Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
File:                     184CBE58768B11EFAF7A8C68C4F9AE02.roa (raw, json)
Hash identifier:          NRD5JEMwxnAIyegq+yDnZE3cvxLvnDvPFwXtytdSo9U=
Subject key identifier:   CF:1C:5B:39:0C:19:56:6B:8E:E7:30:71:1D:A7:5B:E4:E1:8B:96:D1
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3537
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
Signing time:             Thu 19 Sep 2024 13:28:45 +0000
ROA not before:           Thu 19 Sep 2024 13:28:45 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     35758
IP address blocks:        182.54.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep 19 13:28:45 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66ec270d-9178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:1c:05:d9:a4:0d:7b:af:e7:1f:0c:a6:18:
                    c3:d1:51:9e:83:0f:53:e1:33:95:d8:d6:88:93:96:
                    a3:2b:0f:90:0e:26:6c:ea:92:97:27:01:e5:18:59:
                    5a:f5:30:aa:06:59:3f:e2:ac:39:f2:bd:23:37:b4:
                    bc:4e:34:bc:88:97:14:18:9b:1a:ab:51:6e:8b:17:
                    e2:37:09:da:c7:21:05:1e:b1:09:01:08:51:34:40:
                    ea:e2:c7:b3:ea:fa:dd:83:61:90:59:ef:1f:b8:fa:
                    fd:5e:95:72:3f:0d:4d:4e:a9:8a:c1:09:a3:6c:ef:
                    16:ec:07:81:f6:17:a5:55:6e:93:07:d2:9f:f5:69:
                    1c:26:80:7e:fa:6b:a1:54:6c:60:7e:e3:1c:46:1d:
                    13:de:91:95:88:8d:d0:ee:e7:03:da:b6:a4:51:54:
                    bc:d0:0c:69:10:41:f9:f1:ed:47:f7:a2:fe:71:8b:
                    83:e9:f1:80:65:3d:69:ca:1f:14:46:a5:3b:b4:70:
                    6a:a1:8e:ba:bd:63:57:68:39:9e:1f:bd:2e:bf:98:
                    55:fe:4c:7c:db:30:ae:1a:b0:0d:9f:5c:d4:ee:20:
                    47:20:35:7d:59:93:cc:eb:91:d5:92:2e:23:45:d0:
                    7d:1e:5c:80:27:04:b2:7e:ef:e6:c9:1f:04:60:bd:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1C:5B:39:0C:19:56:6B:8E:E7:30:71:1D:A7:5B:E4:E1:8B:96:D1
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/184CBE58768B11EFAF7A8C68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:96:06:9f:7f:ba:fa:87:87:21:be:b4:9f:12:f5:ab:a6:
         11:cf:73:f1:97:29:9f:bf:ca:e6:53:4f:bf:cc:cb:91:c1:0b:
         35:21:52:e4:5f:79:4e:c9:47:71:d9:62:94:ed:7a:d5:1e:eb:
         14:aa:f9:af:7e:39:fb:61:45:70:bd:7d:75:9f:74:d1:f2:b0:
         5d:1c:6d:39:c3:de:07:94:2a:e3:7d:c8:61:3c:cf:e8:b7:7b:
         9a:2f:b5:2a:a0:f7:69:1f:73:dc:07:1c:71:68:88:8b:d3:ff:
         1b:32:e8:e5:73:45:68:08:3e:0a:c1:24:ea:c6:3e:5b:06:2c:
         a2:be:b0:16:ff:02:8a:dd:ad:52:b4:11:e4:d1:67:43:40:84:
         6a:80:c8:15:cd:ee:47:5d:38:82:38:8b:a3:37:c3:b4:85:82:
         6a:a6:e2:32:24:03:b6:ed:2a:52:91:6f:00:cd:74:36:04:9b:
         22:16:05:10:1b:a0:5a:10:34:ce:5c:c6:7e:2e:3c:20:a6:f2:
         92:6b:94:d4:47:56:78:bb:20:7e:fa:b4:84:53:92:d1:70:c5:
         84:8d:73:0a:3a:b4:b4:1f:5e:75:ef:bd:20:f3:e4:a5:cd:8a:
         30:77:e6:6f:69:66:17:02:ac:5f:b9:90:bc:18:5a:ff:0a:30:
         2e:c2:c9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:19 2024 by rpki-client on console-ams.rpki-client.org