Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/166B6FD854EE11E78DFD1629C4F9AE02.roa
File:                     166B6FD854EE11E78DFD1629C4F9AE02.roa (raw, json)
Hash identifier:          4pH+e0DAGB7uiyu6q3/py65vuNCItVcuG3R7I6BU3bw=
Subject key identifier:   58:6B:D7:DD:BD:03:A6:9B:4C:6C:B2:E3:F8:5E:62:A9:6A:24:C9:77
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1E7A
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/166B6FD854EE11E78DFD1629C4F9AE02.roa
Signing time:             Wed 24 Jul 2024 16:33:20 +0000
ROA not before:           Wed 24 Jul 2024 16:33:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     17465
IP address blocks:        43.252.92.0/22 maxlen: 22
                          43.252.92.0/24 maxlen: 24
                          43.252.93.0/24 maxlen: 24
                          43.252.94.0/23 maxlen: 23
                          43.252.94.0/24 maxlen: 24
                          43.252.95.0/24 maxlen: 24
                          103.233.64.0/24 maxlen: 24
                          103.233.65.0/24 maxlen: 24
                          103.233.66.0/24 maxlen: 24
                          103.233.67.0/24 maxlen: 24
                          111.92.0.0/17 maxlen: 24
                          116.68.64.0/21 maxlen: 21
                          116.68.64.0/24 maxlen: 24
                          116.68.65.0/24 maxlen: 24
                          116.68.66.0/24 maxlen: 24
                          116.68.67.0/24 maxlen: 24
                          116.68.68.0/24 maxlen: 24
                          116.68.69.0/24 maxlen: 24
                          116.68.70.0/24 maxlen: 24
                          116.68.71.0/24 maxlen: 24
                          116.68.72.0/21 maxlen: 21
                          116.68.72.0/24 maxlen: 24
                          116.68.73.0/24 maxlen: 24
                          116.68.74.0/24 maxlen: 24
                          116.68.75.0/24 maxlen: 24
                          116.68.76.0/24 maxlen: 24
                          116.68.77.0/24 maxlen: 24
                          116.68.78.0/24 maxlen: 24
                          116.68.79.0/24 maxlen: 24
                          116.68.80.0/21 maxlen: 21
                          116.68.80.0/24 maxlen: 24
                          116.68.81.0/24 maxlen: 24
                          116.68.82.0/24 maxlen: 24
                          116.68.83.0/24 maxlen: 24
                          116.68.84.0/24 maxlen: 24
                          116.68.85.0/24 maxlen: 24
                          116.68.86.0/24 maxlen: 24
                          116.68.87.0/24 maxlen: 24
                          116.68.88.0/21 maxlen: 21
                          116.68.88.0/24 maxlen: 24
                          116.68.89.0/24 maxlen: 24
                          116.68.90.0/24 maxlen: 24
                          116.68.91.0/24 maxlen: 24
                          116.68.92.0/24 maxlen: 24
                          116.68.93.0/24 maxlen: 24
                          116.68.94.0/24 maxlen: 24
                          116.68.95.0/24 maxlen: 24
                          116.68.96.0/24 maxlen: 24
                          116.68.97.0/24 maxlen: 24
                          116.68.98.0/24 maxlen: 24
                          116.68.99.0/24 maxlen: 24
                          116.68.100.0/23 maxlen: 23
                          116.68.100.0/24 maxlen: 24
                          116.68.101.0/24 maxlen: 24
                          116.68.102.0/24 maxlen: 24
                          116.68.103.0/24 maxlen: 24
                          116.68.104.0/24 maxlen: 24
                          116.68.105.0/24 maxlen: 24
                          116.68.106.0/24 maxlen: 24
                          116.68.107.0/24 maxlen: 24
                          116.68.108.0/24 maxlen: 24
                          116.68.109.0/24 maxlen: 24
                          116.68.110.0/24 maxlen: 24
                          116.68.111.0/24 maxlen: 24
                          116.68.112.0/24 maxlen: 24
                          116.68.113.0/24 maxlen: 24
                          116.68.114.0/24 maxlen: 24
                          116.68.115.0/24 maxlen: 24
                          116.68.116.0/24 maxlen: 24
                          116.68.117.0/24 maxlen: 24
                          116.68.118.0/24 maxlen: 24
                          116.68.119.0/24 maxlen: 24
                          116.68.120.0/22 maxlen: 22
                          116.68.120.0/24 maxlen: 24
                          116.68.121.0/24 maxlen: 24
                          116.68.122.0/24 maxlen: 24
                          116.68.123.0/24 maxlen: 24
                          116.68.124.0/24 maxlen: 24
                          116.68.125.0/24 maxlen: 24
                          116.68.126.0/24 maxlen: 24
