Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
File:                     79D30C40BABE11EB825A5D09C4F9AE02.roa (raw, json)
Hash identifier:          QEtGmB7oTWw+1ELrOkqFPzSWqRypVJqPa25QYuXsots=
Subject key identifier:   CE:15:33:AB:A6:F0:38:2D:CC:12:C4:80:FC:E2:FD:A8:1E:1F:C0:2D
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       068F
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 06:18:35 +0000
ROA not before:           Thu 03 Oct 2024 06:18:35 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     32787
IP address blocks:        166.81.2.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 17:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Oct  3 06:18:35 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66fe373a-8180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:de:c2:ee:9f:4d:eb:80:e6:5a:cd:55:2f:
                    90:06:98:1d:72:23:5e:5d:57:34:33:f9:90:f1:bb:
                    a9:c4:4c:e4:59:97:9d:c9:25:4a:71:1e:ab:1e:5d:
                    b8:95:9a:89:15:d0:ae:5d:f2:ca:a4:a4:4d:b6:a6:
                    b6:c5:dc:f9:c9:e9:4f:ab:da:8e:02:ae:1d:05:d5:
                    10:b6:ed:50:fa:15:9b:50:df:7e:aa:97:f6:f4:47:
                    a6:c2:53:3b:15:48:6f:e0:2b:77:a8:36:67:83:0f:
                    68:35:81:c8:43:7e:d0:77:23:e8:c0:9b:de:90:38:
                    02:32:de:e1:af:7e:96:d6:1b:59:9c:ff:29:49:d7:
                    34:70:5e:95:7c:b4:60:1b:d1:19:22:9a:87:c2:63:
                    af:c8:8a:63:79:77:15:ba:18:c0:d5:5e:59:1e:ce:
                    b4:33:c3:7d:d9:bc:bd:a8:f4:a0:e3:4a:4f:d3:5e:
                    af:4b:3d:4c:0d:cb:d2:3b:cc:d5:72:6c:76:c1:8e:
                    69:a1:68:80:29:a3:96:6b:3e:99:63:4e:72:00:03:
                    8e:5c:11:57:1c:08:89:a3:33:1a:43:50:b3:27:9e:
                    fa:0a:e6:cb:d9:1d:4d:a3:40:3c:62:c3:7c:e7:7e:
                    61:de:17:7a:c6:e6:b6:a4:5a:e6:12:fc:0e:a0:7f:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:33:AB:A6:F0:38:2D:CC:12:C4:80:FC:E2:FD:A8:1E:1F:C0:2D
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.2.0/24
                  166.81.63.0/24
                  166.81.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:77:bc:b9:45:1a:dc:44:a1:3a:91:21:2d:36:63:68:d3:1e:
         f6:42:e5:21:0c:2a:f6:ba:9a:f3:21:9f:dd:f5:3b:19:06:20:
         f2:53:3a:92:27:90:72:70:8f:4e:e9:e9:8d:d0:53:f3:15:89:
         a9:ef:dc:2e:92:31:db:37:58:d4:57:1b:3d:2d:0b:33:86:1b:
         72:e5:5c:42:55:e3:0d:0c:c2:5d:3c:08:b8:d1:8e:d5:e9:cc:
         57:31:c4:50:69:a2:b5:4a:33:c6:96:77:61:c3:e0:a7:56:df:
         98:02:de:f5:0f:5b:06:11:71:fa:9c:b4:12:e2:b0:a5:64:44:
         e5:d7:48:c9:f9:c6:6d:db:cc:49:5d:b4:9a:f9:10:30:dd:c3:
         d7:cc:18:2f:f9:0f:e3:fb:94:09:14:d3:1c:ca:7c:e7:e5:46:
         dd:2d:08:2e:2d:34:87:c5:fa:2d:89:47:f7:03:19:0c:e0:1a:
         aa:4b:bd:9f:60:55:ee:7b:fa:c5:8f:0d:8e:a7:70:45:83:ae:
         12:5c:20:8c:56:28:67:f7:0f:50:f5:9c:3d:04:81:31:34:2d:
         bf:cd:7c:fc:1c:82:32:d7:c8:2f:a6:f8:9e:ac:c1:a9:82:80:
         db:c2:46:c7:6d:df:a1:b9:b2:72:e0:5f:26:00:6a:ed:3d:88:
         99:4d:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:53 2024 by rpki-client on console-fra.rpki-client.org