Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
File:                     34E183809E5F11EB97709628C4F9AE02.roa (raw, json)
Hash identifier:          foE9s6/AQfQ6WPOMFTFBf1eqXxlDCuQ9XLb/49LNi4o=
Subject key identifier:   0A:FF:A4:47:FD:66:B2:00:53:A7:A0:A6:6D:4F:3F:13:A8:7D:1E:1F
Certificate issuer:       /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial:       08B6
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
Signing time:             Thu 30 May 2024 22:19:01 +0000
ROA not before:           Thu 30 May 2024 22:19:01 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     24541
IP address blocks:        203.26.6.0/24 maxlen: 24
                          2001:df1:be00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
                          rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
        Validity
            Not Before: May 30 22:19:01 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658fb54-51aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:38:8b:fb:bc:d9:b9:15:07:82:96:04:21:
                    63:e1:30:e3:de:45:a0:b4:31:6e:5b:cd:6b:e0:95:
                    d5:cc:17:d8:ff:a5:4e:df:33:ce:94:1a:8c:d9:82:
                    9a:23:61:c0:60:6f:40:e8:2d:a0:04:a8:4b:09:b2:
                    43:d3:34:89:9a:ff:d8:7c:6d:ff:5d:cb:57:e8:0b:
                    7d:32:02:45:55:8f:a2:ef:97:1e:96:47:96:e3:8f:
                    20:24:bb:ba:38:ef:5f:18:da:8d:d9:3b:a0:1e:19:
                    ef:1a:73:8f:b2:82:e7:02:f5:2d:86:f7:90:3a:bc:
                    32:21:2f:ac:74:5e:7e:83:0e:c3:4e:d9:b6:82:83:
                    14:4f:de:c4:29:ed:c3:b3:e3:82:e4:67:fa:1d:b7:
                    17:4c:94:a1:c6:88:07:74:a0:ad:ef:41:b1:a0:88:
                    54:ab:1e:6e:e0:03:39:a1:17:d8:24:10:e9:92:33:
                    a7:52:e7:ae:b1:24:3c:5a:21:69:2a:5b:5b:6e:fb:
                    d3:c0:99:9e:81:6e:31:95:ea:89:ec:6a:83:4b:f0:
                    44:4c:5e:87:27:5a:be:21:9b:aa:20:e1:66:10:ad:
                    63:08:1d:e3:a5:ad:96:80:96:a4:4f:11:78:94:07:
                    73:b7:a3:4b:23:ef:11:ee:21:e1:65:7f:10:27:04:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FF:A4:47:FD:66:B2:00:53:A7:A0:A6:6D:4F:3F:13:A8:7D:1E:1F
            X509v3 Authority Key Identifier:
                keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/34E183809E5F11EB97709628C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.26.6.0/24
                IPv6:
                  2001:df1:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:7e:c8:a4:5a:3b:13:07:3f:28:b9:cf:f0:2e:ba:03:1b:
         83:98:f3:a9:f9:74:0c:a8:75:1e:02:26:bf:af:57:f8:2f:70:
         9b:ea:d1:1a:4d:a5:34:43:c3:00:ec:b2:a2:b3:cd:00:8c:e1:
         55:08:51:11:03:78:88:ac:50:65:14:41:ff:22:68:06:cf:01:
         8c:73:84:a2:83:48:ac:bb:33:f5:fb:37:8f:56:b7:2d:b0:2a:
         16:38:e7:d0:d1:5c:c8:ec:33:af:bb:97:68:dd:84:27:c9:d8:
         54:0b:74:7b:7a:f3:14:55:77:84:21:9e:cd:3e:93:59:71:9c:
         ac:9a:c0:60:e4:f1:df:b7:6e:c3:26:c2:83:43:69:16:35:5d:
         a9:b2:cd:32:d2:ad:67:11:89:b1:a0:7c:fb:4b:be:62:13:ae:
         62:4f:7f:05:0a:b3:7b:74:6f:2d:80:79:88:10:a8:ca:d7:0b:
         fc:d1:e5:dc:ff:05:7a:93:ab:7f:67:0f:ec:29:c6:fb:a2:c8:
         dc:76:48:e7:c1:0f:af:11:64:6f:a6:e3:7b:eb:cc:c6:da:f0:
         da:02:af:c1:de:4a:d1:19:78:3e:4d:0f:b5:bc:c2:40:63:89:
         7a:f0:b1:fa:4f:4e:38:11:52:5d:92:92:d7:3b:dd:05:81:bf:
         51:d5:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org