Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa
File:                     4AEE35608DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          PZLTBMkC0d0yx39JKyMqcPkJkoep9QbhBvKPd7r2IDU=
Subject key identifier:   98:02:E7:73:D5:39:79:AA:AF:12:F2:EB:0E:E8:CA:A7:09:95:B5:16
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       33F3
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Tue 20 Jun 2023 14:50:39 +0000
ROA not before:           Tue 20 Jun 2023 14:50:39 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     58544
IP address blocks:        58.181.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13299 (0x33f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jun 20 14:50:39 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6491bcbf-543f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ee:99:6e:d9:8c:30:7f:f0:38:eb:89:f1:72:
                    90:85:fe:24:b8:61:9a:c5:87:62:f2:54:56:e3:38:
                    3b:05:09:ea:fb:b2:0b:49:03:f0:58:0d:21:43:7b:
                    fb:76:50:df:f5:c6:62:c2:9b:70:57:67:d2:52:81:
                    47:b8:77:7b:51:94:98:e7:70:d7:67:01:0f:f6:5c:
                    98:9d:a9:a7:79:b2:5c:62:bf:83:b6:a5:8b:73:13:
                    2c:fd:f6:d6:5a:93:33:0f:4f:e4:9c:3c:53:e4:71:
                    6d:3d:73:d9:75:29:25:bb:f3:cf:ca:f9:1b:52:c7:
                    19:61:6f:19:44:36:ca:e1:c3:5e:3c:f5:dd:8b:84:
                    68:40:a6:a0:57:30:59:e6:b3:26:ff:22:69:b3:df:
                    e9:a8:1c:66:3f:ce:b3:e9:7f:48:84:31:4a:8e:ca:
                    54:b7:ab:9e:95:3c:38:63:f4:37:56:b1:52:9f:10:
                    ac:a1:46:bf:cc:9a:ab:f9:e0:33:cd:b8:06:36:69:
                    18:5f:f4:ad:50:1d:9a:5e:3f:d9:c4:ee:6d:e5:6f:
                    c5:c2:a2:b4:17:2b:ed:af:48:87:1c:71:75:8e:ba:
                    23:68:63:5b:61:6b:6e:55:99:38:00:09:13:dd:a1:
                    ae:56:28:bb:db:33:99:d3:e1:fe:54:19:bc:e1:63:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:02:E7:73:D5:39:79:AA:AF:12:F2:EB:0E:E8:CA:A7:09:95:B5:16
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4AEE35608DB811E98ACC9F7EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:ef:7a:e5:91:19:d0:31:03:ae:83:e6:4a:9b:c4:bc:6a:
         7b:83:dc:94:35:d3:36:c4:02:38:e9:30:01:95:41:69:4b:9f:
         72:34:69:bf:82:b4:2a:2d:7b:da:74:3c:26:46:dc:88:8f:9c:
         6a:bb:fb:4a:92:0e:0c:b8:87:64:b5:cd:b9:4d:d2:9f:ce:8f:
         43:a9:05:85:ce:8e:ea:73:3f:1b:ca:cd:d5:60:bb:48:7f:ae:
         f2:d6:52:ca:cd:83:a1:01:89:d7:dd:08:96:42:82:92:9d:2b:
         34:e5:38:05:73:ec:96:88:f5:6b:ec:6b:8e:86:02:0f:5d:a5:
         0b:3f:07:02:50:5c:6f:5f:3c:75:36:38:b3:9f:6f:2e:c3:26:
         36:13:49:3d:d6:26:37:65:d3:60:dc:46:86:43:a8:fe:77:a1:
         84:83:4f:5e:68:2d:cf:4d:19:ba:27:f6:4f:a0:5c:25:e2:a4:
         7b:6a:35:e1:9d:51:8a:e5:c3:f1:fd:45:e6:e0:ce:9b:74:8d:
         29:12:1b:b8:97:ab:db:62:e7:57:d0:89:ae:d1:ed:84:89:d8:
         0c:f3:8c:83:39:5c:ac:41:c7:56:a0:92:1e:bc:30:12:5c:8d:
         64:ce:1b:76:5c:3c:cc:6f:d4:07:a5:27:3d:77:81:da:cf:21:
         29:10:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:40:57 2024 by rpki-client on console-ams.rpki-client.org