Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
File:                     8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (raw, json)
Hash identifier:          pGZTk76nvEvH+X6mKbAJLcJp9iyzmP73pcve+h0fuy0=
Subject key identifier:   67:C7:4F:4C:A2:8F:21:E2:AA:4E:C6:E4:B2:21:B5:3D:A6:F6:AE:9A
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       05D7
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
Signing time:             Sat 13 Jan 2024 00:11:53 +0000
ROA not before:           Sat 13 Jan 2024 00:11:53 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     51318
IP address blocks:        166.81.32.0/24 maxlen: 24
                          166.81.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 13 00:11:53 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65a1d548-ab49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:45:a0:f2:7b:4f:01:b9:fb:7f:66:f5:a1:
                    75:b1:b1:59:75:f7:f8:6f:51:3f:eb:bf:ba:fd:1a:
                    bc:37:9e:8e:30:e7:00:8e:39:c7:fe:64:62:d4:c7:
                    bd:e5:82:18:dc:00:25:71:09:73:72:e8:e5:9e:f5:
                    37:4a:0b:5b:ec:61:ac:3e:ce:a8:49:e7:37:e4:bb:
                    42:63:40:2c:be:6d:ea:5d:cb:b6:42:df:ea:f1:88:
                    7b:f0:63:08:4b:ca:32:56:9d:4c:93:b1:e2:10:e3:
                    7f:7a:f4:40:37:0a:0a:ba:8d:b9:15:60:67:ce:ef:
                    6e:3c:77:66:7d:b6:1e:76:a6:48:ec:12:bc:de:05:
                    e1:00:9c:21:a7:78:36:ff:c5:88:21:1e:4c:d1:f5:
                    a1:3a:2c:bc:9c:83:fe:f0:9c:bd:bb:6f:73:21:05:
                    3e:7b:7e:6b:e9:2c:2d:08:20:0a:c2:5f:50:c6:f2:
                    65:a6:53:f6:29:82:93:94:26:71:94:a5:ba:15:b5:
                    4e:66:76:a7:0a:ce:63:15:cc:91:a2:7a:ff:4c:6c:
                    c4:76:3e:56:b9:35:89:2a:9c:ea:f1:f8:a8:56:da:
                    8a:f0:07:19:2b:d9:3d:7b:1a:9e:26:ea:bd:ed:68:
                    1e:4d:3b:ba:4d:f9:cd:45:a0:1a:79:6a:34:9c:02:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C7:4F:4C:A2:8F:21:E2:AA:4E:C6:E4:B2:21:B5:3D:A6:F6:AE:9A
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/8BB6CB12A4D511EB9E4DF342C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.32.0/24
                  166.81.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:de:d3:58:ef:1d:51:df:e6:df:f8:45:71:f9:50:4b:23:f8:
         1b:6e:17:5a:90:64:da:55:0d:f5:4c:7c:54:c4:0b:74:a3:23:
         04:ca:40:0b:55:f0:73:3d:fd:3f:74:61:14:e8:fc:97:1a:c0:
         85:f0:31:20:36:88:b2:a5:b7:00:98:e1:0c:97:9a:0a:04:c7:
         87:cb:3e:54:72:54:49:d8:12:0d:7f:d9:df:d3:dc:68:5a:52:
         1e:c7:b3:7a:e9:bf:20:ea:6b:ed:f2:fa:f6:f1:bd:47:86:a8:
         5c:3a:24:6c:77:50:97:12:31:cc:be:0b:e8:b7:9f:54:9f:4b:
         20:02:bd:51:24:68:96:5f:54:66:ba:17:05:7d:98:16:94:e9:
         09:b9:ab:5d:07:79:cb:13:fa:08:d4:d8:25:d8:a5:a4:5b:d6:
         c9:5b:57:85:70:0e:16:81:89:7c:e6:14:b9:1f:c5:e2:1b:c1:
         07:5f:65:e4:c8:62:b9:3e:14:cf:b8:3a:25:2e:70:6c:02:18:
         e5:48:be:4b:ad:7c:b6:ca:cf:8a:f9:45:30:6e:e2:80:3b:fc:
         33:c2:5b:5b:92:0a:17:31:d0:ee:bd:52:f6:1b:47:e5:fc:52:
         2f:23:55:1c:22:ac:13:f8:17:7b:1e:1d:79:c3:70:72:21:55:
         17:2a:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:43 2024 by rpki-client on console-fra.rpki-client.org