Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
File:                     E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (raw, json)
Hash identifier:          ukXVPSpZE2S3ReUuqRyKgZq1lemkqT2tn0yJ5Ntranw=
Subject key identifier:   AD:FB:53:50:6F:A7:F3:E9:27:12:6B:B3:54:AD:DA:AB:F1:A7:6A:66
Certificate issuer:       /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial:       2502
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
Signing time:             Thu 18 Apr 2024 16:22:57 +0000
ROA not before:           Thu 18 Apr 2024 16:22:57 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     38468
IP address blocks:        123.136.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
                          rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 16:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9474 (0x2502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
        Validity
            Not Before: Apr 18 16:22:57 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=662148e1-33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:6a:f3:61:60:b0:ef:36:21:5a:f7:5b:e4:
                    be:bf:d2:cd:80:17:c0:f7:53:1f:4a:aa:cc:0d:0a:
                    ae:a8:4f:6b:47:43:58:f2:d1:74:11:2c:33:db:78:
                    29:8f:54:28:46:d8:7d:ba:ed:09:0c:1e:47:1c:57:
                    57:ff:4d:a8:a0:d4:81:31:3a:2b:e9:22:d0:e2:64:
                    23:75:92:65:c9:27:ef:4c:3e:cc:1b:5a:c4:84:69:
                    ad:46:0e:79:e4:8c:39:42:b4:4d:f5:db:5e:6d:b4:
                    ca:e8:7e:bc:37:43:22:29:8f:b5:21:1f:9d:e7:84:
                    bc:f4:19:65:e4:d6:35:7d:79:d0:45:79:a9:d1:e8:
                    52:4f:80:6a:b3:d7:d5:94:82:8f:a1:95:e3:13:ca:
                    f4:69:e5:38:60:c5:2a:7a:09:2d:46:03:c3:d7:26:
                    d9:2c:81:6d:ac:b1:ab:87:7e:54:77:ad:39:46:9f:
                    c4:4a:ac:0f:e3:2d:95:86:a3:32:b9:1f:69:bb:ba:
                    b6:e3:7b:07:9e:72:87:40:73:f1:7a:95:67:d3:ea:
                    e3:cf:af:0b:c1:0e:53:8d:9e:23:41:a5:e0:40:1b:
                    2d:4d:80:03:bc:2b:ef:5b:77:36:89:c3:3c:d3:6f:
                    47:c6:d5:09:72:db:df:7b:58:aa:90:db:09:30:d2:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:53:50:6F:A7:F3:E9:27:12:6B:B3:54:AD:DA:AB:F1:A7:6A:66
            X509v3 Authority Key Identifier:
                keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.136.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:04:df:a2:55:c8:13:7c:b3:c3:d1:16:6e:37:8e:e1:ea:
         81:35:14:4f:33:67:1f:d2:4b:fb:82:17:08:92:13:91:1d:5d:
         bd:2c:e4:40:da:11:df:66:a5:88:2a:4e:c2:25:69:8c:4b:85:
         bb:2c:ab:55:42:00:3e:79:e5:ca:10:e2:db:4d:6a:15:6e:90:
         c4:e9:29:44:c1:76:74:74:b2:bc:38:47:b5:67:eb:c5:08:ae:
         7f:b8:95:83:17:9e:a0:8c:08:ac:c0:80:33:9b:d5:2b:0c:d0:
         31:83:2c:a5:86:c6:34:3e:4e:0a:70:85:0c:d8:35:58:31:e3:
         05:d9:f6:e6:29:21:77:8f:65:9e:7a:7f:20:2a:53:73:92:8e:
         be:70:5e:2f:f1:10:d5:df:d2:6e:21:2c:64:ff:ee:3b:f2:a0:
         48:da:49:35:fa:bc:a1:44:18:b5:c8:d4:27:e1:4d:a1:fd:ac:
         6a:68:f4:ec:f1:8b:88:e6:e4:8e:ab:db:ae:04:58:87:cd:f2:
         b8:71:cf:1b:9d:62:07:c0:48:e5:98:e3:46:eb:36:37:07:56:
         bc:1d:ba:27:fd:62:4e:77:99:d6:03:92:a9:d5:e0:ed:8c:35:
         e7:ff:be:8b:50:1c:d3:1f:ae:15:e3:9e:8c:b4:5c:39:25:a1:
         92:dd:9f:a1
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz
QUJCOUM2RjcwHhcNMjQwNDE4MTYyMjU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjIxNDhlMS0zM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxGZq82FgsO82IVr3W+S+v9LNgBfA91MfSqrMDQquqE9rR0NY8tF0ESwz23gp
j1QoRth9uu0JDB5HHFdX/02ooNSBMTor6SLQ4mQjdZJlySfvTD7MG1rEhGmtRg55
5Iw5QrRN9dtebbTK6H68N0MiKY+1IR+d54S89Bll5NY1fXnQRXmp0ehST4Bqs9fV
lIKPoZXjE8r0aeU4YMUqegktRgPD1ybZLIFtrLGrh35Ud605Rp/ESqwP4y2VhqMy
uR9pu7q243sHnnKHQHPxepVn0+rjz68LwQ5TjZ4jQaXgQBstTYADvCvvW3c2icM8
029HxtUJctvfe1iqkNsJMNJdXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK37U1Bv
p/PpJxJrs1St2qvxp2pmMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy
ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzVCNDYvQkEwQjg0MzAwMjg4MTFFNUFFMUU0NzYxQzRGOUFFMDIvRTE0QkRDOEVG
M0VFMTFFQ0JBRTEwMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAN7iBAwDQYJKoZIhvcNAQELBQADggEBAEZNBN+iVcgTfLPD
0RZuN47h6oE1FE8zZx/SS/uCFwiSE5EdXb0s5EDaEd9mpYgqTsIlaYxLhbssq1VC
AD555coQ4ttNahVukMTpKUTBdnR0srw4R7Vn68UIrn+4lYMXnqCMCKzAgDOb1SsM
0DGDLKWGxjQ+TgpwhQzYNVgx4wXZ9uYpIXePZZ56fyAqU3OSjr5wXi/xENXf0m4h
LGT/7jvyoEjaSTX6vKFEGLXI1CfhTaH9rGpo9Ozxi4jm5I6r264EWIfN8rhxzxud
YgfASOWY40brNjcHVrwduif9Yk53mdYDkqnV4O2MNef/votQHNMfrhXjnoy0XDkl
oZLdn6E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:20 2024 by rpki-client on console-fra.rpki-client.org