C588366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:1d:b5:18:aa:4c:8b:89:fa:9f:8c:13:de:6a:56:b9:ad:
         da:cb:f6:3f:d6:fe:00:ac:fb:c2:2a:6f:61:34:79:7f:c5:7f:
         c7:96:99:11:b6:9e:25:ed:ec:af:9c:fb:a3:7a:35:21:ca:a6:
         90:e2:f5:33:ad:f4:e6:46:25:0f:d9:17:32:91:6c:d1:c0:3d:
         65:89:dd:c8:32:1a:12:db:cc:09:8d:56:39:9c:54:6a:15:a0:
         79:d6:39:2e:62:68:60:bf:ec:ae:50:c2:dc:a1:0d:e3:af:e5:
         ce:a6:71:e9:76:87:47:8e:90:fd:b4:19:18:d7:8c:f4:92:42:
         d5:8a:17:1e:7e:7c:51:1e:f6:ff:2b:8a:20:5f:9c:26:17:3e:
         9d:22:77:64:8c:bd:25:fc:85:63:c9:8b:43:d3:67:d3:eb:4f:
         2b:2b:17:6a:d0:31:02:62:7b:e2:3a:95:b8:c2:9e:01:85:17:
         eb:fd:ba:6c:24:30:de:4b:4e:d9:b1:ff:3b:a5:69:17:73:ce:
         0e:bc:c6:ee:2f:83:f5:6d:cc:e0:53:65:39:7c:bd:db:31:8e:
         d2:bf:c8:00:c8:c6:41:5f:17:19:d6:36:c1:7d:dd:b9:55:95:
         18:77:88:ed:3f:9a:e0:70:50:4d:ff:08:3e:c9:0c:3f:b5:8b:
         2b:42:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:35 2024 by rpki-client on console-fra.rpki-client.org