Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
File:                     740B66A6C09A11EE9839DC42C4F9AE02.roa (raw, json)
Hash identifier:          NOsPGGlDSlCfn8hbBHu4EWI+usdJzaN80KZom3HQWsg=
Subject key identifier:   AE:FB:BD:37:9D:99:34:D1:32:F0:54:46:F1:5A:D3:8A:B3:63:B4:53
Certificate issuer:       /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial:       81
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 05:38:52 +0000
ROA not before:           Sat 05 Oct 2024 05:38:52 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     133217
IP address blocks:        203.33.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
                          rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
        Validity
            Not Before: Oct  5 05:38:52 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6700d0ec-02ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:1a:ec:7a:1c:6e:eb:16:0d:8b:30:55:88:
                    60:3b:d4:03:00:2f:cc:ce:fd:12:f3:4b:94:d7:b4:
                    7f:1d:00:b4:20:4f:1f:6d:5c:62:78:4b:0f:0b:4d:
                    81:9a:13:d1:d0:c7:48:8c:bb:6f:3e:38:78:d9:c1:
                    7b:88:dc:e1:cf:3d:23:17:81:51:99:ae:a9:a9:98:
                    8d:1a:27:2c:17:35:15:7e:e9:41:d0:90:93:e3:2f:
                    9f:d3:49:af:a6:7c:02:37:32:41:6d:99:56:3e:47:
                    10:e7:94:53:85:4d:85:81:99:6d:a9:2f:01:32:3e:
                    7e:c6:a6:54:7b:3b:05:0a:bb:0d:bf:1f:a9:c2:f1:
                    bb:27:85:a8:67:42:65:aa:22:97:59:81:91:cb:38:
                    44:6d:3b:ec:8c:18:9a:d5:a9:ec:7d:7c:39:23:c4:
                    40:d2:5a:ea:ae:29:94:f5:b4:08:26:97:a5:c1:b7:
                    6f:9d:7e:82:14:e2:bf:eb:a6:7f:f7:64:0d:b7:63:
                    e8:10:74:49:4c:f8:11:46:a2:f2:c9:85:f2:71:de:
                    7b:29:e7:b0:65:5c:ed:d9:f3:e5:7c:e5:40:85:d1:
                    d7:8d:c6:97:04:ac:fa:be:3d:01:6e:fb:8e:6b:53:
                    20:04:24:1a:b7:f0:5c:78:43:ce:7b:08:06:d7:72:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:BD:37:9D:99:34:D1:32:F0:54:46:F1:5A:D3:8A:B3:63:B4:53
            X509v3 Authority Key Identifier:
                keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:68:b5:b3:0e:0d:0b:1d:d8:ef:e3:bf:48:7b:b3:bf:6c:d6:
         5e:03:c6:f5:a1:33:1b:c7:10:ea:3b:36:8a:0f:1e:2a:64:13:
         9c:99:a3:ff:18:ed:47:48:bf:c7:96:d1:4f:fa:7f:39:bc:da:
         41:82:3e:35:68:8e:36:fa:f3:9d:66:3f:12:87:ff:6e:ac:36:
         ea:96:f9:40:4d:ac:5d:f7:79:b4:35:14:8f:28:52:f7:f8:56:
         4f:60:12:6d:da:1e:64:12:ef:06:f2:cd:8a:5e:97:a8:dd:17:
         dc:0d:0e:9f:82:3c:be:92:99:fc:c8:7f:07:03:f5:c5:eb:57:
         38:5c:cf:06:a7:f4:f6:c1:0d:36:e7:1d:fb:8b:f6:0a:d7:14:
         5d:15:29:2b:10:ae:7a:1e:2b:03:a8:5e:90:05:77:ef:cc:e3:
         0d:7e:29:00:4f:c2:88:d5:a5:f3:e4:aa:67:82:2b:5c:59:fc:
         75:c0:ea:36:3e:12:20:11:30:e7:14:ac:af:b6:92:06:93:18:
         2a:63:02:e6:70:2d:68:46:96:cb:c8:15:2b:e2:af:1f:d3:3b:
         6a:c6:59:3b:cd:a6:e0:e5:5e:1d:4d:e5:f0:de:e3:af:c0:01:
         6e:12:e0:48:08:ab:43:64:b0:69:31:54:88:3b:6e:b2:c6:99:
         2e:27:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org