Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
File:                     4D45F08C1E3B11EFB02B0184C4F9AE02.roa (raw, json)
Hash identifier:          +50v3mlEKF+ZCfC1CHUDd+fzqudaC4LTsu2ANTG7KU4=
Subject key identifier:   AD:A8:49:E7:A7:7D:B5:38:8F:A2:39:87:14:FA:9D:80:7F:66:47:A6
Certificate issuer:       /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
Certificate serial:       42
Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
Signing time:             Wed 25 Sep 2024 05:49:27 +0000
ROA not before:           Wed 25 Sep 2024 05:49:27 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     38079
IP address blocks:        202.12.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53
        Validity
            Not Before: Sep 25 05:49:27 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66f3a467-e504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:ac:e4:73:cf:77:78:08:6e:b7:61:43:8b:
                    f4:50:5f:c6:aa:9d:17:9b:b0:9d:4a:67:d8:f9:d3:
                    99:60:26:a3:cd:ef:85:f6:7e:58:c2:42:6c:d0:b1:
                    b8:07:6c:4e:88:d4:95:8c:1e:ff:c9:f5:e3:2e:3e:
                    e9:c1:d7:68:b0:93:9a:4c:2c:4d:41:dc:42:38:fe:
                    13:4c:e0:c9:d9:d8:bb:56:7c:eb:f8:1c:7a:c2:32:
                    e5:ee:56:e9:91:8a:32:5c:8a:98:68:96:55:c7:00:
                    20:eb:1b:e0:f4:3a:c3:35:5f:16:3f:eb:83:00:33:
                    5f:3d:9d:5d:bd:18:bf:ac:20:8d:36:b8:50:0e:66:
                    41:fc:58:c5:8d:4d:37:71:0a:9b:9d:77:7e:4d:4c:
                    c7:d8:f6:d9:85:51:ad:10:e3:83:8d:ca:4e:88:55:
                    6f:47:e5:72:6d:ca:33:9e:59:be:6e:33:c7:97:4f:
                    60:fa:1d:29:54:9d:6f:66:a3:50:21:a7:b0:ef:11:
                    dd:a6:ef:ae:cc:4b:d7:88:ef:9b:f9:f2:d7:91:98:
                    ee:8c:11:62:16:c9:34:c1:aa:5f:15:4d:92:8a:de:
                    a2:13:ff:ac:71:89:80:b6:a2:70:3f:17:ef:39:4a:
                    99:cc:94:37:ef:1a:fe:cd:a0:d5:ca:07:66:68:eb:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:49:E7:A7:7D:B5:38:8F:A2:39:87:14:FA:9D:80:7F:66:47:A6
            X509v3 Authority Key Identifier:
                keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/4D45F08C1E3B11EFB02B0184C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:6a:c9:c2:09:57:38:42:00:88:02:48:87:89:c0:20:47:
         f6:9c:56:69:6b:c1:fe:8e:bb:11:cd:c8:e5:55:2f:2f:e2:42:
         8f:3f:5e:8b:9d:93:d1:39:7b:83:d9:32:a6:0d:9b:c5:d0:44:
         c0:e4:6f:8b:0c:48:82:01:e5:93:52:3b:47:d1:6e:04:58:34:
         2a:dd:1a:7b:21:ed:e9:75:1a:9c:04:5c:8a:78:e6:80:53:4f:
         92:ff:d0:bf:53:3d:82:a1:93:96:92:01:d4:ec:fd:ed:f5:9a:
         f4:a3:e5:7e:c9:74:0c:12:a7:63:01:4c:66:1d:cb:55:86:25:
         c1:c8:34:6e:f4:ab:51:14:59:9f:19:f9:b7:1f:e5:fd:09:1c:
         36:e7:ff:12:5a:61:48:18:d4:37:5f:8c:77:9d:08:d8:ea:0c:
         c9:01:68:d2:78:f9:fd:75:8a:77:9f:04:26:50:04:7a:a8:77:
         fe:85:6e:32:3b:12:15:79:0b:1c:db:61:65:61:7d:20:e5:c8:
         16:3e:fa:a5:0d:ea:ad:e3:2f:a5:30:04:3d:25:37:f4:1c:b8:
         83:23:17:b0:3a:60:d3:db:d6:0d:e0:2e:50:b0:2f:2e:dd:54:
         fe:46:ad:03:ee:ac:fe:a5:a2:56:c1:76:17:ba:52:ac:d9:8b:
         01:df:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org