Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa
File:                     593AFF1ACA0611EEBA01A22CC4F9AE02.roa (raw, json)
Hash identifier:          OJ4fpN3cmDk3uuK8aUmty/8y+YQxN8L4Ij0QimxgngE=
Subject key identifier:   0B:59:FF:86:29:7E:4B:FA:6E:E4:05:D2:9F:C4:E7:1E:73:1A:27:C0
Certificate issuer:       /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial:       03
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa
Signing time:             Tue 13 Feb 2024 00:25:11 +0000
ROA not before:           Tue 13 Feb 2024 00:25:11 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137958
IP address blocks:        202.47.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
                          rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
        Validity
            Not Before: Feb 13 00:25:11 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65cab6e7-7a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:4a:e7:03:9c:68:ae:90:1e:11:d7:e3:9e:
                    ef:c6:66:ab:ce:f2:85:a2:7a:e4:3b:42:59:1c:f6:
                    2b:4d:e7:b9:4b:0e:55:38:dc:d4:7b:c5:f4:4d:23:
                    ea:af:27:e4:57:ea:7a:d1:82:4f:4a:9c:5b:d6:b9:
                    5f:1f:96:ed:ea:39:40:ba:3d:70:bb:4c:64:7b:a9:
                    65:03:3a:5e:81:97:4d:c7:21:b4:13:1c:7a:4e:76:
                    f5:a7:22:6d:47:ac:23:d2:ba:96:e0:66:89:98:bf:
                    c7:d8:d7:d7:f1:83:f5:86:30:7f:21:f1:7e:d8:0a:
                    11:54:3e:c9:e6:c8:17:34:60:3a:da:7a:a1:d4:27:
                    d4:bb:70:ef:f9:4c:e1:5d:65:48:7f:34:c7:34:05:
                    58:96:ca:3c:4b:be:73:bc:c0:b7:27:49:8a:2f:4c:
                    39:1d:74:7e:b0:69:ae:30:49:fa:5d:d9:92:c7:ec:
                    71:70:2a:0b:ae:f2:8b:58:30:f8:4b:e1:71:34:48:
                    ca:39:f5:b0:03:c1:95:81:63:3b:ea:9f:96:4c:91:
                    79:88:10:86:08:1c:e7:c8:68:c5:1d:2f:d3:48:ef:
                    1d:0c:8b:7d:c1:ef:9f:c3:a3:24:83:56:65:ba:d1:
                    ff:51:28:f1:6f:75:df:4c:89:b4:18:1b:17:bf:09:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:FF:86:29:7E:4B:FA:6E:E4:05:D2:9F:C4:E7:1E:73:1A:27:C0
            X509v3 Authority Key Identifier:
                keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/593AFF1ACA0611EEBA01A22CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:32:7b:14:9a:3b:d2:0a:c2:82:c5:e9:b2:0a:10:a4:bc:
         77:aa:cc:d7:3f:a6:ee:dc:36:2f:e3:87:94:b3:12:49:d6:9e:
         e9:87:21:85:15:9d:1a:eb:df:b1:db:8b:69:6c:1a:3f:8b:ba:
         7c:c0:6f:3a:91:f8:76:36:cf:44:d9:ab:6f:aa:46:96:ed:c6:
         b9:34:06:13:78:9b:b5:44:65:fc:4b:68:db:59:ee:cf:96:ef:
         0f:fc:d2:39:d8:d6:0e:31:92:be:10:27:3d:85:97:cf:6a:eb:
         e5:04:96:c7:4e:f5:62:04:4b:aa:52:35:4f:1c:3b:b9:9c:07:
         59:6e:42:14:ae:3d:ea:55:da:23:96:df:da:87:a2:b8:d0:c0:
         25:29:b8:07:57:3e:f7:ac:d8:ad:31:5f:b1:c4:a8:75:a9:17:
         08:5b:23:63:a8:e5:ad:76:ed:9a:5a:81:1f:fa:0c:19:9f:f1:
         af:b6:cd:c3:1e:dc:1b:25:52:e6:89:84:3a:8b:f0:c4:4b:03:
         d4:17:c5:a2:5b:b5:24:ea:b2:4f:fc:29:a2:34:70:84:ac:fa:
         71:2a:d8:76:88:9a:50:f3:47:67:1b:b5:cc:ed:7c:b2:fc:0a:
         19:16:19:72:94:e8:ef:97:c6:b0:e6:3d:d8:19:e2:2b:f9:7a:
         b6:9d:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org