Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
File:                     2AECA58494EE11EE84F9D73CC4F9AE02.roa (raw, json)
Hash identifier:          iJVLBFfNHCqiKdww74crDyNfaz//PGmFtjdlqaDOdWM=
Subject key identifier:   A8:0D:DE:67:11:15:D7:C8:AD:BF:7A:CD:E1:E8:F4:8A:AF:DD:93:DE
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       05D2
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
Signing time:             Sat 13 Jan 2024 00:11:47 +0000
ROA not before:           Sat 13 Jan 2024 00:11:47 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     19551
IP address blocks:        166.81.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 13 00:11:47 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1d543-d1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:a0:64:40:98:fa:7a:c2:ff:33:03:3b:51:
                    a6:a4:6b:da:81:13:12:dc:c4:16:e2:d7:67:5b:4f:
                    77:8d:be:bd:59:ac:78:5c:fc:09:4a:e7:3a:bb:ae:
                    ce:86:dd:ca:c9:ca:2d:38:0d:84:8a:46:90:6a:6c:
                    40:e7:eb:da:e2:95:ef:33:27:fb:f5:46:21:90:7c:
                    14:3f:f0:35:5a:ff:e0:39:66:a9:db:a0:e2:dd:c1:
                    a7:ed:8b:16:4e:50:7d:cb:21:15:f0:05:8c:ab:fd:
                    93:c2:47:82:d5:17:15:95:5c:02:be:36:f9:d1:c6:
                    c3:17:28:cb:35:a9:b7:a2:09:c8:d7:af:5c:7d:e6:
                    a8:87:cc:17:28:34:8d:ba:ae:e8:6e:20:93:1e:a6:
                    50:78:13:e2:a8:0e:a6:0e:49:44:30:39:22:94:33:
                    7c:a7:33:b9:f4:6d:74:07:bc:af:64:9a:b1:ec:a9:
                    68:e3:d4:17:0f:db:c2:6f:b4:e2:77:a2:7e:b7:ae:
                    4a:b0:e0:89:c3:0d:fc:ce:84:28:7f:f6:49:8c:f0:
                    c7:01:8a:37:e1:9c:3f:02:0c:d6:fa:24:b2:6b:90:
                    d6:5e:05:34:10:df:78:8f:d0:58:ff:a8:35:64:ea:
                    6d:de:7b:2b:99:08:79:77:1d:4d:7d:86:9f:55:35:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:DE:67:11:15:D7:C8:AD:BF:7A:CD:E1:E8:F4:8A:AF:DD:93:DE
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:87:a8:ec:27:57:51:d0:3e:cd:3b:1d:b1:5d:be:2c:32:
         05:8f:bc:58:ec:35:9e:d5:01:fa:6c:86:a2:65:7c:4f:e2:ef:
         53:9c:b6:65:7a:81:d3:57:3d:29:b2:6b:68:e8:5e:d6:e3:2b:
         e3:93:e4:a5:5b:50:b8:70:33:08:2e:cd:31:2a:63:6d:4d:c6:
         e3:60:6e:6c:ce:59:da:1b:6e:cf:8f:e1:9e:3d:f3:da:a9:b9:
         7d:47:23:7c:55:c9:f3:08:b5:30:3c:6a:61:4d:77:22:87:c2:
         da:6e:7a:eb:ba:ad:54:8e:22:97:57:ec:bc:5b:25:f4:03:72:
         f6:59:8f:14:f4:d8:d9:2b:51:68:05:e8:6d:1f:23:7b:26:21:
         e7:9c:48:78:2e:95:96:74:d2:fc:a3:52:f8:78:d7:88:d8:5f:
         44:31:70:dc:a0:fa:60:36:ec:f7:e7:0d:a7:32:bb:49:f9:28:
         22:7f:a2:80:15:06:32:3e:2a:e0:fa:59:11:50:02:18:9a:2f:
         62:1c:57:60:16:b8:87:f3:57:fd:79:0a:66:e1:80:5c:c8:e9:
         ca:b5:29:12:b0:79:52:98:f7:3d:52:9a:5c:32:ca:10:e1:77:
         e4:8c:72:77:48:ff:98:f9:2b:78:cc:8f:29:39:39:e0:b6:67:
         77:a7:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org