Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/45598DB8FA1611EA9C6CE978C4F9AE02.roa
File:                     45598DB8FA1611EA9C6CE978C4F9AE02.roa (raw, json)
Hash identifier:          gORNfp8EF7+Nyqco8O51JKHceZDE2ToJOAPUBBi1FKY=
Subject key identifier:   C0:DA:BB:60:48:DC:64:49:81:11:CE:A2:88:C0:1D:E7:A6:2E:2C:F0
Certificate issuer:       /CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
Certificate serial:       3400
Authority key identifier: C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/45598DB8FA1611EA9C6CE978C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 14:40:33 +0000
ROA not before:           Sun 02 Jun 2024 14:40:33 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     141016
IP address blocks:        202.57.56.0/24 maxlen: 24
                          202.57.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl
                          rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13312 (0x3400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91619BE/serialNumber=C316319585EE2CF247B5350371467DC269DC9CE5
        Validity
            Not Before: Jun  2 14:40:33 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665c8460-68a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:23:18:36:cd:f4:ad:85:b7:2d:cc:a6:d8:
                    b0:03:f2:73:f7:e6:57:ef:e8:d4:8e:8c:dd:ae:84:
                    fe:5c:8e:fb:ca:d5:03:f6:77:e7:25:cc:5c:93:bf:
                    72:e1:d6:d5:bd:aa:02:70:e3:e9:92:bc:18:22:52:
                    07:8c:f7:9d:a8:6f:4b:c6:7b:0d:6c:db:f3:94:0f:
                    f7:55:32:23:54:75:ef:60:3a:2a:1f:62:98:69:41:
                    57:91:db:1e:bd:d4:1a:79:99:26:65:73:49:6b:7f:
                    df:0e:25:53:68:8e:d5:33:94:ed:46:7b:4e:c8:2d:
                    c6:f0:ad:71:c0:45:ee:a0:cf:ba:5d:c4:a7:cb:d6:
                    64:58:10:ab:2e:01:0c:52:15:b1:43:f7:de:ed:8e:
                    9d:ff:7e:a7:d6:30:f9:3b:37:8a:0b:2b:ef:3b:4e:
                    26:ee:14:0b:1d:f9:3f:0a:c6:2d:09:3a:dc:99:99:
                    53:0c:2b:f4:da:fa:6c:a9:8e:97:68:f1:4e:8c:7e:
                    f8:72:44:e0:30:72:5a:c4:5a:b8:08:cd:ef:e4:ad:
                    76:9b:f0:71:20:cf:13:9b:d5:43:7b:b2:1d:7e:c2:
                    a8:d2:63:9d:96:98:db:0f:93:d4:8b:16:25:4a:a6:
                    78:8a:79:a6:63:90:9e:1c:b4:2b:b1:4d:4e:68:21:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DA:BB:60:48:DC:64:49:81:11:CE:A2:88:C0:1D:E7:A6:2E:2C:F0
            X509v3 Authority Key Identifier:
                keyid:C3:16:31:95:85:EE:2C:F2:47:B5:35:03:71:46:7D:C2:69:DC:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxYxlYXuLPJHtTUDcUZ9wmncnOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619BE/752991C61D8511E293861BDC08B02CD2/45598DB8FA1611EA9C6CE978C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.56.0/24
                  202.57.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ad:39:17:2a:d2:7a:53:0a:d6:84:97:ba:11:46:46:53:27:
         2e:fb:a4:cc:0b:9e:2e:96:da:b1:1d:af:f5:3e:96:26:e2:3a:
         e7:2a:0b:04:5a:b2:67:03:e0:96:32:4b:12:e3:eb:9a:0c:73:
         e5:ab:9c:b2:4d:33:52:54:8b:79:9e:32:e1:3b:d5:08:e3:17:
         25:07:2d:18:6d:71:77:64:38:29:ce:34:38:c3:43:95:e5:7c:
         da:8c:e3:87:69:c2:11:7b:23:8a:42:89:a7:b6:8a:5d:20:05:
         fb:bc:15:56:a8:da:58:3b:16:b1:85:fb:5d:13:96:d4:e3:34:
         0d:9b:9b:a6:6f:bb:3a:69:71:a6:47:ee:db:16:42:4e:e2:23:
         0b:e9:6e:57:0c:4b:e0:a8:07:b6:a1:9d:ed:6c:57:27:09:17:
         d0:49:ed:30:3c:e5:19:90:1e:6a:b5:88:2c:d6:14:52:be:39:
         f4:42:32:cf:e3:5a:5a:df:fa:8d:d5:d5:e6:68:c3:3c:97:f8:
         85:15:63:a0:85:94:a5:e4:74:c0:59:e6:50:5d:a0:33:d5:1b:
         67:c6:18:7c:40:06:fa:f9:41:03:93:31:98:7c:8e:8f:8e:7d:
         50:fa:2e:76:b3:53:96:22:6d:3d:0d:c3:40:e1:ff:e0:7b:31:
         cc:52:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:49:13 2024 by rpki-client on console-fra.rpki-client.org