Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
File:                     79D30C40BABE11EB825A5D09C4F9AE02.roa (raw, json)
Hash identifier:          erdJwwKYuHo5MOa5sdoIAFW6uQlopkViyg002+GNblI=
Subject key identifier:   C3:21:49:4C:25:36:C7:7A:25:73:4B:41:0C:98:76:AC:F6:4C:91:69
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       05D4
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
Signing time:             Sat 13 Jan 2024 00:11:50 +0000
ROA not before:           Sat 13 Jan 2024 00:11:50 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     32787
IP address blocks:        166.81.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 13 00:11:50 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1d545-5395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:f1:09:a4:29:52:25:aa:7a:96:2c:d4:e6:
                    99:91:1b:38:45:b5:5e:3b:da:65:7a:21:42:d2:6b:
                    d7:e7:a4:26:f0:18:08:2d:97:ca:35:7b:46:35:7e:
                    6a:a0:04:9c:45:df:28:8c:1d:5c:f2:dd:c7:08:17:
                    32:44:2a:78:72:1d:cb:25:55:4c:70:3b:16:ae:b4:
                    c2:03:e4:36:b9:c9:f9:00:92:af:47:1e:08:59:6c:
                    fe:0b:17:7a:33:2c:0b:aa:c5:3b:33:65:bc:c3:bc:
                    97:c3:da:c8:3b:4e:34:f4:3f:1d:77:0d:a2:ba:42:
                    37:69:86:f1:0f:d4:7a:05:34:77:d6:08:ba:8d:ea:
                    8a:c5:9e:20:84:8f:b2:d1:af:b3:8a:89:7c:34:7c:
                    52:e3:b3:3c:d7:d8:c1:90:0e:c4:40:16:42:8d:1c:
                    41:46:f1:c0:7b:e8:8c:16:b6:f5:c2:59:75:14:9c:
                    50:69:03:11:95:69:a0:12:ec:0b:aa:b5:c2:63:28:
                    99:75:bd:5d:91:69:f8:93:34:80:c1:62:29:65:0c:
                    46:54:1e:93:30:f5:b1:77:a9:5f:e7:f2:50:64:d8:
                    cc:ff:7b:61:48:bb:2f:47:ab:88:6a:11:25:ee:21:
                    2a:eb:ae:ad:e1:2a:da:a0:62:f3:f9:7a:93:5a:c5:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:49:4C:25:36:C7:7A:25:73:4B:41:0C:98:76:AC:F6:4C:91:69
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:98:3f:c9:69:d0:da:32:1c:26:8f:83:2a:53:2e:ff:4f:31:
         ad:99:c2:a5:04:d1:a7:7f:e3:30:70:cb:91:ab:57:1b:a9:1f:
         a7:aa:72:be:4f:f6:50:09:93:bf:aa:71:51:ee:76:74:1a:56:
         b3:36:c6:2e:e8:8b:0d:6f:77:41:dc:e2:4c:76:f3:e8:25:8d:
         4a:f7:47:f1:67:8f:2c:24:f4:64:41:c2:2d:f4:b6:f8:ef:7e:
         3c:6d:f9:8c:d3:bd:2d:93:bd:0f:59:7c:8d:5a:9d:dc:0f:2a:
         81:a2:fb:40:00:de:21:6d:e7:a2:11:a7:49:46:72:a0:ce:b3:
         43:de:ee:75:ce:bc:9f:94:3b:dd:4e:36:44:87:1c:9f:3f:3d:
         74:54:b3:db:dd:13:ff:57:12:6e:8f:15:97:10:b3:46:84:24:
         b5:fb:08:b6:e9:a1:8d:7b:cf:48:a8:e0:c9:45:70:c4:e8:b1:
         59:b4:d7:6f:4d:e0:85:fa:29:51:36:db:6c:89:15:7b:24:4e:
         f7:fe:be:8c:27:b5:75:3f:6b:6c:27:34:6f:3b:1b:97:dd:fb:
         ae:3c:f1:fd:55:9a:ed:e6:4f:f8:89:2d:f6:b1:a1:f9:b4:79:
         bb:f2:5a:66:2d:82:06:d7:53:ea:41:c6:ae:07:d0:81:4c:e2:
         5b:62:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org