Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/59C3EE36683611EBAF38B01FC4F9AE02.roa
File:                     59C3EE36683611EBAF38B01FC4F9AE02.roa (raw, json)
Hash identifier:          d6l3p7b5QLmH1bjngVG26hOf6Jj1bEFLyX+nZRQhlE8=
Subject key identifier:   DD:93:3D:10:CE:C8:0B:94:B7:21:9C:24:7D:EE:FE:BF:C3:4C:A0:98
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       05F7
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/59C3EE36683611EBAF38B01FC4F9AE02.roa
Signing time:             Thu 12 Oct 2023 23:11:21 +0000
ROA not before:           Thu 12 Oct 2023 23:11:21 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     13443
IP address blocks:        2405:2300:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Oct 12 23:11:21 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65287d18-6516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:c0:47:dc:f3:38:46:dc:0a:22:29:93:fc:
                    c6:9c:49:28:ad:0b:2d:79:74:5f:20:35:f0:95:52:
                    53:f5:e9:fa:07:66:ec:65:0d:7b:8d:0d:19:93:0b:
                    a6:e7:55:b8:fb:5f:7b:7a:cb:a8:e0:e5:ff:06:a4:
                    46:4f:28:3c:c2:2c:54:9f:17:cf:6a:a9:bc:3a:6d:
                    49:15:15:59:bc:2c:03:a8:39:c2:d7:e7:22:57:27:
                    b7:0d:e2:79:b1:36:3c:8f:b7:5b:ff:94:d9:29:0c:
                    5b:d5:f6:f5:3b:a5:fb:a5:6c:26:07:c6:7c:fc:bb:
                    10:6e:94:a4:ed:2f:eb:b0:bf:f0:05:6e:84:e5:f3:
                    dc:1c:4b:64:4d:ae:c4:c0:10:66:9b:b2:26:c7:69:
                    d7:85:4f:a4:23:b7:a9:35:05:41:2b:e3:27:0f:ee:
                    87:49:22:7b:89:24:2c:f8:65:e3:80:51:37:29:82:
                    12:32:0d:70:bc:64:d3:b0:7b:16:2f:9f:95:f3:28:
                    1d:4e:63:78:ce:f0:5e:ef:5f:e2:c8:ce:7a:89:c4:
                    a2:4b:80:71:ef:49:36:8f:5e:25:13:9f:12:6e:bb:
                    28:2d:50:d1:db:13:62:18:ef:50:f0:33:44:5a:7e:
                    e1:8c:ec:4c:cb:c5:d6:32:2b:8e:86:2f:0d:0d:a1:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:3D:10:CE:C8:0B:94:B7:21:9C:24:7D:EE:FE:BF:C3:4C:A0:98
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/59C3EE36683611EBAF38B01FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2300:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:20:9f:a5:1c:87:a1:c7:24:dc:16:fa:4f:bb:02:68:8e:
         e2:77:75:d7:92:0a:33:9f:25:2a:43:81:d3:f6:43:8b:51:22:
         ff:48:a6:6e:2b:f7:bc:a2:cd:0c:a3:e9:33:7b:87:ec:2f:6b:
         04:1f:b0:ef:ff:dd:bf:32:f0:2f:49:22:b1:37:5c:28:30:b8:
         da:f0:37:e8:8e:79:f7:be:7c:f5:dc:98:fd:75:ad:30:93:93:
         78:4c:d0:a8:16:e8:64:0c:f6:e2:11:fa:3c:ab:a1:ff:49:9e:
         e7:d1:c1:50:0f:18:53:16:4a:c1:76:5f:76:e1:73:58:ac:4c:
         32:bf:70:39:4a:72:c0:8a:08:77:5b:ca:ba:63:58:a0:e1:30:
         d7:e7:ba:ff:11:95:f3:47:ec:e8:89:3d:53:b3:96:d8:da:79:
         e0:f0:27:41:c4:f7:22:ff:8e:70:63:6b:b2:af:95:15:43:10:
         f0:09:5e:e0:db:e2:70:b3:3b:25:30:c5:87:4f:32:d8:98:90:
         0b:02:a6:78:c5:91:21:81:8b:fd:3d:40:99:ce:f1:04:58:ac:
         8c:eb:14:6c:90:d0:15:eb:fd:eb:a2:77:65:e1:83:9c:55:fa:
         62:46:ac:07:42:00:3f:45:f9:88:fb:e6:b5:a6:97:62:a9:c7:
         1a:6e:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:01:17 2024 by rpki-client on console-ams.rpki-client.org