Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa
File:                     226B7BC2AAC611EE9F22785DC4F9AE02.roa (raw, json)
Hash identifier:          DWpmw7E9f8wB56ox5ZKO+BfCAC2t1e6DSbrfkrwOp6U=
Subject key identifier:   1B:5D:A9:71:7D:EB:49:EC:8C:5E:8D:FA:50:B2:94:12:EC:E9:20:A0
Certificate issuer:       /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial:       0C77
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa
Signing time:             Wed 06 Mar 2024 19:07:08 +0000
ROA not before:           Wed 06 Mar 2024 19:07:08 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     18060
IP address blocks:        163.47.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3191 (0xc77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
        Validity
            Not Before: Mar  6 19:07:08 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65e8bedb-a074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d3:60:f1:2b:96:10:92:d7:94:14:7e:33:56:
                    9b:2c:f5:f3:0f:39:0c:92:72:d6:0c:15:4a:d2:14:
                    c5:77:14:1d:73:6f:3d:84:3d:ca:6d:64:1f:93:9c:
                    10:21:13:2b:5c:65:36:5d:08:1e:c2:f7:f5:70:52:
                    c4:25:0c:fb:a3:08:30:72:98:fa:50:f8:d7:33:f4:
                    dd:38:c5:21:3f:72:ad:0b:65:ba:a9:3d:34:d7:b9:
                    5a:c8:ef:09:0d:51:b2:81:5f:cf:b5:e1:85:9a:94:
                    80:db:d0:63:6d:fd:22:88:05:6b:20:ec:04:aa:bc:
                    86:07:a8:72:f1:55:46:db:70:96:94:b3:bd:e7:8e:
                    65:4b:15:b4:1d:d2:99:17:bf:8f:fc:7b:2f:5b:a7:
                    7a:11:62:bb:f2:f0:7b:2b:a5:f5:81:98:7c:5a:5f:
                    49:27:11:77:d4:7e:b6:b2:60:d9:c6:b6:35:85:65:
                    37:52:d2:46:64:b6:35:fd:e9:72:66:ea:c6:57:86:
                    ae:e8:12:36:5a:11:12:96:16:0c:55:8c:58:1d:3d:
                    82:08:62:4c:cd:bd:de:41:0a:49:b4:e1:46:2d:34:
                    ff:d5:76:b3:2e:7e:98:86:cd:19:3a:99:9e:6a:79:
                    86:2b:2a:2b:2b:8d:d0:0a:52:6d:26:c7:f5:48:cc:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5D:A9:71:7D:EB:49:EC:8C:5E:8D:FA:50:B2:94:12:EC:E9:20:A0
            X509v3 Authority Key Identifier:
                keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/226B7BC2AAC611EE9F22785DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:33:50:57:72:57:4e:eb:3d:58:df:b9:0f:29:2c:c6:af:
         5a:6a:44:63:27:2c:41:9c:b2:ef:4e:aa:40:aa:e0:1f:31:eb:
         22:fe:1a:c9:a6:9c:26:42:c6:ed:0c:fc:ed:5a:60:57:e0:f5:
         14:f2:00:4f:4d:6e:af:2b:b3:3b:53:a3:99:93:0c:56:d0:ea:
         e2:23:47:79:d0:15:aa:70:80:d9:c4:72:32:1f:14:0a:6d:26:
         90:e0:77:31:94:78:7a:bc:28:61:e8:c7:20:99:c4:2e:51:35:
         1e:8c:da:d5:3e:31:08:9e:42:bb:c5:0a:5a:d6:25:b2:ab:ce:
         f2:97:ce:a3:e3:cb:ec:2d:f7:b2:66:ad:d1:83:f7:8b:34:df:
         4a:2b:88:70:02:d4:47:28:7b:5e:c3:18:75:47:be:08:3f:70:
         23:40:c9:0b:0e:11:ff:b1:14:9d:9e:be:09:20:b4:f6:5e:a8:
         39:b4:9c:ba:4a:ba:bf:99:4a:fc:37:83:fc:d0:ab:fc:69:c7:
         73:27:c1:44:8f:af:3f:43:b9:9e:f4:0c:50:0e:d7:89:55:5b:
         ff:b1:67:10:4d:9d:73:65:13:63:75:b7:a3:bd:39:da:44:bb:
         34:82:6c:3e:7f:6f:ba:5e:09:4f:32:b9:5c:d3:03:b4:4b:ee:
         ec:b1:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org