Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/4EA30D28F0F811EDAE504410C4F9AE02.roa
File:                     4EA30D28F0F811EDAE504410C4F9AE02.roa (raw, json)
Hash identifier:          A1dDnOIoDeFpHQcul8KxpCruOX0b8MNtaS5se/nPEK4=
Subject key identifier:   97:B6:E5:B7:C8:BF:E9:FB:30:3C:52:98:39:84:BB:1B:73:56:6C:26
Certificate issuer:       /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial:       0C8A
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/4EA30D28F0F811EDAE504410C4F9AE02.roa
Signing time:             Fri 12 May 2023 19:07:59 +0000
ROA not before:           Fri 12 May 2023 19:07:59 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     133542
IP address blocks:        59.152.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
                          rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Oct 2023 13:23:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3210 (0xc8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
        Validity
            Not Before: May 12 19:07:59 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=645e8e8e-60b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:af:f0:a5:da:05:02:ca:8a:d2:d2:3b:e5:
                    dc:ae:8b:18:1a:84:e1:06:9c:d7:c0:fc:43:50:da:
                    b1:37:c1:87:27:4e:ad:4a:4d:2a:c0:c4:bb:71:3c:
                    82:11:c0:7c:b1:9a:08:82:bb:91:df:a4:5f:50:e0:
                    ab:c5:65:42:85:5b:46:0b:ae:f0:f3:28:c0:e8:95:
                    2e:10:4c:68:93:a0:00:d2:1a:15:84:ae:4e:b1:4e:
                    92:27:10:66:cc:bf:64:62:47:bf:16:22:dd:66:7c:
                    4c:f1:37:9f:8c:2e:fe:cb:cf:9e:b8:04:6e:fa:40:
                    0d:07:e1:85:79:67:6e:12:14:b8:27:38:b5:1a:79:
                    e3:d6:4e:90:1e:be:ee:74:80:71:ed:44:46:64:50:
                    0d:85:3c:f2:46:e6:ae:38:df:03:ed:0b:80:ac:8c:
                    9d:bc:b1:c2:af:01:82:05:97:8e:08:75:65:34:7a:
                    1d:6f:1e:c6:5f:1b:2f:89:b2:71:14:65:68:e1:56:
                    48:6e:f1:22:28:b2:a1:04:70:4a:cc:8b:dc:e5:c4:
                    0f:1e:74:c9:d0:30:0c:9e:e0:7f:1d:69:1e:29:7c:
                    4c:81:c7:28:9c:ad:80:05:6b:ff:04:f7:d9:2d:f7:
                    0b:f2:40:73:49:ed:be:64:34:29:fb:55:e8:21:fe:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:E5:B7:C8:BF:E9:FB:30:3C:52:98:39:84:BB:1B:73:56:6C:26
            X509v3 Authority Key Identifier:
                keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/4EA30D28F0F811EDAE504410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.152.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:a6:03:b8:45:23:24:95:03:2a:00:53:a2:27:b8:5a:91:
         a1:c7:9d:ac:26:d5:dc:06:4e:93:ac:7d:ec:13:52:78:67:05:
         89:e0:7a:37:be:a2:8d:b6:4b:26:4d:79:3c:a4:fb:8b:9f:1f:
         a3:46:76:dd:5f:e6:2b:9a:d0:a7:cd:88:d1:09:fe:c4:f7:40:
         3a:8c:bf:c9:5a:93:7c:c4:b9:eb:8e:ca:eb:9d:da:d7:b8:00:
         87:46:ad:8b:00:af:b4:5a:09:a7:dc:70:94:bd:7d:bf:5c:34:
         e0:49:e7:ea:2c:96:c0:13:db:03:af:56:11:fa:e8:ce:e8:23:
         64:81:96:7c:08:03:26:09:8c:b0:d1:9f:57:fe:13:46:00:d1:
         65:0a:9f:9b:7f:19:ed:5a:e1:5a:5e:d9:f4:81:19:4e:a6:b3:
         43:ae:ef:76:53:22:48:8f:45:b1:b5:50:32:a9:2d:1b:cb:05:
         1a:cd:18:02:ad:0f:c5:ee:b8:9a:ed:5f:52:9c:8d:7a:38:86:
         a6:ad:40:61:41:12:e2:2e:96:97:6a:ba:4e:b2:79:d2:7a:50:
         2b:e2:8b:f6:26:ad:ce:54:c7:6c:d2:e4:c5:fb:1f:7a:a1:cd:
         43:2b:67:75:19:ac:a5:40:a0:6e:4d:26:93:37:b1:17:9a:dc:
         41:2c:dd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 14:11:03 2023 by rpki-client on console-ams.rpki-client.org