Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
File:                     317095E0A28911ECBC355360C4F9AE02.roa (raw, json)
Hash identifier:          uV2UmQYkfzYcdxjPYQG2wuhRAMorkGhjJiNk6JKFedE=
Subject key identifier:   E7:97:E4:9A:4D:F0:E4:D4:70:3F:1D:5D:24:2B:98:FA:51:C4:1A:D7
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       05D8
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
Signing time:             Sat 13 Jan 2024 00:11:54 +0000
ROA not before:           Sat 13 Jan 2024 00:11:54 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     6453
IP address blocks:        166.81.51.0/24 maxlen: 24
                          166.81.52.0/24 maxlen: 24
                          166.81.54.0/24 maxlen: 24
                          166.81.55.0/24 maxlen: 24
                          166.81.56.0/24 maxlen: 24
                          166.81.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 13 00:11:54 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1d549-222b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:5a:e2:dd:f0:32:4f:60:5c:a4:08:e4:f0:
                    61:c8:0e:76:77:b5:f5:13:8f:81:00:a1:ed:15:f3:
                    de:75:89:b5:24:fe:04:ab:87:fc:57:ff:36:3a:c8:
                    65:21:4e:aa:ea:af:eb:42:28:eb:e6:00:a4:f6:27:
                    1e:68:b5:74:8a:3c:b4:3f:ab:51:d0:fc:f9:4c:da:
                    86:c9:0a:40:78:13:df:d5:41:1d:6d:50:9c:fe:9d:
                    ff:51:46:8d:03:19:b3:18:e3:43:c2:97:59:a3:62:
                    f8:5f:f0:21:43:58:94:de:2f:9a:24:9a:c6:56:b8:
                    fa:41:10:6f:14:87:1b:15:a5:ed:14:9d:f7:11:70:
                    a5:4e:34:bf:05:50:80:13:7e:33:42:98:32:c6:70:
                    7c:6b:af:d8:72:56:f5:50:e2:eb:b4:bc:88:a1:ad:
                    72:7c:84:44:c7:36:8d:86:51:27:34:b8:68:7c:bc:
                    8d:60:46:02:2d:48:10:54:b1:f2:ed:d0:2a:d5:0f:
                    0a:e6:23:1a:ae:c7:f6:b0:e0:8d:97:20:3d:bf:0a:
                    ca:ae:53:3d:c2:eb:1d:d4:14:8e:2e:6c:2f:58:c0:
                    3c:63:3a:21:c3:b0:73:ec:2f:77:d5:e1:14:4e:ba:
                    4a:53:63:97:f4:c4:f3:ef:23:61:e6:e4:3b:bc:e5:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:97:E4:9A:4D:F0:E4:D4:70:3F:1D:5D:24:2B:98:FA:51:C4:1A:D7
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.51.0-166.81.52.255
                  166.81.54.0-166.81.57.255

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:09:e2:3d:06:99:29:e9:3e:b6:26:80:87:54:82:05:43:
         60:09:f9:77:c8:9d:6b:31:2a:91:3c:b2:ab:ae:dc:73:dd:73:
         17:64:da:6d:d4:cd:ca:f3:54:bc:76:31:30:c2:1f:52:5d:ca:
         27:cb:44:c1:29:25:9d:b3:4a:f3:b0:58:76:08:73:a8:f6:15:
         c2:c6:77:0d:97:8d:b3:20:42:83:dc:cd:12:3c:6f:d7:55:24:
         9a:6a:8f:a8:66:c6:b3:03:b6:3b:93:9a:59:f3:df:f0:63:e7:
         59:70:90:6d:14:50:3f:7f:6a:b8:0d:81:ee:52:e1:8c:4b:e2:
         9c:e8:5b:c8:e0:e4:f9:b9:91:4f:6a:89:29:b3:36:37:8e:12:
         d0:78:df:88:b9:a0:d4:7e:ef:82:c3:a4:ee:85:fb:35:91:26:
         2b:ee:ba:79:8a:e0:79:77:f0:9e:13:50:33:f9:bc:f2:b1:2e:
         6c:f2:ad:a5:d4:d0:ea:4a:99:38:9d:39:83:63:6d:84:62:54:
         d7:75:dd:cd:44:c3:bc:79:35:32:d7:84:48:c2:db:10:ee:63:
         0f:f4:aa:cf:d6:98:df:65:c3:25:11:24:be:2f:06:93:f1:7a:
         80:5f:3c:19:39:97:bc:d4:b7:36:a6:43:5f:76:53:5e:d6:8f:
         52:01:74:42
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjQwMTEzMDAxMTU0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWExZDU0OS0yMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhta4t3wMk9gXKQI5PBhyA52d7X1E4+BAKHtFfPedYm1JP4Eq4f8V/82Oshl
IU6q6q/rQijr5gCk9iceaLV0ijy0P6tR0Pz5TNqGyQpAeBPf1UEdbVCc/p3/UUaN
AxmzGONDwpdZo2L4X/AhQ1iU3i+aJJrGVrj6QRBvFIcbFaXtFJ33EXClTjS/BVCA
E34zQpgyxnB8a6/Yclb1UOLrtLyIoa1yfIRExzaNhlEnNLhofLyNYEYCLUgQVLHy
7dAq1Q8K5iMarsf2sOCNlyA9vwrKrlM9wusd1BSOLmwvWMA8Yzohw7Bz7C931eEU
TrpKU2OX9MTz7yNh5uQ7vOUE3QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOeX5JpN
8OTUcD8dXSQrmPpRxBrXMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvMzE3MDk1RTBB
Mjg5MTFFQ0JDMzU1MzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMCIEAgABMBwwDAMEAKZRMwMEAKZRNDAMAwQBplE2AwQBplE4MA0GCSqGSIb3
DQEBCwUAA4IBAQAZ1QniPQaZKek+tiaAh1SCBUNgCfl3yJ1rMSqRPLKrrtxz3XMX
ZNpt1M3K81S8djEwwh9SXcony0TBKSWds0rzsFh2CHOo9hXCxncNl42zIEKD3M0S
PG/XVSSaao+oZsazA7Y7k5pZ89/wY+dZcJBtFFA/f2q4DYHuUuGMS+Kc6FvI4OT5
uZFPaokpszY3jhLQeN+IuaDUfu+Cw6Tuhfs1kSYr7rp5iuB5d/CeE1Az+bzysS5s
8q2l1NDqSpk4nTmDY22EYlTXdd3NRMO8eTUy14RIwtsQ7mMP9KrP1pjfZcMlESS+
LwaT8XqAXzwZOZe81Lc2pkNfdlNe1o9SAXRC
-----END CERTIFICATE-----
Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org