Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa
File:                     CB2394DC700C11EFB7E58677C4F9AE02.roa (raw, json)
Hash identifier:          ovEmLN466KleV+emWO9Ce5p2k1W9Lm9lNmQrrpznoE0=
Subject key identifier:   FE:13:B4:CC:68:4D:71:AA:74:1C:22:E9:BE:58:6C:D9:21:75:75:18
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       46B4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa
Signing time:             Wed 11 Sep 2024 07:11:21 +0000
ROA not before:           Wed 11 Sep 2024 07:11:21 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     23962
IP address blocks:        117.122.116.0/22 maxlen: 24
                          2001:dc8:3000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 11:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18100 (0x46b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 11 07:11:21 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66e14299-574d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:e4:93:25:00:30:f8:a6:94:52:42:65:f5:
                    04:77:97:9a:e8:17:9c:13:1c:81:26:18:e0:7c:75:
                    9d:b9:da:ad:32:96:be:2d:3a:91:94:4e:31:86:1d:
                    5d:a4:bc:09:76:e7:97:72:44:09:56:bb:de:26:b0:
                    ac:df:71:50:7c:b3:e1:a0:b1:51:ad:9b:ae:f7:dd:
                    9c:51:70:43:4e:34:b3:f9:4e:5e:83:32:69:11:75:
                    d7:e5:50:37:80:f4:9d:c1:03:38:69:73:b1:c0:75:
                    35:ae:5e:1f:99:4f:7a:4b:f2:f4:42:ec:3e:64:5e:
                    72:32:77:f0:52:5b:d0:ea:a9:67:8a:73:31:ac:a3:
                    46:97:2e:b6:fe:c4:04:c2:21:4b:ed:f8:69:4c:1b:
                    c7:01:5c:2d:75:ee:14:3b:66:24:ed:22:d9:c4:22:
                    fc:12:bf:7b:ed:5a:92:cb:f4:a6:27:5e:1c:b3:7f:
                    80:18:45:2d:ef:de:27:8d:e6:7e:81:83:a8:7e:03:
                    5a:a5:04:ca:8c:83:60:1e:03:2d:07:68:b2:49:56:
                    1c:b8:ed:38:9d:23:3b:03:9d:1e:6f:5c:4c:d5:3c:
                    8d:f1:bc:00:47:89:43:2c:28:42:53:37:c1:ec:bf:
                    e7:9e:e3:eb:0d:a2:8a:6a:54:ea:6d:9f:f3:47:38:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:B4:CC:68:4D:71:AA:74:1C:22:E9:BE:58:6C:D9:21:75:75:18
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.122.116.0/22
                IPv6:
                  2001:dc8:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:25:b5:49:e8:a3:4a:ec:19:05:16:a9:c9:76:1b:77:cf:
         3f:24:6b:d6:1e:41:1e:c1:29:f7:48:34:3f:57:bc:f4:95:a9:
         aa:2f:eb:bc:18:da:3b:cf:1e:ee:28:82:23:04:1b:78:d9:73:
         9a:ad:e8:45:68:95:34:c4:e7:e1:52:fe:46:e8:4a:99:8c:7c:
         fd:f1:c8:62:5f:ec:f6:bc:7a:52:04:46:68:ac:bf:49:77:a6:
         fd:ec:3c:bb:8a:c5:e7:a8:5c:3b:24:c1:b1:50:2b:e9:80:fa:
         6d:67:cb:b9:62:70:b3:6b:03:c8:66:af:35:4a:e8:af:fa:b1:
         e0:c4:c8:10:4c:7f:7e:e9:5f:1d:a4:d5:0f:99:d4:60:9d:a0:
         dc:9d:f1:44:3a:21:35:5b:90:24:c8:59:28:09:f4:c4:8b:77:
         17:02:81:2a:43:6f:9b:de:86:a7:08:9a:5b:13:39:84:37:78:
         54:95:27:22:eb:d2:47:4a:91:c9:3a:70:6b:fc:8d:05:6a:87:
         d1:b6:db:fd:14:52:4f:c1:da:c2:58:6c:73:24:d2:3e:1e:a8:
         3a:1c:cc:da:6b:4d:54:31:4f:51:bb:c5:45:bb:ba:8a:52:db:
         3e:88:64:75:67:6a:be:8e:a2:b5:dc:95:da:2f:36:e1:a7:23:
         fd:33:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:16 2024 by rpki-client on console-fra.rpki-client.org