Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
File:                     06F76408F7DA11EE95AA666EC4F9AE02.roa (raw, json)
Hash identifier:          YFkGKXRD2RlHKkE/hIe5miR6jPYNA7ii5/qaSipovbE=
Subject key identifier:   B7:89:78:19:17:15:18:A3:D3:A8:12:04:2B:29:AD:45:CB:CA:39:01
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       C3
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
Signing time:             Thu 11 Apr 2024 08:03:49 +0000
ROA not before:           Thu 11 Apr 2024 08:03:49 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151913
IP address blocks:        157.66.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 11 08:03:49 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=66179964-5d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:06:a9:30:ad:8d:dc:58:53:0f:a2:a2:ab:
                    c4:3a:15:3a:8b:a0:f6:76:cd:14:14:c5:3b:6d:d7:
                    da:b3:4a:db:0b:ab:2e:cf:c5:34:0b:f0:c3:67:a3:
                    30:58:fb:d6:86:59:fb:bf:9a:9d:6e:2b:4f:31:45:
                    c1:b5:e0:92:fa:23:67:63:a0:f2:ad:d4:f4:4d:5a:
                    74:54:25:21:ea:ec:a1:41:18:6a:62:14:36:c3:ba:
                    2b:d6:69:b4:46:2f:a0:a8:75:1a:30:60:23:37:50:
                    ba:b4:04:38:c0:ca:72:29:6c:05:51:bf:1f:de:ae:
                    c8:e5:aa:b8:f3:99:c5:30:0f:86:f7:f7:07:1d:36:
                    dd:d2:37:49:fb:22:d6:8a:8d:be:d6:5d:2b:67:5b:
                    81:74:e6:b7:97:48:58:11:0b:3e:a4:a2:1f:51:6d:
                    3c:86:b6:5b:1e:3e:08:25:ac:c7:04:28:dd:e1:6d:
                    ad:e7:4b:9c:aa:01:f0:2e:a3:36:bd:f0:5a:95:6b:
                    d0:53:66:f7:6f:ca:ee:44:c2:87:ac:bc:c3:6c:b6:
                    7b:54:51:ef:d5:09:98:c9:c1:f3:96:54:dc:1b:ec:
                    ca:e5:b8:e6:42:dd:a5:26:5c:e3:ba:be:63:27:30:
                    37:0c:3d:78:02:af:d8:fd:cf:35:ef:3c:33:4b:2c:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:89:78:19:17:15:18:A3:D3:A8:12:04:2B:29:AD:45:CB:CA:39:01
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:fd:0b:62:82:c4:f2:5c:de:d2:cf:9c:b7:0a:92:4d:fa:
         ea:24:8a:84:dd:60:87:4e:aa:5a:78:3e:ea:48:5d:69:90:1a:
         ad:60:3f:95:7d:64:ab:54:cc:16:c8:e5:bf:2f:62:92:21:6a:
         db:d1:f4:fe:3a:6c:d4:b5:03:f1:63:85:18:0f:9b:67:48:45:
         fb:08:30:49:c7:7b:f3:32:b0:e4:5a:e0:36:c4:d3:87:a4:0a:
         2d:fa:0a:63:87:f5:7d:61:25:33:3c:c5:c7:44:39:65:1d:64:
         8e:7e:3a:fe:85:f1:42:a6:e0:0e:51:38:92:00:bf:1c:99:2d:
         a7:de:a5:ce:09:51:74:e0:c2:52:2e:6f:2a:c1:ee:a3:25:ca:
         7e:9b:ac:db:0b:cd:59:55:94:89:44:97:66:2f:f6:1f:2b:8a:
         38:07:41:03:be:c8:e1:e6:6b:3e:0b:f8:37:07:1a:b5:ed:b1:
         62:cc:52:e1:4b:13:86:12:4e:1a:47:cc:9f:bf:d3:b0:fc:b3:
         0b:0b:d1:14:5a:32:b1:db:84:c1:83:8a:9e:b9:06:d4:6b:51:
         02:43:1c:29:42:d1:de:94:74:ba:4b:6a:71:a5:2f:b0:74:fd:
         40:b6:4e:7d:a2:1d:01:18:fd:02:41:06:64:1a:e4:e0:6b:36:
         00:0f:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:32 2024 by rpki-client on console-fra.rpki-client.org