Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
File:                     6A6FBBFE16C111ECB341F934C4F9AE02.roa (raw, json)
Hash identifier:          pLbQqr89P4AkmvOvi7BDliGKTzDAbmdTOjVTjIAl6bU=
Subject key identifier:   AB:E4:C0:54:88:90:98:36:54:80:39:41:81:8E:E0:48:F1:30:64:70
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       34EB
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
Signing time:             Thu 06 Jun 2024 15:11:14 +0000
ROA not before:           Thu 06 Jun 2024 15:11:14 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58732
IP address blocks:        114.130.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13547 (0x34eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  6 15:11:14 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6661d192-ff5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:39:0a:04:9e:50:b8:f7:2e:cc:9a:35:d1:
                    a0:ee:90:90:41:66:24:df:0b:72:02:4a:8b:47:10:
                    c2:fe:c3:31:d1:fc:14:e6:3c:0b:5a:2c:1a:7b:4e:
                    13:33:86:57:90:8d:57:81:fb:c1:b1:2e:1b:a3:37:
                    92:2c:64:1c:54:6a:05:66:98:3a:37:dd:e0:5c:3b:
                    fd:af:3c:6e:86:a3:9e:e5:27:e6:ff:df:62:d8:1c:
                    8d:61:2d:69:d2:80:7e:40:03:15:c0:bb:96:77:b9:
                    11:fc:c0:99:7e:89:f8:0f:c6:2a:bc:f6:27:61:36:
                    29:6a:6d:f6:50:4d:9c:e1:fb:b6:0b:38:a1:a9:d8:
                    a9:c9:20:be:de:43:b3:90:6d:30:4e:ad:a8:71:2a:
                    c9:44:c6:0a:97:51:90:11:ba:5b:09:fb:d4:ce:48:
                    7b:fe:76:1e:75:91:4f:75:05:0f:47:88:fd:e7:ae:
                    a7:9b:ef:c4:67:f0:e8:22:6c:31:cb:5d:c4:9e:e1:
                    38:b8:b3:f7:d0:eb:4d:1d:d7:de:e7:2c:6a:cf:00:
                    51:10:5f:bd:10:7b:39:33:6c:83:b9:19:9e:6c:27:
                    ee:7a:4b:c8:2e:2a:3d:7f:7d:b3:7b:93:01:e9:82:
                    d0:c5:f1:9f:3c:a7:a0:c5:47:1d:80:84:ed:24:8a:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:C0:54:88:90:98:36:54:80:39:41:81:8E:E0:48:F1:30:64:70
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/6A6FBBFE16C111ECB341F934C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:08:36:d8:33:b8:61:d5:01:fe:5e:d0:2f:a2:ee:6d:76:98:
         4b:f7:ac:8c:a8:b3:ce:47:58:1d:fd:ba:8c:9f:34:e6:8a:c5:
         7e:72:cd:f5:9a:e1:1c:8b:b9:ca:59:73:47:75:5d:bd:d1:51:
         72:be:7c:db:ee:99:6f:d4:a0:01:51:4d:d7:e4:b0:42:1e:76:
         e5:c3:42:13:75:a0:04:ab:46:8e:21:a6:0a:f1:da:f9:b9:b5:
         c4:d2:2a:6b:92:e5:c0:7c:75:b9:0d:50:af:a4:f0:ba:22:e9:
         49:d7:5c:39:5d:21:80:2f:ac:20:6f:54:38:40:4b:b4:32:7d:
         0a:1e:47:3c:26:63:84:cf:08:bb:1d:8d:c7:e7:9e:bc:19:8a:
         6a:db:90:91:aa:3e:80:ed:49:91:15:52:ca:c5:c2:6a:f7:35:
         0c:5e:53:b9:5f:e1:26:43:50:e7:33:b3:86:d4:df:58:fc:3f:
         69:b9:85:1b:cf:38:dd:9a:8a:04:3b:cc:e2:60:a1:66:a5:ea:
         bf:9a:76:39:2b:22:29:e3:e6:e1:09:00:bf:34:b0:2b:27:88:
         85:1a:d1:e2:23:6f:ee:bd:76:bd:3c:4d:47:02:df:bd:6d:40:
         f4:31:15:99:1d:bb:65:16:e3:5b:65:a7:a7:4d:f7:5d:e1:4e:
         3a:0f:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org