Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
File:                     E64A79F07FF711EBBDDF9359C4F9AE02.roa (raw, json)
Hash identifier:          VTSKPVyULZJTcY+HHknZbdG68dbyLLfRsY1M3+iR5WY=
Subject key identifier:   49:CE:38:FE:60:89:16:BE:F2:44:4F:07:62:38:07:20:08:78:EE:9A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       3F04
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
Signing time:             Tue 12 Sep 2023 02:43:38 +0000
ROA not before:           Tue 12 Sep 2023 02:43:38 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     38735
IP address blocks:        49.246.128.0/18 maxlen: 24
                          49.246.192.0/19 maxlen: 24
                          113.52.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 14:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16132 (0x3f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep 12 02:43:38 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ffd05a-c873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:13:52:0e:1b:69:df:e6:07:07:4e:ac:8e:
                    84:f4:d2:a3:99:e0:9f:6f:dc:e9:1d:ea:c9:d2:a3:
                    dc:be:0c:33:6d:60:e8:89:5e:f8:1a:72:f5:14:22:
                    e3:76:97:9f:44:44:60:2e:02:5f:86:c7:9c:68:28:
                    69:ea:b1:ed:4f:b8:cb:aa:65:f8:98:ce:30:5c:aa:
                    42:4e:d3:31:c4:51:47:3c:10:57:cd:4b:b6:c7:05:
                    d4:99:79:7d:98:ea:9b:44:59:63:07:bd:a3:18:43:
                    f2:e1:a8:11:07:5c:59:c5:01:84:69:ae:98:36:f1:
                    73:3d:3c:53:1f:b9:53:f6:82:09:87:46:39:e0:f3:
                    37:9a:96:58:83:ad:85:93:33:10:c2:34:dc:31:f3:
                    ba:93:20:0f:de:3b:a9:72:82:6f:00:3a:e6:91:f3:
                    24:21:fd:0f:03:f6:d0:09:7d:a0:92:9e:ce:ce:b4:
                    b3:c4:6c:f5:72:2c:46:38:79:67:7d:33:8f:83:82:
                    d4:88:4e:18:a4:7f:ad:08:44:c2:1e:47:29:29:c5:
                    82:52:fa:4e:68:37:17:96:50:43:71:c6:5a:97:d3:
                    58:46:93:93:9e:03:25:8e:1e:2e:80:c5:65:a9:e3:
                    41:e9:eb:1b:30:e1:cd:a6:8f:13:56:18:eb:74:f8:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CE:38:FE:60:89:16:BE:F2:44:4F:07:62:38:07:20:08:78:EE:9A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.246.128.0-49.246.223.255
                  113.52.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:0c:6b:d8:e0:2b:de:a5:18:6e:07:28:96:12:a6:ff:de:76:
         21:d8:ef:7f:04:98:5a:63:f4:47:a0:27:73:d7:6b:4c:f0:f8:
         45:eb:9a:60:13:95:f3:b4:cd:33:a1:02:a9:24:ba:aa:cf:5b:
         6e:1e:a2:82:77:56:ba:dd:5a:ec:59:86:28:8f:f4:cb:bf:d2:
         58:c3:ec:59:5d:d2:8d:ce:96:24:39:03:13:56:1c:ef:09:da:
         01:a7:1f:6f:63:ee:b5:1b:62:61:54:f9:40:15:5d:fe:66:e1:
         76:fa:69:58:14:2f:9c:fb:b0:e0:98:21:86:e0:52:22:60:ec:
         5f:a7:26:b0:b9:5e:2b:9a:6a:ec:0c:3d:29:67:48:4e:11:b3:
         8d:27:ac:d6:54:31:30:58:71:c8:e6:12:66:46:15:14:22:b8:
         bf:41:4c:2f:27:24:77:a6:ce:b5:da:a3:3e:b3:32:8e:4e:cd:
         1f:f6:40:a5:7b:2f:21:01:73:00:f9:a5:f0:b3:5e:56:79:87:
         05:6d:42:97:ee:71:2f:64:39:aa:78:01:e5:69:da:c8:d0:b8:
         e1:b7:bf:25:77:af:08:9e:76:30:4b:89:ea:0d:3b:b1:a3:28:
         c4:32:a7:30:73:17:8e:c4:53:05:8b:ab:20:c1:de:ff:b4:38:
         ce:8e:30:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org