Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
File:                     250320C4761511EDA05B8A63C4F9AE02.roa (raw, json)
Hash identifier:          oOi07nx+dcH2HXRplm35uVqX6ArK1VrfAwaOgSa1yfI=
Subject key identifier:   5C:48:22:A9:BB:AB:96:4B:D7:73:C2:89:42:39:1C:7A:AB:4E:F1:52
Certificate issuer:       /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial:       011B
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
Signing time:             Tue 21 May 2024 05:40:48 +0000
ROA not before:           Tue 21 May 2024 05:40:48 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9509
IP address blocks:        165.12.0.0/16 maxlen: 16
                          192.207.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 19:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
        Validity
            Not Before: May 21 05:40:48 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664c33e0-bf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:ae:7b:c0:0f:60:73:b2:3f:2c:87:e2:db:
                    8a:f5:9d:17:60:5a:bb:6e:b2:1e:98:c6:60:0b:6f:
                    73:7e:97:00:ae:72:bb:15:a9:00:e5:d8:07:e6:52:
                    ce:e6:8c:f7:21:f8:e1:57:31:a0:50:cd:50:3a:d3:
                    39:48:71:ea:71:38:d5:51:e7:02:01:1c:34:5a:d3:
                    74:03:3f:06:de:fa:6d:c2:e8:86:74:05:ab:b4:19:
                    48:44:2e:4e:cd:e1:8d:e6:8e:8f:8a:89:74:35:15:
                    0c:c8:2f:f6:3c:d3:6e:99:56:b6:2a:58:5a:92:7e:
                    b5:2e:45:2c:83:6e:05:ce:42:f8:e4:6f:c7:94:ca:
                    ef:c8:a7:93:12:f2:f1:0b:fd:d1:05:82:77:6d:ab:
                    4b:c2:ce:d6:b4:f3:98:e3:52:e1:b4:df:63:11:68:
                    d6:d8:87:6f:88:9c:7f:d3:29:71:35:68:32:cf:5c:
                    fa:b8:81:1b:97:42:28:6e:c4:4c:c9:c2:0e:43:08:
                    94:6a:97:a2:67:6b:47:45:c3:64:58:37:31:47:a6:
                    ae:e6:d5:63:36:b0:f0:ac:4f:58:e9:8f:42:a8:01:
                    e7:79:01:b1:b8:ae:5c:4e:9e:39:76:4e:94:05:81:
                    fd:33:3a:36:af:60:2a:5a:68:12:00:be:dd:e2:a3:
                    4d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:48:22:A9:BB:AB:96:4B:D7:73:C2:89:42:39:1C:7A:AB:4E:F1:52
            X509v3 Authority Key Identifier:
                keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.12.0.0/16
                  192.207.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:8b:ce:2a:9e:3c:85:94:2c:a9:b7:fb:9b:fb:38:5b:0c:
         47:95:84:73:05:20:86:e9:51:ba:a5:d7:1b:33:95:bd:84:b3:
         43:35:e3:41:ed:aa:5f:a7:11:06:97:1e:a6:59:20:d7:09:d6:
         9a:31:18:f3:d5:62:5c:50:6b:a6:7b:8c:eb:f8:d0:da:9b:b2:
         44:69:d3:2b:8e:7f:0b:ab:3c:03:8d:6c:83:7c:36:c6:bd:cc:
         23:fa:90:1b:38:7e:9e:c8:23:f2:d5:a9:09:c3:fb:1f:82:bf:
         a7:af:9c:38:32:82:5b:64:ef:17:b4:a5:19:a0:c5:d5:40:5e:
         a7:72:e9:29:73:6b:c9:15:1c:50:1c:fb:41:9f:e2:f0:63:6a:
         a6:ba:e0:b9:c4:6e:88:d9:c4:29:4a:84:8d:b8:7c:5a:27:9a:
         55:6f:08:86:96:d7:e7:d4:44:34:ff:9b:47:90:32:36:27:5d:
         ab:27:82:37:f1:56:d3:7c:75:23:4f:df:74:88:a8:77:ea:7e:
         94:3f:0d:ca:f6:88:42:c4:56:89:b5:73:ed:d0:6d:71:60:f3:
         92:34:a8:09:99:72:b6:66:a0:f7:3a:4f:88:0c:6d:87:c6:99:
         33:e9:95:b3:84:53:00:e0:be:41:63:c5:62:12:d0:f4:b6:8d:
         0d:6a:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:07 2024 by rpki-client on console-fra.rpki-client.org