Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
File:                     583C86380BB211ED8F05E427C4F9AE02.roa (raw, json)
Hash identifier:          zAvAdjn3YdfOWi8begd0U+EEHGMY5vFuYmmn+BUm3lA=
Subject key identifier:   42:1D:C9:EE:40:6C:86:C5:2F:7A:5A:6D:D9:49:EB:03:E9:BE:A9:81
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3365
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
Signing time:             Tue 26 Sep 2023 14:30:12 +0000
ROA not before:           Tue 26 Sep 2023 14:30:12 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        165.213.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 14:23:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13157 (0x3365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Sep 26 14:30:12 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6512eaf4-9cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:57:2d:7d:a1:93:62:90:72:a2:3d:98:e9:
                    f2:a4:f0:b2:02:39:24:44:55:be:60:63:0e:94:2a:
                    16:1e:90:cf:0f:23:29:83:41:11:82:fd:ba:2f:f7:
                    7c:74:36:a2:4a:35:2d:00:55:b7:11:ca:7d:a3:bc:
                    29:f4:b6:51:ce:6c:e9:54:72:cd:95:fb:c5:1c:d6:
                    a1:9c:24:ff:81:c0:04:4f:75:7e:3a:50:b6:da:59:
                    90:21:21:9b:17:34:ee:08:8e:b3:01:20:da:3a:55:
                    89:28:ea:34:ea:a8:4c:99:2b:6e:54:3e:92:d9:4f:
                    27:19:9b:85:a5:29:38:5a:87:81:93:1a:2f:5c:ea:
                    23:07:1c:ea:70:80:21:81:3d:15:41:07:14:9e:55:
                    36:04:23:28:d6:5b:a6:65:5c:b6:b4:ef:e0:87:db:
                    7e:e9:10:1f:86:3d:15:ce:c9:71:a8:34:ef:25:87:
                    bf:4f:12:b8:22:fe:ad:4f:22:d6:98:59:b5:d0:21:
                    57:eb:6c:8f:85:c3:1f:e3:b7:f2:ff:35:df:91:ac:
                    b4:4e:cd:88:bb:85:5a:2c:1e:3c:8b:6e:5b:31:a0:
                    29:ba:04:75:9f:d7:10:59:f7:20:fb:ea:b3:31:30:
                    42:c3:80:12:53:ab:6a:f9:65:ac:62:2c:91:f6:11:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1D:C9:EE:40:6C:86:C5:2F:7A:5A:6D:D9:49:EB:03:E9:BE:A9:81
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.213.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:41:30:9c:2e:bf:22:37:c2:ac:86:e6:19:8c:5e:e5:66:23:
         df:5b:53:5f:b0:bf:df:be:d1:7b:f0:43:20:ab:88:94:83:8f:
         d4:07:3b:8b:2c:ce:4c:ed:f8:66:dc:7e:f8:aa:b6:eb:bc:fb:
         8d:0b:f4:c3:4e:8e:f5:f6:fc:3b:48:dd:7f:76:68:86:0e:a1:
         f8:b1:c9:b7:46:b2:cb:92:b0:dd:cf:fd:03:a5:1a:5f:34:1e:
         5f:97:7f:9d:0e:08:d0:5b:4c:d5:d6:ce:be:03:02:9d:31:88:
         4e:d7:c7:f2:47:17:82:a5:6e:a4:31:04:be:3f:8f:79:44:38:
         ef:10:cc:3b:4e:03:4e:77:da:01:c8:56:b9:41:eb:96:ac:d5:
         7f:1c:3b:48:d2:4e:a5:c5:db:b2:f3:bd:f2:c1:5a:63:12:f6:
         bf:e0:2d:13:0d:fd:b7:39:4d:7c:e7:32:36:24:2d:6e:cb:c4:
         4f:a1:28:8e:bb:b4:3c:2e:94:63:fb:f9:49:1b:62:8b:cc:7d:
         8f:98:76:19:c4:0a:a1:92:ba:ad:38:a7:ab:1e:e9:38:8d:41:
         45:8b:69:e1:fe:ef:85:29:1e:59:98:7a:24:5c:ba:16:15:41:
         57:17:91:c4:ed:8c:1a:f8:d7:43:db:a9:6b:38:e1:38:32:94:
         c9:c2:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:55:00 2024 by rpki-client on console-ams.rpki-client.org