Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
File:                     8C2F1C96367F11EEB689C243C4F9AE02.roa (raw, json)
Hash identifier:          NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=
Subject key identifier:   15:69:2A:65:41:94:F5:1B:B9:1C:24:DD:79:55:8A:3E:49:C9:95:6D
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       043C
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
Signing time:             Fri 23 Aug 2024 01:13:45 +0000
ROA not before:           Fri 23 Aug 2024 01:13:45 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     19701
IP address blocks:        182.54.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Aug 23 01:13:45 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66c7e248-bbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:9a:63:31:3b:1d:77:c2:e7:30:f8:17:ff:
                    aa:f0:12:c6:f4:97:97:fd:5f:f2:e9:95:2e:9b:73:
                    30:4f:31:9a:74:86:b5:84:11:84:ae:ee:f8:88:59:
                    cd:3f:e6:54:71:3a:a0:07:bb:dc:3e:78:c1:ee:fd:
                    21:58:5e:97:10:4e:de:bc:93:31:b2:00:14:af:03:
                    9d:70:40:7a:b0:66:c1:af:0a:10:c8:16:8e:89:3e:
                    23:57:4f:e2:c1:dc:c6:8f:ad:1a:dc:d6:94:75:69:
                    fa:55:dc:9b:ee:7a:9f:52:e8:5b:b5:a2:f8:f4:ca:
                    8e:77:7b:b7:71:49:b8:82:2a:35:85:4c:dc:53:c2:
                    c1:91:d5:6c:7c:d0:56:d2:00:8c:73:b0:09:ef:bb:
                    b7:3c:c2:c5:3b:7f:60:85:00:51:7e:65:26:38:58:
                    b7:f5:01:fd:f4:cd:ab:41:1e:52:f4:2e:ee:5b:9a:
                    f1:38:72:dc:a3:41:b3:75:02:27:12:4c:4d:40:56:
                    f5:0d:ec:9d:f9:a2:19:d1:b8:d7:50:8c:70:88:75:
                    cd:bc:46:4d:98:0f:61:96:7c:ed:89:70:74:2a:13:
                    3d:ae:ad:23:75:38:c4:19:6f:8b:6d:6d:37:1f:37:
                    1e:da:4d:71:1f:f6:16:f9:05:40:6a:a7:f7:92:dc:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:2A:65:41:94:F5:1B:B9:1C:24:DD:79:55:8A:3E:49:C9:95:6D
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:2a:e3:03:83:4f:94:8e:b4:a0:63:c0:e7:a6:e0:b2:02:
         97:95:6d:b1:7b:f8:0b:e4:09:fc:73:3f:31:c5:1f:e7:74:05:
         f9:d2:6b:69:16:b5:1e:ce:e8:4b:83:11:d7:47:f5:b3:01:25:
         4e:c3:2f:88:f8:6e:d1:8b:4e:87:ec:34:05:c0:ef:5c:c5:d8:
         cb:31:4e:99:37:0a:96:e5:72:12:2e:2d:3c:cc:08:b6:21:c7:
         5a:66:cf:c1:44:d1:95:a6:e0:a9:49:42:69:98:d4:28:c4:0e:
         26:14:67:e5:56:10:08:99:b5:42:fc:05:c2:78:d6:1e:de:11:
         77:e9:54:ec:a0:7b:cc:24:f1:ae:8d:23:95:8b:0c:13:49:ac:
         dd:25:c3:bf:98:d9:0e:32:3b:43:09:48:19:25:23:bd:e4:ef:
         cb:8a:38:04:30:1d:8d:a5:4e:75:ff:03:27:ad:9b:71:0d:00:
         71:d2:71:58:87:83:9a:24:94:dc:2c:0f:bf:4c:ec:ea:9e:5b:
         33:54:c5:56:61:18:d7:27:98:89:cd:38:62:d5:84:64:15:25:
         2a:a4:59:7f:87:00:f4:bf:16:03:b2:11:81:ee:53:4a:3b:ae:
         94:1c:55:03:a4:60:0c:20:c0:f8:f2:33:f6:09:84:96:8b:8c:
         b9:3e:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org