                          116.68.127.0/24 maxlen: 24
                          202.83.32.0/22 maxlen: 22
                          202.83.32.0/24 maxlen: 24
                          202.83.33.0/24 maxlen: 24
                          202.83.34.0/24 maxlen: 24
                          202.83.35.0/24 maxlen: 24
                          202.83.36.0/22 maxlen: 22
                          202.83.36.0/24 maxlen: 24
                          202.83.37.0/24 maxlen: 24
                          202.83.38.0/24 maxlen: 24
                          202.83.39.0/24 maxlen: 24
                          202.83.40.0/24 maxlen: 24
                          202.83.41.0/24 maxlen: 24
                          202.83.42.0/24 maxlen: 24
                          202.83.43.0/24 maxlen: 24
                          202.83.44.0/24 maxlen: 24
                          202.83.45.0/24 maxlen: 24
                          202.83.46.0/24 maxlen: 24
                          202.83.47.0/24 maxlen: 24
                          202.83.48.0/24 maxlen: 24
                          202.83.49.0/24 maxlen: 24
                          202.83.50.0/24 maxlen: 24
                          202.83.51.0/24 maxlen: 24
                          202.83.52.0/24 maxlen: 24
                          202.83.53.0/24 maxlen: 24
                          202.83.54.0/24 maxlen: 24
                          202.83.55.0/24 maxlen: 24
                          202.83.56.0/23 maxlen: 24
                          202.83.58.0/24 maxlen: 24
                          202.83.59.0/24 maxlen: 24
                          202.83.60.0/23 maxlen: 23
                          202.83.60.0/24 maxlen: 24
                          202.83.61.0/24 maxlen: 24
                          202.83.62.0/24 maxlen: 24
                          202.83.63.0/24 maxlen: 24
                          202.88.224.0/24 maxlen: 24
                          202.88.225.0/24 maxlen: 24
                          202.88.226.0/24 maxlen: 24
                          202.88.227.0/24 maxlen: 24
                          202.88.228.0/24 maxlen: 24
                          202.88.229.0/24 maxlen: 24
                          202.88.230.0/24 maxlen: 24
                          202.88.231.0/24 maxlen: 24
                          202.88.232.0/24 maxlen: 24
                          202.88.233.0/24 maxlen: 24
                          202.88.234.0/24 maxlen: 24
                          202.88.235.0/24 maxlen: 24
                          202.88.236.0/22 maxlen: 22
                          202.88.236.0/24 maxlen: 24
                          202.88.237.0/24 maxlen: 24
                          202.88.238.0/24 maxlen: 24
                          202.88.239.0/24 maxlen: 24
                          202.88.240.0/24 maxlen: 24
                          202.88.241.0/24 maxlen: 24
                          202.88.242.0/24 maxlen: 24
                          202.88.243.0/24 maxlen: 24
                          202.88.244.0/24 maxlen: 24
                          202.88.245.0/24 maxlen: 24
                          202.88.246.0/24 maxlen: 24
                          202.88.247.0/24 maxlen: 24
                          202.88.248.0/24 maxlen: 24
                          202.88.249.0/24 maxlen: 24
                          202.88.250.0/24 maxlen: 24
                          202.88.251.0/24 maxlen: 24
                          202.88.252.0/23 maxlen: 24
                          202.88.254.0/24 maxlen: 24
                          202.88.255.0/24 maxlen: 24
                          202.164.128.0/24 maxlen: 24
                          202.164.129.0/24 maxlen: 24
                          202.164.130.0/23 maxlen: 23
                          202.164.130.0/24 maxlen: 24
                          202.164.131.0/24 maxlen: 24
                          202.164.132.0/24 maxlen: 24
                          202.164.133.0/24 maxlen: 24
                          202.164.134.0/23 maxlen: 24
                          202.164.136.0/21 maxlen: 21
                          202.164.136.0/24 maxlen: 24
                          202.164.137.0/24 maxlen: 24
                          202.164.138.0/24 maxlen: 24
                          202.164.139.0/24 maxlen: 24
                          202.164.140.0/24 maxlen: 24
                          202.164.141.0/24 maxlen: 24
                          202.164.142.0/24 maxlen: 24
                          202.164.143.0/24 maxlen: 24
                          202.164.144.0/24 maxlen: 24
                          202.164.145.0/24 maxlen: 24
                          202.164.146.0/24 maxlen: 24
                          202.164.147.0/24 maxlen: 24
                          202.164.148.0/24 maxlen: 24
                          202.164.149.0/24 maxlen: 24
