Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
File:                     A22F20AC366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=
Subject key identifier:   4E:66:FD:C4:AF:26:A3:C8:C2:48:7C:97:53:9C:14:98:A6:8E:C1:CA
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       CE
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:22:03 +0000
ROA not before:           Tue 25 Jun 2024 06:22:03 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     141454
IP address blocks:        161.82.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 25 06:22:03 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a620b-d51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:28:84:b4:86:a7:c0:d8:9a:64:7e:5e:32:
                    88:42:05:7a:d5:e9:28:d6:b3:aa:5e:2e:e3:e7:ef:
                    70:59:7e:ea:c4:b4:98:9d:5b:29:10:80:5f:15:74:
                    16:38:26:99:9d:13:b6:f1:2b:47:81:03:5a:67:f6:
                    56:29:17:28:33:f0:2d:39:7e:c8:31:56:14:0f:1f:
                    18:8d:aa:de:f8:6c:56:be:14:1b:7a:66:21:6a:16:
                    75:2e:8a:23:b4:8e:d8:4b:d4:a5:87:f2:4c:5c:47:
                    8e:77:ed:6a:67:4f:b8:18:23:68:f7:c5:dd:f0:80:
                    39:a8:46:88:98:ef:5a:f3:78:4b:e1:df:d9:09:dd:
                    38:c6:8b:42:8e:61:fb:a1:07:fa:86:b8:13:80:3f:
                    26:ef:5a:65:9c:cf:27:be:a7:4f:16:57:72:c3:81:
                    11:d7:67:18:36:b7:f2:5f:87:cd:3e:c6:3b:e2:a1:
                    4b:43:54:02:29:ee:07:66:de:88:f3:f3:69:9f:a4:
                    43:28:aa:a6:32:09:1d:0a:c3:ae:89:41:6c:1d:17:
                    a0:6a:8e:0a:33:06:58:01:db:69:b9:93:a8:ec:c2:
                    e6:24:ff:18:08:d7:fa:39:97:ba:76:f9:55:b9:b0:
                    97:2b:d0:35:4e:1c:c6:12:8f:e2:c3:2a:20:73:10:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:FD:C4:AF:26:A3:C8:C2:48:7C:97:53:9C:14:98:A6:8E:C1:CA
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A22F20AC366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:a7:57:fd:01:f1:26:48:06:50:49:aa:0f:f6:8a:36:85:
         a1:23:da:0d:6b:1b:4b:d1:0e:46:b0:7d:62:28:27:2c:63:aa:
         b7:a2:44:79:c4:65:e6:46:92:a1:e4:ee:40:31:16:12:7a:fa:
         f1:12:b4:ca:09:1f:9d:7b:4d:dc:9a:39:ce:07:1a:2b:4d:73:
         1e:5c:79:ff:da:83:d7:32:8c:39:69:bd:f9:fd:9b:e7:3f:29:
         ea:37:14:2f:0e:14:39:ab:a8:f1:af:4b:f9:23:47:39:31:31:
         8d:1e:28:01:24:9b:00:96:3a:f1:52:1d:5c:cf:fc:4a:f0:5e:
         f8:d3:f5:e7:f6:8c:c5:17:38:97:61:12:a7:88:09:06:c4:7b:
         e3:18:37:7e:3a:61:da:ec:b0:50:2f:eb:98:b6:76:79:41:d3:
         4f:60:c2:d6:8b:dc:ba:88:74:5c:c4:cf:50:38:de:29:58:ca:
         3b:f0:38:0d:a6:40:b9:ef:20:d3:cf:d2:53:b2:41:ec:95:a2:
         90:27:37:90:f1:4c:82:54:96:1d:5d:d0:af:fa:19:33:78:b4:
         40:57:b6:7e:2a:69:23:3a:0f:28:f5:80:4f:76:da:01:b8:10:
         eb:65:a6:4e:37:f1:6f:7b:ce:87:0b:c0:52:e0:9c:d9:90:c3:
         9f:72:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:57 2024 by rpki-client on console-ams.rpki-client.org