Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/A1FA613614AF11ED8CE9335EC4F9AE02.roa
File:                     A1FA613614AF11ED8CE9335EC4F9AE02.roa (raw, json)
Hash identifier:          NY+gTLFTqgONw/Im054lXjpnwS9V2SYU25fAyEwIiZc=
Subject key identifier:   A7:E0:86:0B:1E:5A:9C:1B:56:67:DE:76:48:4E:DB:C2:D2:00:C9:33
Certificate issuer:       /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Certificate serial:       0126
Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/A1FA613614AF11ED8CE9335EC4F9AE02.roa
Signing time:             Sat 09 Sep 2023 03:13:56 +0000
ROA not before:           Sat 09 Sep 2023 03:13:56 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     136545
IP address blocks:        59.153.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
                          rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
        Validity
            Not Before: Sep  9 03:13:56 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64fbe2f3-9b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:25:3f:cf:3f:1d:ed:b5:cd:d2:fb:b3:95:
                    a3:02:3b:00:64:cc:f0:d7:15:52:79:e1:93:d8:b9:
                    37:2d:57:48:aa:aa:63:83:f5:ad:26:84:76:d9:fa:
                    a1:5c:8c:54:e7:79:bd:b4:f7:ed:f8:b8:8b:df:7d:
                    dc:2d:31:d9:a3:a6:c6:65:13:eb:e5:92:fa:9c:f4:
                    ae:79:94:68:58:97:cb:df:bb:f5:fa:9c:02:3c:c3:
                    66:51:51:48:38:0a:81:4e:b3:5b:59:16:28:90:4b:
                    42:67:e5:ca:e7:5f:03:8d:45:e9:af:77:f2:7c:82:
                    f6:8c:80:70:9a:01:ca:a2:f7:f6:4d:2e:bc:a7:9b:
                    24:fe:0d:71:08:fa:74:97:96:68:1d:fc:70:ec:b0:
                    da:c4:57:f1:15:92:4e:db:e1:dd:1e:4e:50:48:f6:
                    18:f4:6a:85:fd:00:c8:a1:f7:3b:af:64:17:12:f2:
                    57:4d:02:b2:8a:3f:5e:c3:ee:ea:3d:66:c6:91:9b:
                    2e:f0:a6:99:b6:30:10:60:55:cc:53:b0:b9:f0:bb:
                    f4:02:31:f5:d9:05:32:87:2c:82:b7:50:e9:0b:39:
                    6e:93:e7:71:20:4e:be:12:a1:d9:85:59:c5:49:d3:
                    b1:d9:4a:1c:67:8c:4f:d3:4c:4f:8d:f2:9e:ef:71:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:86:0B:1E:5A:9C:1B:56:67:DE:76:48:4E:DB:C2:D2:00:C9:33
            X509v3 Authority Key Identifier:
                keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/A1FA613614AF11ED8CE9335EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:da:7e:12:63:32:fa:9e:54:bb:25:96:7c:89:32:2a:59:10:
         08:9d:c6:2f:8b:0b:9c:03:9e:fc:df:1b:ae:64:1b:a8:9e:43:
         cf:03:d4:42:61:e4:3f:6d:95:d4:ba:1e:f0:86:e8:89:b6:54:
         61:3e:01:b8:da:2f:79:f5:d2:3e:37:5a:1f:1c:7a:6c:09:98:
         6f:60:a4:67:03:9e:fe:06:09:df:54:80:1c:d3:35:26:09:c7:
         ca:d4:ff:7b:83:53:af:6f:13:6f:93:a9:fd:40:15:25:d2:75:
         fb:32:10:bd:37:1e:9b:2f:3b:55:a0:79:4d:55:49:6b:63:d3:
         e2:e2:df:2b:43:81:04:00:ef:4b:11:ea:73:a7:75:02:9c:07:
         6b:16:ac:dc:82:39:ec:23:58:5e:6e:04:65:24:38:bc:68:a8:
         19:86:59:65:d2:06:21:29:b6:1a:d1:75:c5:08:44:41:30:6d:
         4d:8d:5e:4b:9f:89:bb:c2:7b:e6:d4:ad:ce:a7:1f:bf:d1:5a:
         7d:bc:8d:7d:9e:c2:5e:c3:3a:54:6f:ba:f1:2d:ae:41:4c:1c:
         4b:6d:41:39:ea:a2:a7:12:99:d6:46:a2:ad:f6:82:24:84:bc:
         28:27:a1:b3:7a:9b:47:aa:65:9f:89:3a:4a:ca:5f:4c:6f:c3:
         c8:ca:40:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:35 2024 by rpki-client on console-fra.rpki-client.org