Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa
File:                     E0D37D808DED11EEB1192A11C4F9AE02.roa (raw, json)
Hash identifier:          Mgrz2Ka8Ol/QGsvqF7QupH9cfmmj9iDK1y5kYqbpx+U=
Subject key identifier:   D9:6A:69:73:3B:07:D4:E1:0C:B3:AC:9E:2C:D9:86:B0:9E:0B:AD:55
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       40C0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 12:58:51 +0000
ROA not before:           Tue 28 Nov 2023 12:58:51 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     45900
IP address blocks:        202.58.245.0/24 maxlen: 24
                          2001:df4:d600::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16576 (0x40c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Nov 28 12:58:51 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6565e40b-6dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:55:a2:42:40:b0:20:e8:db:de:6b:61:10:
                    ce:a1:10:24:a9:63:ac:dd:81:61:07:29:92:4c:b9:
                    91:7d:58:53:70:06:8f:88:0a:37:89:f4:a8:e4:00:
                    b5:99:a3:2b:1c:6b:e6:3f:fa:23:23:70:40:6d:41:
                    ca:26:cd:89:fa:e5:3a:c5:75:79:b7:25:73:98:f3:
                    e6:45:f8:d6:3f:21:2c:29:22:31:e2:ec:44:f8:e1:
                    06:ae:39:4c:0a:e2:6b:68:33:00:51:a1:74:2e:17:
                    ed:47:d3:ab:3b:e5:da:eb:ec:4e:3f:37:70:c6:52:
                    de:f8:0f:33:67:ae:b4:f7:c0:39:14:1f:e3:31:8e:
                    7e:c7:ee:e6:cc:f3:26:6d:b5:1f:23:d3:d1:70:0f:
                    97:34:2c:83:5f:e3:06:da:df:cd:e1:aa:de:ee:72:
                    30:83:87:8d:8e:e7:35:ef:de:3e:25:fc:6c:17:19:
                    ce:c8:d9:b3:ab:05:30:7e:89:81:4d:1b:7f:a2:7c:
                    27:b5:76:2e:98:ca:3a:91:82:ce:4f:1f:37:b4:f9:
                    84:fc:4a:0c:49:6b:a4:76:22:4e:99:2f:42:3e:7c:
                    e2:18:9f:89:b9:38:86:9f:b2:8a:1b:89:23:10:1e:
                    45:a4:b2:56:e0:45:39:5f:4e:ef:4e:fd:71:09:6d:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6A:69:73:3B:07:D4:E1:0C:B3:AC:9E:2C:D9:86:B0:9E:0B:AD:55
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.245.0/24
                IPv6:
                  2001:df4:d600::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:22:98:d5:ba:f4:44:e6:b3:cf:a7:dd:9f:bb:5c:38:ac:
         81:3d:de:1f:ef:02:03:72:99:17:2c:d3:22:f9:18:42:a0:fa:
         3d:c0:30:d4:c9:ff:b6:72:3a:21:17:ca:c7:d6:18:02:d2:61:
         17:33:a8:98:aa:33:a3:f8:06:00:31:b5:43:60:d3:fc:6f:f4:
         62:2d:87:41:3c:ff:a8:1d:06:bb:7b:ea:75:bd:db:d9:a0:57:
         c1:c0:3b:97:30:07:a3:80:d4:bd:d7:b0:24:2c:12:c6:22:f5:
         50:4f:b4:05:07:01:7d:e5:73:99:c4:15:9d:0b:bb:49:ae:64:
         bc:ad:64:dd:64:89:8c:c0:41:3f:3b:5d:72:fc:e1:f5:73:8b:
         31:72:d9:45:ca:9d:21:af:14:c2:c0:af:0d:ef:a6:63:fe:2e:
         7e:96:ba:a0:bb:7f:2f:af:4b:22:99:84:dd:bd:bf:13:27:e7:
         71:40:61:a2:d5:53:5e:a2:36:f8:18:7a:86:fc:0a:eb:13:53:
         7b:fc:80:22:c9:b1:f3:c3:61:77:7f:73:82:d5:59:ed:7c:65:
         06:71:ce:49:21:32:7a:ba:da:3f:13:7f:ac:2c:05:b6:37:bf:
         00:4b:06:8e:c4:36:a9:4f:1f:be:8e:96:09:8f:f8:2a:78:f2:
         1c:8a:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org