                          202.164.150.0/24 maxlen: 24
                          202.164.151.0/24 maxlen: 24
                          202.164.152.0/24 maxlen: 24
                          202.164.153.0/24 maxlen: 24
                          202.164.154.0/24 maxlen: 24
                          202.164.155.0/24 maxlen: 24
                          202.164.156.0/24 maxlen: 24
                          202.164.157.0/24 maxlen: 24
                          202.164.158.0/24 maxlen: 24
                          202.164.159.0/24 maxlen: 24
                          2406:8800::/32 maxlen: 32
                          2406:8800::/36 maxlen: 36
                          2406:8800:10::/44 maxlen: 44
                          2406:8800:20::/44 maxlen: 44
                          2406:8800:30::/44 maxlen: 44
                          2406:8800:40::/44 maxlen: 44
                          2406:8800:50::/44 maxlen: 44
                          2406:8800:60::/44 maxlen: 44
                          2406:8800:1000::/36 maxlen: 36
                          2406:8800:2000::/36 maxlen: 36
                          2406:8800:3000::/36 maxlen: 36
                          2406:8800:4000::/36 maxlen: 36
                          2406:8800:5000::/36 maxlen: 36
                          2406:8800:6000::/36 maxlen: 36
                          2406:8800:7000::/36 maxlen: 36
                          2406:8800:8000::/36 maxlen: 36
                          2406:8800:9000::/36 maxlen: 36
                          2406:8800:9010::/44 maxlen: 44
                          2406:8800:a000::/36 maxlen: 36
                          2406:8800:b000::/36 maxlen: 36
                          2406:8800:c000::/36 maxlen: 36
                          2406:8800:d000::/36 maxlen: 36
                          2406:8800:e000::/36 maxlen: 36
                          2406:8800:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
                          rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7802 (0x1e7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: Jul 24 16:33:20 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a12cd0-3923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:14:a9:9e:1e:63:8c:d9:34:b7:5f:4b:80:
                    e0:6f:09:b2:40:af:86:4c:e0:f8:94:4a:8b:4a:b5:
                    c8:df:64:a9:52:b8:3d:7e:77:11:e4:fe:53:a2:7a:
                    8c:a9:bf:69:9a:9a:a6:4c:dd:95:e2:f1:52:cd:55:
                    96:a4:51:0e:2e:c3:96:96:13:5a:51:ba:73:c8:d0:
                    db:c4:54:28:47:76:75:8e:6b:ce:c5:bb:11:ce:85:
                    30:a1:16:1c:15:5e:3a:7d:fa:c2:f6:a2:7d:a1:ee:
                    eb:08:e8:2d:3c:9c:16:ac:10:bb:16:11:9e:52:0c:
                    e0:d2:55:80:60:26:6f:26:1e:9d:e5:33:14:a3:60:
                    4d:c3:c2:39:b1:14:1d:d7:93:61:52:9d:5c:58:cc:
                    25:5f:8c:d2:76:ea:9d:00:57:3f:5a:4e:82:cb:6c:
                    4c:6e:be:8a:80:b0:39:c1:82:3a:1f:6c:4c:50:2c:
                    fb:2a:60:3c:53:ac:1e:4e:3d:91:2f:ee:13:52:6a:
                    cc:41:fd:48:8d:c2:45:a8:32:e4:d3:86:f6:b2:9f:
                    2c:5a:8a:41:82:c8:53:a1:e3:06:ab:77:3d:25:cf:
                    3d:15:46:67:5b:54:d4:bd:2a:42:f3:3b:58:f7:a0:
                    8c:11:db:24:a3:02:b5:2b:05:7d:be:b3:7b:0a:0f:
                    92:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6B:D7:DD:BD:03:A6:9B:4C:6C:B2:E3:F8:5E:62:A9:6A:24:C9:77
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/166B6FD854EE11E78DFD1629C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.252.92.0/22
                  103.233.64.0/22
                  111.92.0.0/17
                  116.68.64.0/18
                  202.83.32.0/19
                  202.88.224.0/19
                  202.164.128.0/19
                IPv6:
                  2406:8800::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:a8:04:d8:ea:5b:87:f3:de:ff:02:a2:a2:55:38:fb:b9:c6:
         0c:96:e9:bb:5a:40:12:ae:6e:30:37:22:5d:dc:f3:1f:82:7e:
         b9:fe:b3:fe:07:c7:6f:50:4c:6e:f2:2b:e1:dd:9f:0e:da:57:
         ce:c1:76:74:8c:f9:9b:4d:46:c4:90:e4:1c:11:5a:f3:c7:a7:
         62:91:a0:19:10:9b:f4:23:c0:60:29:2c:8c:65:9b:b5:13:01:
         c2:63:98:02:94:a2:6a:61:2f:50:e6:f4:1f:0d:b9:8a:63:98:
         44:57:6e:86:b3:dc:98:d0:56:ac:86:7b:f9:1f:77:7a:a5:4f:
         4c:57:38:c9:16:30:e7:55:5f:c3:2f:a8:61:56:72:ee:36:8e:
         2e:3c:88:e7:65:5b:ae:ce:e2:b1:4f:0c:5f:54:ae:75:87:1f:
         a7:3f:9d:2c:e9:c6:8d:58:45:49:46:52:f9:b9:d6:ab:95:fa:
         06:db:02:11:8a:59:ba:3b:1b:5f:42:56:e7:99:7a:7b:f7:70:
         5b:8e:c7:fa:69:df:f6:11:c2:0d:84:88:bf:46:19:8a:52:f5:
         ea:23:02:fe:6a:ad:ae:68:4b:33:f8:24:36:38:90:ea:3d:73:
         79:73:0e:64:44:c8:d8:ca:3f:2e:12:bb:af:76:cf:46:35:90:
         38:1e:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org