Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
File:                     04EB22A890CF11EDA79E3741C4F9AE02.roa (raw, json)
Hash identifier:          Dc//RptdYdqc+UthhqzohRNtbiXhqA+PhLKgYPDsUBM=
Subject key identifier:   5D:4F:4F:9B:FC:92:E4:6B:5E:18:F7:2C:05:6B:12:10:71:53:C7:EC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3EAB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:42:20 +0000
ROA not before:           Tue 12 Sep 2023 02:42:20 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     149064
IP address blocks:        2001:df0:2040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 22:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16043 (0x3eab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:42:20 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd00c-6554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:58:1f:72:c9:2e:29:d4:c2:2b:40:08:3f:
                    21:f7:a6:02:a4:ef:cb:dc:01:c2:40:2d:0f:4e:dd:
                    fc:5b:b1:e4:8c:c7:39:a9:8c:b8:0d:f4:0d:23:d8:
                    d9:1b:9d:2d:80:10:3e:bb:a9:e9:0a:1c:aa:89:03:
                    eb:e6:48:d9:c4:9b:90:1d:e9:bb:14:b7:5b:31:06:
                    cf:6d:e6:6f:93:60:5f:33:2f:d5:63:68:b0:d0:cb:
                    09:1e:16:7f:2c:22:5e:1a:2b:4a:3e:72:d2:69:5f:
                    f8:f8:67:8b:e0:17:d8:08:5a:37:76:f9:c7:b4:bf:
                    c3:5e:42:fc:5b:42:6a:b1:8a:65:90:d2:61:02:35:
                    4e:73:8c:bd:7d:02:a8:ca:81:2e:42:d9:1c:28:5f:
                    59:2b:24:a9:cf:92:fa:f6:6f:6c:27:37:ab:f8:43:
                    a1:6a:b5:7a:5b:d3:97:3c:66:db:cc:76:cd:86:fb:
                    12:2a:48:73:b7:c0:ea:85:46:15:ea:79:07:e7:18:
                    d3:00:06:14:40:37:1f:0b:41:5a:e7:6d:5b:98:b1:
                    bb:3f:a1:36:08:fe:7e:e2:c5:1c:39:d0:d8:44:5f:
                    82:75:43:57:5b:e0:bd:90:23:1c:c0:30:ea:25:03:
                    92:71:5f:b2:a0:7c:9b:fc:20:89:aa:04:ac:56:ad:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:4F:9B:FC:92:E4:6B:5E:18:F7:2C:05:6B:12:10:71:53:C7:EC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:b5:bd:96:48:62:fb:69:33:63:f7:4a:85:2e:c1:18:2b:b3:
         6b:06:59:fc:4c:fa:b6:64:d0:a1:d8:50:4b:8a:51:66:01:ee:
         65:e8:f6:8c:5a:94:ac:20:67:73:73:34:48:a2:97:f7:be:2e:
         1e:53:92:9a:f1:d6:73:3b:66:66:c8:cd:35:79:23:4e:d5:87:
         6e:5e:02:d8:54:a5:9e:19:92:ad:94:77:2e:5e:06:a9:1d:fd:
         93:21:8c:62:12:ff:bd:d8:33:4a:6c:f0:4f:cf:a3:8f:cb:4c:
         54:29:31:99:a7:78:31:42:4f:97:40:81:78:6f:d6:c3:7d:48:
         5a:88:fe:72:79:0f:26:6f:72:4c:b0:5f:2b:7e:56:9f:66:3a:
         0d:c8:60:e7:9d:1d:d3:31:1b:e6:0b:53:75:5c:5d:f8:54:9a:
         9f:45:2e:a4:9b:f0:91:7e:0f:79:03:45:49:72:37:d9:d0:a7:
         34:32:6e:83:ef:68:d4:4b:de:47:ab:c6:24:57:d6:29:27:f6:
         bf:ba:bb:40:59:58:75:11:37:3c:bc:fd:b7:a6:7b:ba:12:48:
         ea:57:95:36:02:60:3c:8d:bc:d1:ae:54:58:54:6c:87:be:d6:
         bf:39:41:5a:ba:d6:a2:5c:a4:3d:ea:f7:b8:c7:9c:e1:00:63:
         fc:f6:b6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:08:22 2024 by rpki-client on console-ams.rpki-client.org