Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
File:                     D5CBAE82014011EF9545275FC4F9AE02.roa (raw, json)
Hash identifier:          nUZ5j/3alXE42neUYbmJ6QF0CitIShhVBHeHFo2FTJs=
Subject key identifier:   41:CD:B0:66:9D:5D:4D:83:5F:94:71:C6:9F:F9:CB:6F:E8:54:E1:0E
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       DD
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
Signing time:             Tue 23 Apr 2024 07:12:25 +0000
ROA not before:           Tue 23 Apr 2024 07:12:25 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     151923
IP address blocks:        157.66.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 23 07:12:25 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=66275f59-570c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:99:63:01:35:ae:23:c9:2c:d7:18:77:c4:
                    b6:71:3a:0b:a0:86:e3:8c:29:2a:a6:e8:5a:d1:37:
                    7e:6a:e9:e3:b4:4a:a2:61:70:df:a7:64:9b:78:96:
                    2d:f3:dd:4d:39:d9:96:fd:00:09:7b:a4:7d:ec:a2:
                    d5:81:5f:d4:94:a3:49:5b:db:bb:fd:55:7e:cc:1a:
                    5b:c0:10:c7:c4:6d:d2:df:5f:39:e3:22:84:16:e0:
                    4e:c3:2b:77:5d:55:6b:47:76:32:e4:bf:19:49:a6:
                    91:be:49:fe:d9:b2:8e:96:4e:9f:07:65:91:ae:a3:
                    28:7b:2e:94:c3:33:c6:60:6f:73:f4:f3:29:c5:ed:
                    11:ce:83:0f:26:d5:ad:77:89:31:3d:a5:9d:2d:30:
                    9e:6e:79:96:e2:2f:6b:d0:af:58:cb:36:7e:e5:09:
                    2f:26:15:a6:7e:3e:ed:41:61:8a:7e:30:4e:ab:2d:
                    98:09:8a:d4:0c:35:a6:e2:04:90:07:d0:f2:25:92:
                    8c:a0:00:60:a3:04:e3:e9:b8:0f:06:77:0c:1c:fa:
                    e6:e1:45:32:4d:d6:94:46:10:d4:20:d0:12:d4:40:
                    6e:a9:59:e2:ff:3b:f6:52:e9:f2:8b:c5:c4:95:e1:
                    63:30:2f:9f:21:e2:3b:c4:68:ac:19:2a:19:8a:f1:
                    df:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CD:B0:66:9D:5D:4D:83:5F:94:71:C6:9F:F9:CB:6F:E8:54:E1:0E
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:37:20:55:0a:98:71:a3:b2:b1:32:63:8d:be:cb:db:bb:
         04:0e:fa:b5:de:56:57:f1:27:6d:13:f2:36:5d:9d:98:e5:59:
         a6:14:b9:9b:05:0c:67:9c:e8:d5:71:3b:e1:76:c6:1d:ab:83:
         4c:22:92:2e:30:49:f0:33:f1:41:81:3b:87:86:2d:a6:07:93:
         38:56:fd:a4:43:d1:58:a7:14:73:61:bc:be:be:09:fe:0b:4e:
         4a:69:a1:e2:1f:23:82:65:22:b6:81:90:61:61:8a:7b:4c:a0:
         c4:cc:a7:a6:66:f4:16:a6:de:59:ca:6c:63:58:9f:48:9e:f6:
         c9:9f:9c:17:00:a4:cc:d7:9f:8c:50:52:a2:c2:eb:3c:84:84:
         b2:1a:69:5d:cc:87:92:ef:5b:b4:df:7b:78:c5:f7:f0:f9:86:
         36:c4:84:9d:71:75:ba:f0:29:77:8e:01:8b:99:26:24:24:37:
         c9:99:81:9c:d2:02:3e:bc:f0:bd:74:3c:18:5c:08:22:c2:9a:
         85:e7:e7:c5:72:f8:8e:be:52:6b:f1:ee:08:56:8b:02:20:45:
         31:72:ae:49:9c:89:6c:60:3a:4c:a5:4b:04:fc:c8:f1:2b:a7:
         62:61:5e:c6:7b:f8:95:0a:6f:c9:25:c0:6d:bb:1b:d5:ca:95:
         e7:4a:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org