Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
File:                     F049853EF6D911EEAAB0053FC4F9AE02.roa (raw, json)
Hash identifier:          OthJ1CSYB8a93CMGXYH0cC6eQu8A88F4xSIFEgG00gw=
Subject key identifier:   3F:42:9A:94:43:EB:05:04:A8:EC:45:97:D6:37:09:F9:EB:DD:48:A6
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0294
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:31:06 +0000
ROA not before:           Thu 05 Sep 2024 03:31:06 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     151917
IP address blocks:        157.66.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Sep  5 03:31:06 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d925fa-0ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:8f:3c:14:9b:55:2e:df:6b:1d:38:c4:fb:
                    ab:6f:3c:49:b4:10:10:47:ca:a6:61:8a:08:cf:37:
                    bc:59:71:96:26:f9:af:06:10:fe:f1:5e:a7:81:d5:
                    c1:58:98:2b:f9:cd:13:01:ee:94:aa:91:7d:c9:e0:
                    ec:be:3d:e3:10:d9:38:98:d8:df:44:b3:bf:eb:2c:
                    8e:03:12:11:20:61:ad:b8:7f:6f:00:d3:af:a2:4a:
                    29:cf:c3:0c:81:51:ac:c5:06:bc:8b:04:2f:7b:6e:
                    77:0e:24:4e:99:04:a1:08:8b:9e:ab:ed:f4:fb:40:
                    79:ed:64:76:de:47:68:53:79:c9:fa:8a:8b:dd:e7:
                    c7:74:c7:e9:35:04:47:80:4d:b9:97:03:37:84:e8:
                    19:e2:25:91:1e:95:ab:02:a7:4e:36:93:4e:96:14:
                    f4:2a:fe:a8:a4:fc:18:0c:c3:07:0f:14:44:2d:8e:
                    ab:5e:99:ea:ba:73:f8:4a:cf:22:12:74:fe:db:0f:
                    b7:31:b1:76:a2:da:df:8e:f2:55:bd:87:f8:db:74:
                    9e:6a:14:8f:82:66:f9:72:14:ee:82:9f:21:ad:78:
                    f6:4a:38:ae:80:33:11:6b:72:80:87:bb:f9:a6:e1:
                    b9:ec:44:cf:df:4a:ad:0e:d0:ca:19:76:3b:0e:43:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:42:9A:94:43:EB:05:04:A8:EC:45:97:D6:37:09:F9:EB:DD:48:A6
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:93:e8:f7:56:a2:cc:2e:0a:19:79:f7:64:f9:f0:aa:3f:
         d0:1a:c7:31:df:ae:0c:20:0c:12:8f:1d:0d:03:04:ff:9a:74:
         c3:5a:ce:69:69:0d:08:7b:f9:8b:80:46:dd:aa:3a:f7:01:ff:
         27:11:46:e8:20:ba:63:3b:0b:95:bc:92:bc:73:28:82:17:cc:
         91:82:d0:be:ea:39:47:60:33:30:12:1c:d6:42:5f:00:1e:ce:
         56:df:8f:96:8b:fc:37:30:d9:11:58:80:13:93:44:c3:20:7f:
         91:15:46:08:f0:46:eb:cc:a2:4c:f8:d0:5c:be:61:9f:b4:76:
         b6:52:40:3e:71:de:95:67:a9:02:29:35:72:c4:a1:9a:1d:d0:
         aa:44:e6:e6:18:28:84:84:3e:2b:aa:c7:05:d6:29:04:86:93:
         d0:f0:45:b0:a2:a9:1f:bd:71:ca:47:1f:8e:31:c7:72:70:71:
         c1:6c:3a:96:8a:ec:80:ba:09:c6:4b:0b:b1:ed:c0:f4:65:3e:
         0c:35:80:75:4a:ec:ba:b2:1c:5e:9b:53:16:ad:71:08:af:99:
         15:0a:80:5a:c9:55:66:10:61:33:35:e4:53:c1:b9:9e:5b:e0:
         6a:0c:2f:d1:a8:50:75:af:16:09:aa:cb:71:ee:28:21:24:87:
         ab:66:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:31:18 2024 by rpki-client on console-ams.rpki-client.org