Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/8987F942335911E8A1642A7FC4F9AE02.roa
File:                     8987F942335911E8A1642A7FC4F9AE02.roa (raw, json)
Hash identifier:          r7nt+0YR0gcp9UZZg6iqfoS5mJ5OaWvN1C2TW4aaCpg=
Subject key identifier:   E2:05:92:F3:FC:7F:E4:0B:2C:0D:7C:F7:89:AF:64:E5:AE:0E:76:0C
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3530
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/8987F942335911E8A1642A7FC4F9AE02.roa
Signing time:             Mon 16 Sep 2024 14:51:13 +0000
ROA not before:           Mon 16 Sep 2024 14:51:13 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     59432
IP address blocks:        182.54.233.0/24 maxlen: 24
                          182.54.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep 16 14:51:13 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e845e1-fb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:d6:2f:98:96:b6:3d:99:2e:8e:f7:d4:32:
                    1b:81:22:e1:d9:65:8a:00:1d:12:e3:7f:4b:6b:a8:
                    98:27:86:93:59:11:a8:9e:24:fd:28:6b:a4:31:b5:
                    07:75:4a:e5:37:d9:ed:cd:76:ac:72:74:02:48:5b:
                    e5:94:3a:93:5e:18:f8:aa:d9:0d:a7:66:c4:e2:03:
                    09:b0:d6:e1:d2:c2:ed:c8:5b:6c:7f:6f:81:70:23:
                    b2:63:b8:fb:96:58:71:3e:c9:b6:45:17:21:87:58:
                    ce:62:4a:ee:81:95:6c:ab:32:e5:ad:40:11:3b:a6:
                    a2:f3:3e:94:e7:5f:42:1e:92:de:ba:75:72:f0:50:
                    3d:35:12:3c:64:ec:b3:a1:0a:9a:3c:d1:b7:f4:45:
                    fa:e7:ca:71:95:d7:a2:a5:de:fa:36:42:24:e5:fb:
                    2e:f0:db:de:78:68:fb:a7:f9:97:4b:92:88:41:bd:
                    2d:4a:51:87:b0:f0:73:b5:cd:bc:ba:6c:33:6f:83:
                    f5:dc:96:91:ea:e0:f1:de:33:e2:f3:3a:8b:d6:db:
                    44:81:e3:a3:8e:76:60:51:94:ce:87:fc:56:11:4d:
                    44:6c:b2:cb:db:42:77:0c:20:ef:e5:6c:de:9e:2c:
                    66:35:a5:97:4a:ff:d7:60:4b:a3:39:c7:3d:c4:de:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:05:92:F3:FC:7F:E4:0B:2C:0D:7C:F7:89:AF:64:E5:AE:0E:76:0C
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/8987F942335911E8A1642A7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.233.0/24
                  182.54.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1c:1e:a9:3a:71:6a:d2:87:c3:4a:5e:92:64:c2:23:df:be:
         80:fc:74:81:56:1b:86:fa:ff:03:ff:7b:97:64:d9:52:bc:75:
         77:5f:3a:01:5f:9a:25:fa:77:a4:7f:e0:ac:44:fa:cc:b5:00:
         d2:c7:20:d3:d4:76:cc:6e:1b:28:d4:c5:9d:80:76:56:a7:ae:
         62:a3:3f:32:d3:a0:ef:a8:23:da:94:05:d0:19:4f:17:6c:b7:
         2c:31:1f:7d:82:7d:f6:7a:ee:09:d9:a5:d0:1f:02:06:39:2f:
         03:18:a4:a4:70:be:78:02:81:1d:a4:13:cd:15:2a:c3:99:85:
         91:9b:cc:ad:69:cd:38:84:91:c7:70:32:05:d1:02:cf:6f:e4:
         3e:6d:db:66:d0:56:53:1c:c6:fd:7c:56:59:db:65:db:fb:97:
         92:4f:b9:4b:94:0e:13:e1:fd:22:7f:c8:75:bb:21:9e:81:89:
         7d:e1:6d:d8:fd:67:c0:b0:92:fb:98:ad:03:b6:4d:13:b0:a9:
         23:46:fc:ae:b5:58:be:85:03:62:c6:e9:db:a7:f6:80:46:2d:
         a5:7c:cf:e1:f8:e0:27:61:73:5d:d1:36:8a:78:34:dd:12:6d:
         c1:5a:98:97:0a:26:c9:02:73:7e:11:b6:6e:1b:c2:2c:8a:4f:
         01:1d:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:12:04 2024 by rpki-client on console-fra.rpki-client.org