Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
File:                     F693F2689CB811EB97F77E14C4F9AE02.roa (raw, json)
Hash identifier:          /f5dzKwWa8mvOs/cB+px+vSnnT+vivJkjy65k2sS3ug=
Subject key identifier:   5E:6C:A6:53:7F:57:F4:0F:79:FB:EA:1F:81:18:46:F5:69:C6:AC:EA
Certificate issuer:       /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial:       1385
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
Signing time:             Tue 20 Feb 2024 17:55:19 +0000
ROA not before:           Tue 20 Feb 2024 17:55:19 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     9443
IP address blocks:        139.216.0.0/16 maxlen: 16
                          139.218.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 May 2024 02:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4997 (0x1385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
        Validity
            Not Before: Feb 20 17:55:19 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65d4e786-7921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:72:b9:fe:4e:4b:30:0e:85:22:b8:0f:21:
                    27:8f:41:c3:70:5e:7f:7a:76:ed:ab:7b:8d:0c:98:
                    b8:6b:64:0c:f9:f8:a4:b8:f3:78:cc:98:25:c2:77:
                    c3:d1:0d:a0:80:bc:fe:ce:5a:67:89:24:dc:0d:a2:
                    53:bb:5a:41:ff:55:43:18:1c:27:d1:97:d1:0c:28:
                    5d:9d:9c:12:ba:6e:96:d3:ff:a4:4c:f2:a6:30:e3:
                    28:19:af:82:55:d9:77:6c:e4:1b:f5:72:f8:d1:e1:
                    82:d4:82:1a:f5:b3:49:b2:7c:f7:7f:6e:9d:25:76:
                    ee:5c:82:4e:da:5e:95:56:b6:1d:80:3c:85:28:49:
                    14:46:0d:5f:5d:c7:c3:f6:af:5a:49:d8:90:29:c4:
                    d8:87:3c:fe:4e:a5:5e:74:00:ef:bc:d6:2d:0e:17:
                    1c:52:72:20:ba:88:f0:79:e2:17:c0:e9:46:7f:f6:
                    78:81:7f:ff:88:15:f5:ef:ac:2f:b5:3a:2c:04:56:
                    11:eb:c3:0c:0e:92:67:7c:1c:df:24:ff:0a:c9:99:
                    b4:d3:42:dd:6d:05:27:64:5c:4d:95:fb:43:20:c4:
                    c0:42:0f:09:8c:19:be:ac:1b:61:9b:56:f1:ec:79:
                    1c:50:66:14:36:3f:18:2a:20:f3:d2:1a:31:c3:be:
                    5d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:A6:53:7F:57:F4:0F:79:FB:EA:1F:81:18:46:F5:69:C6:AC:EA
            X509v3 Authority Key Identifier:
                keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/F693F2689CB811EB97F77E14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.216.0.0/16
                  139.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:42:b1:54:09:c8:0f:b3:2d:2b:6b:06:a3:79:98:17:41:
         de:67:a6:c5:81:cc:b0:83:94:f2:6f:cc:84:89:92:f7:ed:33:
         7c:6a:3e:ec:f6:c0:aa:2f:50:c6:ae:9a:9b:a7:b8:e5:a3:b3:
         6b:e6:3a:0c:76:00:a1:a5:4d:88:39:56:bb:a6:c0:65:d4:74:
         7a:e2:f9:9e:28:b1:5a:7e:1a:e2:82:9e:f9:9c:97:81:63:ee:
         ce:cb:93:a4:58:4a:ae:b3:cb:47:40:e4:af:0f:a8:77:c4:dc:
         c6:8a:40:aa:44:8d:e2:9d:fe:b9:91:33:d2:a8:cb:df:1c:9f:
         4a:b8:71:2b:54:ef:68:44:41:9d:3a:5d:9b:c5:0c:2d:e2:cf:
         71:00:c1:ba:1b:b4:31:c5:7e:85:01:e8:fe:f7:96:86:01:5f:
         f1:a5:42:2a:38:34:b2:cf:0c:c6:10:9d:25:b1:7c:12:4f:a1:
         bc:62:6b:cf:bd:4b:93:4e:e5:18:e2:f2:a1:03:be:7d:8a:e5:
         28:34:44:70:11:69:7b:74:2d:45:82:c0:94:fe:28:c7:97:50:
         95:7f:1f:cf:f8:58:49:3b:3f:fe:aa:19:ab:44:84:93:1e:55:
         db:aa:d2:98:60:24:33:fc:a6:0d:1d:db:88:69:ed:6d:6d:ef:
         6b:0a:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:18:49 2024 by rpki-client on console-ams.rpki-client.org