Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
File:                     D5CBAE82014011EF9545275FC4F9AE02.roa (raw, json)
Hash identifier:          +YqJWO12No4diBVNLOqA7CyHvDThwqfGGH9OUk3IcnI=
Subject key identifier:   36:DD:44:DA:60:23:2B:08:5E:41:25:42:09:4D:DA:47:BE:88:67:BF
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0296
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:31:09 +0000
ROA not before:           Thu 05 Sep 2024 03:31:08 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151923
IP address blocks:        157.66.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Sep  5 03:31:08 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d925fc-6e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:da:cd:0d:0f:7c:f1:d9:1d:bc:f4:bf:46:a6:
                    61:2e:b8:98:41:e8:a9:bb:b2:79:0d:bf:84:b9:e4:
                    ac:96:25:5c:dc:b9:29:52:ff:f1:15:c1:e4:4e:a9:
                    e4:bb:b5:c3:29:53:13:71:14:b8:1b:fc:1f:6c:81:
                    43:81:84:01:53:dc:86:b0:a3:8f:60:b0:29:8d:01:
                    d4:4c:4a:cd:a0:05:e5:40:52:83:cc:e0:9f:d2:99:
                    91:a9:b5:6a:04:77:f4:77:39:fb:99:03:0d:7e:1a:
                    88:bf:f4:40:c6:88:7b:a5:64:27:cf:c8:37:1b:ea:
                    ef:6d:6b:b6:da:f5:46:65:8a:3b:b1:05:0a:bb:d1:
                    b0:1b:2f:40:76:ed:60:36:4c:71:62:6e:7c:da:4a:
                    c5:90:00:90:17:cd:ab:3e:33:75:b2:22:4d:8a:75:
                    3b:37:1d:0d:44:28:6e:a8:87:e1:94:93:ce:3c:f3:
                    26:df:c6:6b:a0:22:47:1c:cb:ce:be:1f:52:1c:08:
                    3c:f7:50:ee:80:93:1a:b9:3f:45:27:b7:b2:a1:7a:
                    c6:3a:a4:d4:49:f9:bd:e8:a7:51:f4:54:ae:68:ee:
                    9a:3b:66:73:fc:28:ac:c2:51:f4:ba:0a:d3:27:85:
                    c2:11:9c:6c:4d:f9:2b:71:77:e2:8a:f8:65:a8:a5:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:44:DA:60:23:2B:08:5E:41:25:42:09:4D:DA:47:BE:88:67:BF
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D5CBAE82014011EF9545275FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:1c:8a:9b:f3:2e:cc:52:ba:86:c5:5a:63:22:42:c6:a0:
         09:7d:0a:0e:58:a9:aa:80:a1:7d:6d:01:07:3c:d0:0a:cb:0e:
         54:95:ea:33:f8:be:c2:00:3f:6b:d7:8a:f2:f6:24:11:54:37:
         a6:16:c6:24:d8:9e:af:e2:01:44:d7:2d:d5:b4:56:e0:e4:7a:
         fe:1b:1c:6e:78:c1:fa:f0:fb:a5:66:38:94:77:06:51:c6:02:
         46:43:bb:7d:80:b2:18:fd:0b:83:a4:54:5d:63:5b:d0:c7:fb:
         95:87:6f:8a:d6:3d:5a:6e:f2:98:50:6a:74:9a:87:d7:f8:21:
         05:4e:ff:cf:c9:4a:be:38:fc:e5:af:4d:b8:d0:0c:5f:c3:f9:
         58:7a:67:28:60:ce:c1:50:5f:25:f9:6b:01:d5:a1:fc:96:2b:
         f3:66:b9:ff:1e:d3:b1:bb:2b:5b:d0:76:cc:cc:62:4a:91:60:
         52:52:5e:13:88:d9:ab:73:32:d4:a7:20:63:7b:02:d3:ca:59:
         e8:62:26:e6:92:c0:ab:68:86:5e:0b:7e:a2:9e:24:67:7b:0c:
         0a:29:e9:7d:bb:28:1c:f8:e6:e0:e2:77:07:04:c3:4f:4e:e2:
         d4:a7:f4:18:c2:08:3e:36:54:c0:80:34:93:3f:95:16:f1:77:
         5c:fb:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org