Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa
File:                     B0FA33FE6F9611ED8A672F69C4F9AE02.roa (raw, json)
Hash identifier:          f3xsfgUaUyKStz30gYptioQUPvZVo0pHRD1ULMfg5N4=
Subject key identifier:   57:B3:2B:4B:BC:DC:6A:90:AD:25:8E:2F:8C:96:AF:34:72:DA:B1:B0
Certificate issuer:       /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial:       0160
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa
Signing time:             Thu 05 Oct 2023 03:23:44 +0000
ROA not before:           Thu 05 Oct 2023 03:23:44 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     4826
IP address blocks:        146.144.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
        Validity
            Not Before: Oct  5 03:23:44 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=651e2c40-73a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:63:d8:6d:52:84:ea:02:c1:d0:87:bb:f0:98:
                    0a:36:91:66:67:ca:01:c9:91:82:67:e0:23:50:71:
                    76:49:23:f2:e5:c7:96:ed:72:65:c5:50:42:69:e4:
                    92:f5:bf:4d:05:ec:a1:93:0b:bb:92:a5:c2:0b:af:
                    1c:d0:28:e3:f7:bb:94:e4:c2:65:3b:08:50:76:cf:
                    33:74:c5:ab:eb:f5:d2:6f:e5:1b:63:a2:79:68:19:
                    a4:9a:a3:49:9a:e1:ab:a3:29:c9:ac:0e:31:ca:34:
                    4a:a8:62:99:81:f8:0c:fb:99:57:e0:d1:0f:26:bf:
                    5b:e7:05:f9:b5:63:ec:a7:e2:54:f3:99:42:fe:5a:
                    a5:b2:ad:c7:7b:fd:aa:f9:cf:18:91:84:92:ac:19:
                    c0:04:26:60:7b:e3:63:5d:6b:18:ca:d8:c4:90:0d:
                    d3:29:3e:c6:85:f3:2f:5f:81:3d:e9:be:21:de:ad:
                    33:3e:65:bf:06:64:55:25:9a:17:76:30:c8:68:3d:
                    54:44:54:0e:36:d9:23:29:ac:64:18:b6:08:d8:3b:
                    b2:58:5d:83:68:56:ae:1b:5e:12:90:2c:68:d9:83:
                    2d:25:26:cd:3d:af:5f:b3:95:1c:ac:6d:60:6d:6f:
                    4e:3b:18:c8:82:71:7a:5c:3e:20:0a:61:a5:ff:5f:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B3:2B:4B:BC:DC:6A:90:AD:25:8E:2F:8C:96:AF:34:72:DA:B1:B0
            X509v3 Authority Key Identifier:
                keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.144.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a6:24:29:43:c1:59:7b:42:ca:63:85:61:98:10:1b:8f:22:
         63:a4:4a:41:1a:e1:e6:d0:2c:59:ad:0f:83:f4:a2:46:d2:92:
         ef:41:18:8c:cf:2a:a0:70:18:6f:72:79:b9:d5:43:ab:96:13:
         0a:2d:14:df:d2:7b:2d:c2:a2:ae:2a:2d:c0:9e:6b:8d:14:4c:
         94:6a:66:f0:a2:79:ea:58:17:6e:7b:94:37:7e:5e:bc:30:80:
         08:9e:5f:98:65:b0:90:e5:5b:ec:80:0a:43:e6:f0:37:d2:f0:
         bb:1d:89:43:a0:f3:67:ba:26:7b:9d:dc:1a:dd:1e:e5:76:39:
         4c:22:53:97:8b:df:db:62:c3:a1:30:7f:77:31:01:83:c7:37:
         27:91:99:a6:d9:f2:22:49:b5:b1:d8:29:a7:ea:08:54:12:42:
         69:41:3b:8d:f6:75:2a:2f:ba:52:03:3f:7c:90:2b:ad:a0:19:
         4b:65:34:20:eb:c2:49:a4:61:6c:2a:72:e5:6b:6d:52:bb:f1:
         75:4d:41:75:e5:e1:3e:48:ab:92:2b:aa:5c:e2:d8:71:7a:e7:
         83:22:56:99:9e:6a:37:8f:5f:b9:f7:d0:68:80:b8:2e:ea:b4:
         f0:9f:c3:c6:fd:ea:31:09:48:75:13:46:12:3c:d8:88:07:9c:
         49:fc:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:36 2024 by rpki-client on console-fra.rpki-client.org