Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
File:                     740B66A6C09A11EE9839DC42C4F9AE02.roa (raw, json)
Hash identifier:          TlwKY8840Dm8xfdNqjL0RFl5yxFx6ZTK9aojXdZLogY=
Subject key identifier:   E4:3E:2D:3D:00:31:96:C1:3D:62:7A:B0:89:A1:5B:D1:B2:D8:E4:9A
Certificate issuer:       /CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
Certificate serial:       02
Authority key identifier: FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
Signing time:             Thu 01 Feb 2024 00:40:10 +0000
ROA not before:           Thu 01 Feb 2024 00:40:10 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     133217
IP address blocks:        203.33.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl
                          rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CABF0/serialNumber=FC886894E2D70E352E4F168052C51B05AB05ACC5
        Validity
            Not Before: Feb  1 00:40:10 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65bae86a-b0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:03:a6:65:24:ef:2e:f5:9b:c9:2a:79:25:
                    aa:01:ab:dd:fa:f7:64:2d:47:eb:81:d3:f5:b6:38:
                    fe:d1:21:e7:f5:35:a1:be:df:dd:21:b4:1d:d7:53:
                    09:e5:cb:da:63:f3:a4:56:42:35:ba:bc:78:0b:63:
                    e5:a8:4f:ec:c1:55:76:83:b8:29:e9:ad:5a:76:ec:
                    3c:29:3f:8c:54:66:25:3a:f3:98:6c:30:0c:84:5c:
                    f2:f5:db:90:5f:40:aa:3c:5c:23:aa:aa:24:bd:89:
                    2a:8c:3d:8f:4a:39:62:0d:b1:c4:05:01:5e:ba:44:
                    d5:b4:ea:08:da:e2:d2:6f:bb:b1:49:3f:1c:99:7e:
                    93:53:9d:2b:0e:6d:7a:93:a6:d8:a6:b9:16:92:34:
                    63:09:42:c3:a3:b2:d7:74:a2:d7:f0:66:46:d5:ab:
                    18:ab:68:eb:12:25:c7:24:f3:ec:03:e1:e6:66:f2:
                    4a:8c:b6:5b:77:af:2f:37:6f:e0:74:40:bb:0e:9c:
                    a2:29:e4:b7:9f:6a:43:f5:e1:42:05:97:a0:6e:ec:
                    d2:f7:05:45:0c:ee:96:3c:22:74:6a:a5:17:5f:06:
                    09:67:58:ad:15:1b:e7:aa:64:4d:01:f4:e8:96:5d:
                    24:91:fd:67:fa:bd:0f:6a:a3:4c:d4:17:58:4b:ad:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:2D:3D:00:31:96:C1:3D:62:7A:B0:89:A1:5B:D1:B2:D8:E4:9A
            X509v3 Authority Key Identifier:
                keyid:FC:88:68:94:E2:D7:0E:35:2E:4F:16:80:52:C5:1B:05:AB:05:AC:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/_IholOLXDjUuTxaAUsUbBasFrMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IholOLXDjUuTxaAUsUbBasFrMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CABF0/D96BA660C09911EEB9505A41C4F9AE02/740B66A6C09A11EE9839DC42C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.33.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:26:f7:b4:4e:e0:14:16:26:94:47:9c:45:be:af:8d:89:bd:
         cb:5c:25:1e:40:6c:69:82:9c:7f:16:36:53:4f:a0:80:c1:02:
         3a:94:9f:9b:35:a6:48:d3:0f:c2:d2:1f:9a:7d:d9:bc:d1:1c:
         15:13:f2:30:df:54:a2:90:c3:15:ae:1b:b5:2a:12:65:f7:6e:
         bc:36:62:86:41:f3:fa:c8:02:bd:3b:98:cb:d2:31:ce:2a:5a:
         7d:51:96:94:55:1f:68:a2:2d:12:7c:81:28:d4:59:12:6e:f0:
         53:31:83:b6:63:b2:f0:4b:42:ed:8b:c9:1b:c3:9e:ea:2b:72:
         76:4a:71:73:da:af:19:5c:67:d4:2a:61:19:84:c5:eb:ae:a3:
         6c:53:ff:0c:d7:92:7b:18:e1:f8:4e:ac:50:62:a5:5b:8d:62:
         64:0a:1b:04:e9:81:ea:d7:14:30:b9:c2:7c:9b:ba:ba:f9:45:
         63:0d:79:9b:fa:d9:34:6a:3b:21:94:b5:29:e1:8a:e6:e1:d4:
         17:a9:10:7e:a5:3e:71:03:28:53:91:9b:a9:a9:f3:4e:34:b3:
         8c:ce:69:c6:b9:1e:00:b5:cf:82:53:33:ac:83:ee:d3:a4:75:
         bc:3a:5b:d1:cc:e3:18:8b:6a:26:5f:8f:9c:0c:d1:22:65:5e:
         02:0d:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:59:50 2024 by rpki-client on console-ams.rpki-client.org