Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa
File:                     1F4E1CC014D311EA81309110C4F9AE02.roa (raw, json)
Hash identifier:          TDYDydBX1PxrqDWmEJLGeZLYBXFUNq2KeD+oxooLvK4=
Subject key identifier:   23:8E:23:00:83:D9:78:A5:55:3A:20:06:C6:69:54:1C:9E:1D:D0:C9
Certificate issuer:       /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial:       0C3F
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa
Signing time:             Thu 28 Dec 2023 18:56:33 +0000
ROA not before:           Thu 28 Dec 2023 18:56:33 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     17744
IP address blocks:        134.159.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3135 (0xc3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
        Validity
            Not Before: Dec 28 18:56:33 2023 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=658dc4e0-3e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:29:f1:74:92:d9:89:17:a7:e4:b0:70:aa:
                    4c:f7:c4:fb:62:f1:fc:87:19:f8:2f:08:b0:5f:b1:
                    1f:0c:84:e3:61:24:8d:2f:57:3c:3d:02:16:c6:bd:
                    8c:6d:7e:0d:08:fc:2d:84:23:95:2d:fd:d7:d9:1c:
                    b6:43:43:c0:05:a0:c4:d2:7a:09:18:0a:c5:ff:3f:
                    ad:32:55:b5:5a:ca:f6:bf:64:ad:3f:f3:75:e4:ba:
                    fb:22:5f:a2:9e:7a:a2:5c:6c:f4:e9:31:54:a9:6c:
                    37:10:5f:04:69:60:64:24:98:2a:2f:c3:d5:02:52:
                    ad:4c:4e:47:97:3e:11:ba:83:fd:0f:16:33:dc:e3:
                    89:c0:30:ae:d0:60:ba:bd:3e:f4:37:c1:57:ea:b9:
                    9c:99:ad:cd:40:1f:6b:8b:3c:6f:fd:b9:58:dd:a3:
                    cd:7b:fc:24:79:3b:86:6e:f6:05:66:e8:d2:85:e7:
                    7a:a8:2d:f2:97:c4:95:de:9f:16:ef:2c:00:17:2d:
                    e4:6d:d0:27:ea:e6:bc:13:c8:f4:09:45:17:53:df:
                    91:fc:71:55:93:88:0a:80:e0:17:e2:1b:d4:8e:c0:
                    98:2e:1f:5d:83:e1:04:60:17:28:10:e7:54:6b:c2:
                    78:b7:5c:5f:3d:f9:c0:78:48:79:3c:dd:3f:a8:25:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8E:23:00:83:D9:78:A5:55:3A:20:06:C6:69:54:1C:9E:1D:D0:C9
            X509v3 Authority Key Identifier:
                keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.159.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:63:db:25:bd:1b:23:05:d1:2a:5c:f4:e2:61:19:96:b4:98:
         05:6b:1b:9d:a3:67:c8:83:b1:bb:5b:d4:a3:46:e4:9b:71:8d:
         e6:35:c3:68:dc:58:58:37:49:45:4a:d5:f7:44:42:a7:6f:3d:
         1d:70:22:27:2d:64:2a:d8:15:62:a6:d5:1b:6a:51:ba:4d:df:
         f5:be:68:4f:8a:17:29:86:5b:2e:14:49:a8:6d:15:5a:9c:19:
         ee:74:41:0b:1f:47:30:1d:4b:d6:d2:c5:1d:f0:11:7a:13:6f:
         fd:d3:97:b1:5a:b1:5f:ea:70:e5:99:38:75:c3:f8:12:0d:ca:
         22:a4:dc:7a:4a:ed:be:65:37:25:b4:6f:f6:eb:e4:41:b9:b7:
         eb:a0:7b:ff:a9:60:1a:93:cc:65:b1:58:e6:d9:5a:b6:4b:f9:
         40:cc:ec:dc:a1:f6:39:b7:1c:d6:71:cf:a8:83:46:b5:e7:d4:
         c4:9d:ae:8b:15:70:01:12:2f:1a:ec:c3:ce:f2:e6:bb:a5:51:
         2f:04:57:33:7e:0a:79:20:d1:c9:d5:de:7b:a8:ee:b4:d8:78:
         d2:eb:29:41:2f:37:17:24:98:2c:90:f4:cb:91:6f:df:99:58:
         d0:a6:dd:b9:3c:5f:44:d1:77:11:76:9b:b6:fb:f0:dc:59:f5:
         bb:83:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org