Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/E6EBBE4A64CA11EE97188C5DC4F9AE02.roa
File:                     E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (raw, json)
Hash identifier:          lkUPW5Plclqm1BHJ5OUZqgeMui3FunWtzVBpb4CtvMw=
Subject key identifier:   BD:7B:F2:A5:9D:4A:96:01:04:30:E1:10:3D:A8:82:73:C6:56:B7:82
Certificate issuer:       /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
Certificate serial:       07A8
Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/E6EBBE4A64CA11EE97188C5DC4F9AE02.roa
Signing time:             Thu 02 Nov 2023 22:09:57 +0000
ROA not before:           Thu 02 Nov 2023 22:09:57 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     55745
IP address blocks:        117.55.192.0/24 maxlen: 24
                          117.55.193.0/24 maxlen: 24
                          2400:5180::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl
                          rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 22:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1
        Validity
            Not Before: Nov  2 22:09:57 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65441e34-c3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:c0:9f:cf:a8:08:49:fc:cb:34:01:a4:30:
                    bb:70:76:02:1a:5e:31:c0:63:40:ef:98:c2:f8:24:
                    c7:79:41:c0:32:d4:cc:96:36:fd:bb:84:45:11:d1:
                    18:8f:3a:b3:c4:1e:f4:ec:56:f4:9e:4d:ac:d6:4b:
                    35:00:5a:f3:18:b4:82:ac:94:0c:46:53:8f:cf:6f:
                    5b:61:5a:9f:d4:35:a3:ef:92:34:1c:65:2a:23:c4:
                    e8:ba:39:ff:65:b5:b7:ae:c9:db:94:86:ff:6a:ef:
                    c6:3a:b7:83:1c:c5:74:75:c3:6a:17:35:ca:b5:71:
                    d7:06:fa:19:34:29:db:cf:2c:96:54:d8:ba:ff:3d:
                    e3:e3:91:39:17:66:d7:1a:e2:4f:4a:ef:39:84:6f:
                    5b:0f:e5:a7:a7:62:2f:fe:7f:99:41:0b:b1:ce:5f:
                    0f:f4:04:68:cf:e5:ec:2d:57:d6:73:54:be:97:e4:
                    76:26:ba:68:8f:92:75:51:26:2b:87:c7:05:00:d2:
                    86:4c:60:04:63:b0:ab:2d:63:d1:1b:ed:e2:ad:7c:
                    4c:cc:9f:40:87:4d:25:a3:01:f4:12:c5:d2:67:a9:
                    f6:6d:69:7d:8b:00:b4:41:e7:88:2f:ce:93:1d:40:
                    82:29:14:e7:07:18:19:10:dc:4e:d1:5d:3b:18:da:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7B:F2:A5:9D:4A:96:01:04:30:E1:10:3D:A8:82:73:C6:56:B7:82
            X509v3 Authority Key Identifier:
                keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/E6EBBE4A64CA11EE97188C5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.55.192.0/23
                IPv6:
                  2400:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:1a:5a:c8:59:1c:45:e4:c4:20:5c:fb:3c:ef:df:58:03:
         8a:e2:46:cf:f6:dd:92:e2:30:8b:0f:75:d0:86:cf:29:fa:a5:
         a4:06:44:51:c7:a0:ca:90:c3:f0:ba:0a:54:3d:0a:e8:17:be:
         b4:49:70:a1:df:6d:b3:9f:5d:c1:02:2d:62:30:3e:6d:d5:21:
         1c:ad:9f:0c:3a:4e:53:55:62:b2:9d:11:18:b1:14:b8:76:f7:
         39:5e:ea:8e:d9:7f:93:2e:f4:52:12:43:87:77:11:88:15:ed:
         96:3f:70:a8:f4:55:e5:29:ac:b0:17:84:b8:69:fb:6b:65:dd:
         8a:c4:7d:bb:db:50:7c:e9:23:d2:ac:48:67:dd:e2:d5:47:27:
         8f:fa:c2:a8:ad:d0:1e:0d:1b:15:69:f4:ab:be:14:a1:3d:d3:
         f5:fe:f6:ce:97:fb:4e:f6:82:e8:64:0f:60:f5:1d:3a:66:d1:
         c2:25:ec:f4:78:99:20:18:78:ad:ae:3a:4f:f4:fd:00:f5:cb:
         f7:e1:66:c7:dd:f0:f6:1a:b5:73:0d:4f:ba:d3:a3:0a:70:5f:
         0c:e7:c2:57:33:9b:a6:89:bd:84:9e:4f:20:12:bc:af:eb:8e:
         e2:5b:38:96:ec:97:54:36:4a:98:71:88:06:b8:34:b1:c0:8b:
         bd:d4:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:04 2024 by rpki-client on console-fra.rpki-client.org