Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa
File:                     1960E628919111EE9A03A712C4F9AE02.roa (raw, json)
Hash identifier:          3VSO1DsF8NSUCMtvq8jLtZKfSta520bTk+okzz1kgCc=
Subject key identifier:   52:93:FB:F4:DD:9A:52:57:D8:00:B4:7D:F7:7D:16:27:A8:5C:C0:7B
Certificate issuer:       /CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
Certificate serial:       02
Authority key identifier: A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa
Signing time:             Sun 03 Dec 2023 04:04:48 +0000
ROA not before:           Sun 03 Dec 2023 04:04:48 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150172
IP address blocks:        210.79.174.0/24 maxlen: 24
                          210.79.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE620/serialNumber=A16C3F87241A83D1AA5480D42A74F4F7D1CE5D2E
        Validity
            Not Before: Dec  3 04:04:48 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=656bfe5f-b424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:cc:76:d1:75:b9:87:4c:c9:b1:14:57:6f:
                    f8:0f:40:7f:a5:4d:17:2d:c0:d1:e0:54:de:88:05:
                    44:7f:ed:c9:87:7d:15:15:1e:12:9b:7f:78:55:d3:
                    f7:b1:65:22:2f:88:cb:0a:c3:b9:57:79:89:6b:d4:
                    a0:75:5d:20:5d:d7:29:3a:08:ef:89:82:03:87:b0:
                    b4:1b:eb:d9:f7:bd:c5:2a:6f:0b:53:80:1a:b6:5c:
                    b2:e8:3d:b2:47:5a:1a:33:d2:dd:ef:00:f3:5d:7f:
                    07:20:9b:5b:9c:14:7e:59:75:62:b9:1d:1b:bb:8f:
                    d1:eb:3b:f3:97:c6:37:9c:cf:5f:c9:7c:01:a3:03:
                    1f:04:86:5f:0a:60:20:82:40:fa:ff:70:2d:e8:0f:
                    72:e7:f4:63:cb:40:e4:54:59:01:63:ea:5c:96:f0:
                    29:86:05:7b:2c:bc:55:a9:d5:c3:ac:02:a5:69:6b:
                    7a:d6:52:17:0d:f5:ff:70:76:e9:a3:2b:cf:5b:1e:
                    34:d3:79:b0:ad:71:df:57:62:73:cf:ad:d1:c1:9e:
                    ab:57:7b:5e:e7:d2:69:e5:67:c7:42:c9:91:43:f5:
                    72:b5:43:c1:9d:87:e1:b4:2f:3b:2c:82:a1:27:4e:
                    34:03:ed:fb:a7:f5:be:13:8a:a9:39:a9:29:c5:dd:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:93:FB:F4:DD:9A:52:57:D8:00:B4:7D:F7:7D:16:27:A8:5C:C0:7B
            X509v3 Authority Key Identifier:
                keyid:A1:6C:3F:87:24:1A:83:D1:AA:54:80:D4:2A:74:F4:F7:D1:CE:5D:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/oWw_hyQag9GqVIDUKnT099HOXS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWw_hyQag9GqVIDUKnT099HOXS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE620/3AA59ADC919011EE87FEE00BC4F9AE02/1960E628919111EE9A03A712C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:9e:46:f6:2e:42:0c:d1:dc:9f:35:31:ce:65:b4:4b:18:9d:
         d8:14:4d:6d:76:59:09:b7:de:99:7f:a5:cb:fe:d4:84:f9:db:
         72:6d:c7:3a:93:fa:91:ae:f4:06:d6:42:df:ad:e5:31:23:aa:
         ad:db:66:53:43:92:06:d9:a9:fd:d7:9b:d9:ea:d6:d6:2c:4a:
         7b:8e:0f:f4:44:41:3c:84:75:81:a3:f3:b9:f6:f4:6f:c2:3b:
         64:0f:22:7d:f8:45:a0:1e:25:d8:0a:23:2a:3c:94:6f:8d:7b:
         ac:86:e3:08:38:bf:2a:25:34:05:ea:bc:d6:c1:4c:70:2a:6a:
         72:5c:b9:e3:7e:3e:08:e4:8e:83:75:21:67:49:b8:26:05:32:
         e8:3a:61:f9:eb:f7:f7:49:fd:5f:40:54:bb:f9:82:6a:3e:ee:
         a4:96:ed:46:d9:8b:11:f3:71:eb:14:10:23:d4:e6:33:48:82:
         9b:08:d0:b6:1a:2b:d7:c6:7a:95:ee:d9:15:7b:f8:7f:c7:1d:
         0d:40:dd:48:25:1d:87:ce:61:cc:83:ea:1e:19:be:a5:ea:9c:
         97:4b:de:97:db:d9:80:57:a5:f1:9c:ef:76:83:3a:bd:d3:31:
         1e:ba:c8:e6:33:da:1b:31:4d:84:dd:95:c2:a8:a3:e5:4d:fe:
         ea:46:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org