Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3D5366EE10FF11EFAFACE132C4F9AE02.roa
File:                     3D5366EE10FF11EFAFACE132C4F9AE02.roa (raw, json)
Hash identifier:          BhhXYnYKtUeF/qy9eWU5o2EJi4HJ26J5lurKKuJJxCg=
Subject key identifier:   0B:4A:ED:70:F9:37:0E:70:A9:7B:3B:3D:30:A3:49:87:0C:D1:64:37
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0111
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3D5366EE10FF11EFAFACE132C4F9AE02.roa
Signing time:             Mon 13 May 2024 08:03:10 +0000
ROA not before:           Mon 13 May 2024 08:03:10 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151931
IP address blocks:        157.66.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: May 13 08:03:10 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6641c93e-f3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:20:fe:21:52:ae:30:f4:c9:14:d1:e0:8f:
                    a0:d7:b8:5f:3b:bf:18:d2:9f:fa:06:1e:dd:70:c0:
                    c7:18:74:f1:96:e1:9d:25:12:13:9f:4d:6c:8b:c3:
                    53:33:c0:73:0d:65:a3:25:48:65:5b:6c:6c:b4:6f:
                    5f:0a:15:11:6c:4b:07:a9:1e:94:57:9f:28:7e:b0:
                    4e:97:ed:42:64:a9:31:9d:96:f2:8a:a7:f5:f8:1c:
                    1c:4c:53:f3:2d:f5:82:74:ab:d3:0f:c2:6b:87:38:
                    62:71:31:fb:70:19:b2:ff:50:a9:9c:64:a5:52:2f:
                    44:e2:16:bd:1d:ef:f0:8c:f3:3a:b1:78:2d:e8:7d:
                    e1:f4:ae:b4:6c:ba:c7:03:95:b8:b0:fb:70:3f:1e:
                    82:4f:e7:52:95:f7:1c:67:31:a8:b8:d7:ba:99:77:
                    d0:17:b8:30:6d:01:04:4a:c1:6d:cb:fb:2e:00:fa:
                    96:ce:6d:1d:ff:ea:b3:e7:6b:b2:1d:b7:84:cd:66:
                    eb:f7:b3:6a:45:6c:2e:1d:0a:8e:c2:6e:99:6c:13:
                    17:e0:7b:3a:df:0e:ed:08:4d:2c:63:45:18:c7:81:
                    7a:98:e0:5c:a0:14:cb:32:58:ba:7d:a6:bb:11:c3:
                    89:66:13:19:63:8a:19:56:f4:4e:a2:b9:d0:74:48:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:ED:70:F9:37:0E:70:A9:7B:3B:3D:30:A3:49:87:0C:D1:64:37
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3D5366EE10FF11EFAFACE132C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:82:ae:96:ce:60:55:db:9d:71:78:bd:43:34:8e:60:74:
         23:21:62:50:16:50:eb:10:3a:cb:c0:9c:69:b2:9a:50:70:8f:
         66:c9:b2:ce:f3:67:dd:6a:c4:cb:46:ec:84:f4:cd:33:b7:04:
         5d:10:89:74:52:38:01:6d:b1:1d:74:ac:0e:47:f4:49:7a:b7:
         4a:5e:01:27:a9:7f:1a:17:77:21:bb:a5:6c:9c:02:4d:c8:91:
         68:3f:7a:73:3f:b1:e1:c6:15:36:59:d5:da:d5:1b:87:a9:d8:
         d9:f4:7a:62:22:47:50:73:1d:72:2d:b8:a9:5f:39:49:e0:59:
         dc:1f:d2:e3:cb:c6:12:b9:4f:19:68:64:c3:70:46:da:3c:54:
         2c:09:af:d4:35:3f:42:18:af:dc:78:34:69:5e:43:f7:27:44:
         be:98:5b:1b:94:f7:fa:1f:ea:6d:ab:04:9f:f3:09:dd:5e:4b:
         1f:28:8b:42:6f:22:41:fc:b3:ba:aa:fd:fa:d4:4e:0a:72:04:
         dc:09:52:1a:fe:c2:8e:24:79:0b:d7:ff:12:4a:3d:9c:ac:fc:
         97:f3:2e:81:ed:24:fd:0b:c3:72:c9:30:6b:5f:8d:04:e5:af:
         99:e2:b4:67:b3:43:4d:e6:17:e7:d9:f4:09:bf:cb:4d:6f:74:
         b6:09:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:56:53 2024 by rpki-client on console-ams.rpki-client.org